microsoft/quick-authentication

Microsoft Quick Authentication

Web	Android	iOS	Web Demo	Android Demo	iOS Demo	Web Live Demos

Microsoft Quick Authentication is a simple way for you to let your users sign up and sign in to your website using a Microsoft Account (MSA). You are likely familiar with similar offerings from other providers (e.g., “Sign in with ________”) and this offering provides that same capability to connect with people who use Microsoft products and cloud services, such as Outlook, OneDrive, Xbox LIVE, and Microsoft 365.

Backed by Microsoft’s robust Microsoft Account (MSA) service, Microsoft Quick Authentication enables you to drop a small snippet of HTML (or JavaScript) into your site to create a sign-in button or prompt for MSA holders. When they click to sign in, our code will securely authenticate them and provide the necessary details to you to sign them in (or register them for a new account).

Microsoft Quick Authentication is a cross-browser solution, but delivers an enhanced user experience in Microsoft Edge when the user’s browser profile is an MSA. These Edge users—which includes users who have signed into Windows with their MSA—are shown a personalized sign in prompt that incorporates their account information.

Documentation

To learn more about Microsoft Quick Authentication for the web, see Sign in Microsoft account users to a single-page app (SPA) with Microsoft Quick Authentication.

To learn more about Microsoft Quick Authentication for Android, see Sign-in users with a Microsoft Account to Android apps using Microsoft Quick Authentication.

To learn more about Microsoft Quick Authentication for iOS, see Sign-in users with a Microsoft Account to iOS apps using Microsoft Quick Authentication.

Sample Code

Click here to access the web live demos, or browse the source code in the web demos folder.

Click here to access the android demos

Click here to access the ios demos

Contributing

This project welcomes contributions and suggestions. Most contributions require you to agree to a Contributor License Agreement (CLA) declaring that you have the right to, and actually do, grant us the rights to use your contribution. For details, visit https://cla.opensource.microsoft.com.

When you submit a pull request, a CLA bot will automatically determine whether you need to provide a CLA and decorate the PR appropriately (e.g., status check, comment). Simply follow the instructions provided by the bot. You will only need to do this once across all repos using our CLA.

This project has adopted the Microsoft Open Source Code of Conduct. For more information see the Code of Conduct FAQ or contact [email protected] with any additional questions or comments.

Trademarks

This project may contain trademarks or logos for projects, products, or services. Authorized use of Microsoft trademarks or logos is subject to and must follow Microsoft's Trademark & Brand Guidelines. Use of Microsoft trademarks or logos in modified versions of this project must not cause confusion or imply Microsoft sponsorship. Any use of third-party trademarks or logos are subject to those third-party's policies.

quick-authentication's Issues

Ability to override the scopes

Hello,

I know this is just a documentation repo but I couldn't find the one holding the actual code from https://edge-auth.microsoft.com/js/ms_auth_client.js

I'm trying to use the redirect workflow with HTML. I already had a working regular MS Auth solution which uses the MSAL Java lib in the server side to exchange the authorization code for an access token.

The problem I'm facing is described in this other issue AzureAD/microsoft-authentication-library-for-java#676

Basically the JS linked above seems to be hardcoding the scopes there's no way to override them (when using HTML at least).

const msAuthDefaultScopes = ['openid', 'profile', 'User.Read', 'email'];

And the problem is that the Java lib also adds the offline_access role and there's also no way to override; this causes the exchange request to fail as the Java lib is requesting an extra scope which was not granted by the user during the Quick Auth workflow.

Ideally this lib would allow to either fully override or at least add additional scopes when using HTML via a data-scopes dataset attribute or similar.

Right now I've had to stop using the Java lib in the backend but it'd be nice to bring it back.

[Doc][Desktop] Update doc for force_account_selection_for_non_msa config

Remove the *-preview.md files

Because we are going to move the docs to MS learn, some unnecessary files need to be removed.

Add partner_name to the initialization configuration

Typo in quick-authentication-ios-how-to.md

In code sample:

func application(
  _ app: UIApplication, open url: URL, options: [UIApplication.OpenURLOptionsKey: Any] = [:]
) -> Bool {
...

Shouldn't "open url" be "openURL"?

[Doc][Web] Add comment for the id limitation

When users inject the sign-in button by JavaScript, we should point out ms-auth-button cannot be used for other elements. We are going to add a comment into https://github.com/microsoft/quick-authentication/blob/main/docs/quick-authentication-how-to.md

Update demo to show usage of button property show_account_selection_for_non_msa

[Doc] Update the sign-in button size changes

We will change the default button size, starting from v0.6, so the corresponding doc needs to be updated. The latest size will be:

small (20 px)	medium (32 px)	large (40 px - default)

Remove outdated folder demos/iOS/