-
Notifications
You must be signed in to change notification settings - Fork 2.7k
Embedded sign-in with MFA #8629
Copy link
Copy link
Open
Labels
Needs: Attention 👋Awaiting response from the MSAL.js teamAwaiting response from the MSAL.js teamfeature-unconfirmedmsal-browserRelated to msal-browser packageRelated to msal-browser packagemsal-reactRelated to @azure/msal-reactRelated to @azure/msal-reactpublic-clientIssues regarding PublicClientApplicationsIssues regarding PublicClientApplicationsquestionCustomer is asking for a clarification, use case or information.Customer is asking for a clarification, use case or information.
Description
Metadata
Metadata
Assignees
Labels
Needs: Attention 👋Awaiting response from the MSAL.js teamAwaiting response from the MSAL.js teamfeature-unconfirmedmsal-browserRelated to msal-browser packageRelated to msal-browser packagemsal-reactRelated to @azure/msal-reactRelated to @azure/msal-reactpublic-clientIssues regarding PublicClientApplicationsIssues regarding PublicClientApplicationsquestionCustomer is asking for a clarification, use case or information.Customer is asking for a clarification, use case or information.
Type
Fields
Give feedbackNo fields configured for issues without a type.
Core Library
MSAL.js (@azure/msal-browser)
Wrapper Library
MSAL React (@azure/msal-react)
Public or Confidential Client?
Public
Description
So I am trying to implement embedded sign-in in my next JS app.
It works fine when policy does not have MFA. But in case of MFA, the redirection after entering user credentials, B2C internally redirects to MFA page inside iframe.
The user wants :
The tricky part is that when loginRedirect is called, MSAL navigates the iframe to B2C's sign-in page, and from there B2C itself handles the flow—including redirecting to MFA if needed. So the MFA redirect isn't something our app code controls directly.
IF there is a solution to this , please help me.