Company Portal tab is not SSO compatible

[dechkovanen]

The Company Portal tab does not seem to respect SSO via standard Entra SSO or Platform SSO nor does the CP tab support passkey authentication, likely due to standard WebView API instead of ASWebAuthenticationSession. Disclaimer: I'm not programmer but have bumped into this quite a few times.

Consider the Apple documentation here: https://developer.apple.com/documentation/authenticationservices/supporting-single-sign-on-in-a-web-browser-app

[almenscorner]

I tried this on my end and as long as com.github.macadmins. is in the AppPrefixAllowList I do get SSO inside the webview.

[dechkovanen]

I had totally missed you can configure AppPrefixAllowList for PSSO as well as Extensible SSO. Still, it needs an manually configured extra step to function and would be better if it worked straight away. But I leave this up to you whether you want to play around with this, immediate issue can be considered as "workaround available".