Quantcast
Channel: Azure Management Portal forum
Viewing all articles
Browse latest Browse all 4189

Problem: Azure websites force OrgID auth if ever used but when LiveID auth is used it always gives option to swtich to OrgID.

$
0
0

Problem:

I have multiple subscriptions, some are LiveID based and some are Organizational ID based.

About 90% of the time if I attempt to access any of the azure pages and go through the sign-in process it forces me to login.microsoftonline.com auth page.

On rare occasions, mostly when I have cleared all cookies and browser cache and have no other internet explorer 11 sessions open, it will take me to the correct page -- where it asks for an email address and then comes back with a prompt asking if I want to use the Org-ID or LiveID.

This is the problem -

  • You don't ask if I want to remember the login name for a session - I have to go through a process to Forget
  • Except for that rare page that asks me which auth provider, you assume that a WAAD credential and a LiveID credential cannot have the same email address. This is incorrect as anyone who had an old passport.net with EASI (email as sign-in) may have both active at the same time.
  • The logic behind the auth pages seems to be that once I have logged into any of the azure pages with an OrgID, that I will always be using an OrgID.  Its odd since often if I start my day logging in with a LiveID its easy to switch to OrgID, but never easy to switch back.
  • Note: The pages that always gets returned when trying to use LiveID auth after a OrgID auth is:https://manage.windowsazure.com/Error/Login?issueType=Nonce

Suggestions:

For all azure login pages that are OrgID there should be a link to switch to LiveID

  1. For all azure login pages that are LiveID there should be a link to switch to OrgID
  2. Unless the page has timed-out or I have opt-in for a "always use this account" type of screen, you should always be going back to the default authentication page.
  3. Example of a good login page: https://login.live.com/login.srf?cbcxt=azubill&vv=2020&lc=1033&wa=wsignin1.0&wtrealm=urn:federation:MicrosoftOnline&wctx=wa%3Dwsignin1.0%26rpsnv%3D4%26ct%3D1418328225%26rver%3D6.4.6456.0%26wp%3DSAPI%26wreply%3Dhttps:%252F%252Faccount.windowsazure.com%252FSubscriptions%26lc%3D1033%26id%3D500867%26WHR%3Dlive.com%26cbcxt%3Dazubill
  4. Example of a bad page: https://login.microsoftonline.com/login.srf?wa=wsignin1.0&rpsnv=4&ct=1418328311&rver=6.4.6456.0&wp=SAPI&wreply=https:%2F%2Faccount.windowsazure.com%2FSubscriptions%3FWHR%3Dazure.com&lc=1033&id=500867&whr=azure.com&cbcxt=azubill
  5. (The difference is the Live page gives you the option to switch to OrgID, but the OrgID doesn't give you the option to go to live!

Thanks!

-Neil


neilgo


Viewing all articles
Browse latest Browse all 4189

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>