| Get Started | Sample Code | API Reference | Support |
|---|
The MSAL library preview for iOS gives your app the ability to begin using the Microsoft Cloud by supporting Microsoft Azure Active Directory and Microsoft Accounts in a converged experience using industry standard OAuth2 and OpenID Connect. The library also supports Microsoft Azure B2C for those using our hosted identity management service.
Note that for the preview, only iOS is supported. macOS support will be provided later.
These libraries are suitable to use in a production environment. We provide the same production level support for these libraries as we do our current production libraries. During the preview we reserve the right to make changes to the API, cache format, and other mechanisms of this library without notice which you will be required to take along with bug fixes or feature improvements This may impact your application. For instance, a change to the cache format may impact your users, such as requiring them to sign in again and an API change may require you to update your code. When we provide our General Availability release later, we will require you to update your application to our General Availabilty version within six months to continue to get support.
if let application = try? MSALPublicClientApplication(clientId: "<your-client-id-here>") {
application.acquireToken(forScopes: kScopes) { (result, error) in
guard let authResult = result, error == nil else {
print(error!.localizedDescription)
return
}
// Get access token from result
let accessToken = authResult.accessToken
// You'll want to get the account identifier to retrieve and reuse the account for later acquireToken calls
let accountIdentifier = authResult.account.homeAccountId?.identifier
}
}
else {
print("Unable to create application.")
} MSALPublicClientApplication *application =
[[MSALPublicClientApplication alloc] initWithClientId:@"<your-client-id-here>"
error:&error];
[application acquireTokenForScopes:@[@"scope1", @"scope2"]
completionBlock:^(MSALResult *result, NSError *error)
{
if (!error)
{
// You'll want to get the account identifier to retrieve and reuse the account
// for later acquireToken calls
NSString *accountIdentifier = result.account.homeAccountId.identifier;
NSString *accessToken = result.accessToken;
}
else
{
// Check the error
}
}]We use Carthage for package management during the preview period of MSAL. This package manager integrates nicely with XCode while maintaining our ability to make changes to the library. The sample is set up to use Carthage.
- Install Carthage on your Mac using a download from their website or if using Homebrew
brew install carthage. - You must create a
Cartfilethat lists the MSAL library for this project on Github.
github "AzureAD/microsoft-authentication-library-for-objc" "master"
Note: this will point Carthage to the master branch, so you'll always get the latest official release. If you would like to use a particular version, you can do the following:
github "AzureAD/microsoft-authentication-library-for-objc" == <latest_released_version>
- Run
carthage update. This will fetch dependencies into aCarthage/Checkoutsfolder, then build the MSAL library. - On your application targets’ “General” settings tab, in the “Linked Frameworks and Libraries” section, drag and drop the
MSAL.frameworkfrom theCarthage/Buildfolder on disk. - On your application targets’ “Build Phases” settings tab, click the “+” icon and choose “New Run Script Phase”. Create a Run Script in which you specify your shell (ex:
/bin/sh), add the following contents to the script area below the shell:
/usr/local/bin/carthage copy-frameworksand add the paths to the frameworks you want to use under “Input Files”, e.g.:
$(SRCROOT)/Carthage/Build/iOS/MSAL.framework
This script works around an App Store submission bug triggered by universal binaries and ensures that necessary bitcode-related files and dSYMs are copied when archiving.
With the debug information copied into the built products directory, Xcode will be able to symbolicate the stack trace whenever you stop at a breakpoint. This will also enable you to step through third-party code in the debugger.
When archiving your application for submission to the App Store or TestFlight, Xcode will also copy these files into the dSYMs subdirectory of your application’s .xcarchive bundle.
If your project is managed in a git repository you can include MSAL as a git submodule. First check the GitHub Releases Page for the latest release tag. Replace <latest_release_tag> with that version.
git submodule add https://github.com/AzureAD/microsoft-authentication-library-for-objc msalcd msalgit checkout tags/<latest_release_tag>git submodule update --init --recursivecd ..git add msalgit commit -m "Use MSAL git submodule at <latest_release_tag>"git push
You can use CocoaPods to remain up to date with MSAL with our latest major version 0.2. Include the following line in your podfile:
pod 'MSAL', '~> 0.2'
Note: if you're checking out a particular branch or tag of MSAL, you will need to add the :submodules => true flag to your podfile, so that CocoaPods finds MSAL dependencies
pod 'MSAL', :git => 'https://github.com/AzureAD/microsoft-authentication-library-for-objc', :branch => 'master', :submodules => true
You then you can run either pod install (if it's a new PodFile) or pod update (if it's an existing PodFile) to get the latest version of ADAL. Subsequent calls to pod update will update to the latest released version of MSAL as well.
See CocoaPods for more information on setting up a PodFile
We use Stack Overflow with the community to provide support. We highly recommend you ask your questions on Stack Overflow first and browse existing issues to see if someone has asked your question before.
If you find and bug or have a feature request, please raise the issue on GitHub Issues.
To provide a recommendation, visit our User Voice page.
We enthusiastically welcome contributions and feedback. You can clone the repo and start contributing now. Read our Contribution Guide for more information.
This project has adopted the Microsoft Open Source Code of Conduct. For more information see the Code of Conduct FAQ or contact opencode@microsoft.com with any additional questions or comments.
This library controls how users sign-in and access services. We recommend you always take the latest version of our library in your app when possible. We use semantic versioning so you can control the risk associated with updating your app. As an example, always downloading the latest minor version number (e.g. x.y.x) ensures you get the latest security and feature enhanements but our API surface remains the same. You can always see the latest version and release notes under the Releases tab of GitHub.
If you find a security issue with our libraries or services please report it to secure@microsoft.com with as much detail as possible. Your submission may be eligible for a bounty through the Microsoft Bounty program. Please do not post security issues to GitHub Issues or any other public site. We will contact you shortly upon receiving the information. We encourage you to get notifications of when security incidents occur by visiting this page and subscribing to Security Advisory Alerts.
- If you have not done so already, create an app listing at apps.dev.microsoft.com
- Clone the repository
git clone https://github.com/AzureAD/microsoft-authentication-library-for-objc.git
- Add
MSAL/MSAL.xcodeprojto your Project or Workspace - Add
MSAL.frameworkto your Application's "Embedded Binaries" and "Linked Frameworks and Library Section" - Add your application's redirect URI scheme to your
info.plistfile, it will be in the format ofmsal<client-id>
<key>CFBundleURLTypes</key>
<array>
<dict>
<key>CFBundleTypeRole</key>
<string>Editor</string>
<key>CFBundleURLName</key>
<string>$(PRODUCT_BUNDLE_IDENTIFIER)</string>
<key>CFBundleURLSchemes</key>
<array>
<string>msalyour-client-id-here</string>
</array>
</dict>
</array>See more info about configuring redirect uri for MSAL in our Wiki
Our library uses the ASWebAuthenticationSession for authentication on iOS 12 by default. See more information about default values, and support for other iOS versions Wiki
- Add a new keychain group to your project Capabilities
com.microsoft.adalcache. See more information about keychain groups for MSAL in our Wiki
If you choose to use SFSafariViewController (default on iOS 10) for MSAL authentication, the authorization response URL will be returned to the app via the iOS openURL app delegate method. So you need to pass this through to the current authorization session.
Note: WKWebView drops network connection if device got locked on iOS 12. It is by design and not configurable.
You will need to add the following to your AppDelegate.m file:
- (BOOL)application:(UIApplication *)app openURL:(NSURL *)url options:(NSDictionary<NSString *,id> *)options
{
[MSALPublicClientApplication handleMSALResponse:url];
return YES;
}You will need to add the following to your AppDelegate.swift file:
func application(_ application: UIApplication, open url: URL, sourceApplication: String?, annotation: Any) -> Bool {
MSALPublicClientApplication.handleMSALResponse(url)
return true
}Use the client ID from yout app listing when initializing your MSALPublicClientApplication object:
NSError *error = nil;
MSALPublicClientApplication *application =
[[MSALPublicClientApplication alloc] initWithClientId:@"<your-client-id-here>"
error:&error];let application = try MSALPublicClientApplication(clientId: kClientID) [application acquireTokenForScopes:@[@"scope1", @"scope2"]
completionBlock:^(MSALResult *result, NSError *error)
{
if (!error)
{
// You'll want to get the account identifier to retrieve and reuse the account
// for later acquireToken calls
NSString *accountIdentifier = result.account.homeAccountId.identifier;
NSString *accessToken = result.accessToken;
}
else
{
// Check the error
}
}] application.acquireToken(forScopes: kScopes) { (result, error) in
guard let authResult = result, error == nil else {
print(error!.localizedDescription)
return
}
// Get access token from result
let accessToken = authResult.accessToken
// You'll want to get the account identifier to retrieve and reuse the account for later acquireToken calls
let accountIdentifier = authResult.account.homeAccountId?.identifier
} NSError *error = nil;
MSALAccount *account = [application accountForHomeAccountId:accountIdentifier error:&error];
if (!account)
{
// handle error
return;
}
[application acquireTokenSilentForScopes:@[@"scope1"]
account:account
completionBlock:^(MSALResult *result, NSError *error)
{
if (!error)
{
NSString *accessToken = result.accessToken;
}
else
{
// Check the error
if ([error.domain isEqual:MSALErrorDomain] && error.code == MSALErrorInteractionRequired)
{
// Interactive auth will be required
}
// Other errors may require trying again later, or reporting authentication problems to the user
}
}] let account = try application.account(forHomeAccountId: accountIdentifier)
application.acquireTokenSilent(forScopes: kScopes, account: account) { (result, error) in
guard let authResult = result, error == nil else {
let nsError = error! as NSError
if (nsError.domain == MSALErrorDomain &&
nsError.code == MSALErrorCode.interactionRequired.rawValue) {
// Interactive auth will be required
return
}
return
}
// Get access token from result
let accessToken = authResult.accessToken
}Occasionally user interaction will be required to get a new access token, when this occurs you will receive a MSALErrorInteractionRequired error when trying to silently acquire a new token. In those cases call acquireToken: with the same account and scopes as the failing acquireTokenSilent: call. It is recommending to display a status message to the user in an unobtrusive way first before using an interactive acquireToken: call.
[application acquireTokenForScopes:@["scope1"]
account:account
completionBlock:^(MSALResult *result, NSError *error) { }];Our wiki is intended to document common patterns, error handling and debugging, functionality (e.g. logging, telemetry), and active bugs. You can find it here
Copyright (c) Microsoft Corporation. All rights reserved. Licensed under the MIT License (the "License");