Mac Outlook; createNestablePublicClientApplication silent or popup requests abort in MSAL acquireTokenInteractive()

[thoffmann-fms]

Below snippet of code requests an ID token via Silent or PopUp methods. That code works fine in Windows Outlook, OWA (Mac or Windows), but fails with Mac Outlook (16.93 25011212). The PopUp prompts for password (and number match via Authenticator) but then aborts.

Please see AzureAD/microsoft-authentication-library-for-js#7498 as a related ticket.

Your Environment

• Platform [PC desktop, Mac, iOS, Office on the web]: Mac M2 Pro
• Host [Excel, Word, PowerPoint, etc.]: Mac Outlook
• Office version number: 16.93
• Operating System: Sequoia 15.2
• Browser (if using Office on the web): N/A (Works with all browsers tested, including Safari)

Expected behavior

Method succeeds and returns an ID Token.

Current behavior

Console log from the Add-In pane. MSAL logging is enabled

[Info] [Tue, 14 Jan 2025 20:01:40 GMT] : [] : @azure/[email protected] : Info - Nested App Auth Bridge available: true (taskpane.js, line 99953)

[Log] [Tue, 14 Jan 2025 20:01:40 GMT] : [] : @azure/[email protected] : Trace - getAccount called (taskpane.js, line 99962)

[Log] [Tue, 14 Jan 2025 20:01:40 GMT] : [] : @azure/[email protected] : Trace - BrowserCacheManager.getAccountKeys called (taskpane.js, line 99962)

[Debug] [Tue, 14 Jan 2025 20:01:40 GMT] : [] : @azure/[email protected] : Verbose - BrowserCacheManager.getAccountKeys - No account keys found (taskpane.js, line 99956)

[Debug] [Tue, 14 Jan 2025 20:01:40 GMT] : [] : @azure/[email protected] : Verbose - getAccount: No matching account found, returning null (taskpane.js, line 99956)

[Debug] [Tue, 14 Jan 2025 20:01:40 GMT] : [] : @azure/[email protected] : Verbose - setActiveAccount: No account passed, active account not set (taskpane.js, line 99956)

Steps to reproduce

const pca: IPublicClientApplication = await GetPCA();

      const silentRequest: SsoSilentRequest = {
        scopes: ["User.Read"],
        loginHint: OutlookEMailAddress,
      };

      const userAccount: AuthenticationResult = await pca.ssoSilent(silentRequest);

const GetPCA = (): Promise<IPublicClientApplication> => {
  return new Promise<IPublicClientApplication>(async (resolve, reject) => {
    const pca: IPublicClientApplication = await createNestablePublicClientApplication({
      auth: {
        clientId: clientId,
        authority: "https://login.microsoftonline.com/common",
      },
      system: {
        loggerOptions: {
          logLevel: LogLevel.Trace,
          loggerCallback: (level, message, containsPii) => {
            if (containsPii) {
              return;
            }
            switch (level) {
              case LogLevel.Error:
                console.error(message);
                return;
              case LogLevel.Info:
                console.info(message);
                return;
              case LogLevel.Verbose:
                console.debug(message);
                return;
              case LogLevel.Warning:
                console.warn(message);
                return;
              default:
                console.log(message);
                return;
            }
          },
        },
      },
    });
    resolve(pca);
  });
};

Link to live example(s)

See sample code above.

Provide additional details

N/A

Context

Unable to migrate from EWSTokens to MSAL/NAA.

Useful logs

See Current Behavior section above.

Thank you for taking the time to report an issue. Our triage team will respond to you in less than 72 hours. Normally, response time is <10 hours Monday through Friday. We do not triage on weekends.