Problem:
I have multiple subscriptions, some are LiveID based and some are Organizational ID based.
About 90% of the time if I attempt to access any of the azure pages and go through the sign-in process it forces me to login.microsoftonline.com auth page.
On rare occasions, mostly when I have cleared all cookies and browser cache and have no other internet explorer 11 sessions open, it will take me to the correct page -- where it asks for an email address and then comes back with a prompt asking if I want to use the Org-ID or LiveID.
This is the problem -
- You don't ask if I want to remember the login name for a session - I have to go through a process to Forget
- Except for that rare page that asks me which auth provider, you assume that a WAAD credential and a LiveID credential cannot have the same email address. This is incorrect as anyone who had an old passport.net with EASI (email as sign-in) may have both active at the same time.
- The logic behind the auth pages seems to be that once I have logged into any of the azure pages with an OrgID, that I will always be using an OrgID. Its odd since often if I start my day logging in with a LiveID its easy to switch to OrgID, but never easy to switch back.
- Note: The pages that always gets returned when trying to use LiveID auth after a OrgID auth is:https://manage.windowsazure.com/Error/Login?issueType=Nonce
Suggestions:
For all azure login pages that are OrgID there should be a link to switch to LiveID
- For all azure login pages that are LiveID there should be a link to switch to OrgID
- Unless the page has timed-out or I have opt-in for a "always use this account" type of screen, you should always be going back to the default authentication page.
- Example of a good login page: https://login.live.com/login.srf?cbcxt=azubill&vv=2020&lc=1033&wa=wsignin1.0&wtrealm=urn:federation:MicrosoftOnline&wctx=wa%3Dwsignin1.0%26rpsnv%3D4%26ct%3D1418328225%26rver%3D6.4.6456.0%26wp%3DSAPI%26wreply%3Dhttps:%252F%252Faccount.windowsazure.com%252FSubscriptions%26lc%3D1033%26id%3D500867%26WHR%3Dlive.com%26cbcxt%3Dazubill
- Example of a bad page: https://login.microsoftonline.com/login.srf?wa=wsignin1.0&rpsnv=4&ct=1418328311&rver=6.4.6456.0&wp=SAPI&wreply=https:%2F%2Faccount.windowsazure.com%2FSubscriptions%3FWHR%3Dazure.com&lc=1033&id=500867&whr=azure.com&cbcxt=azubill
- (The difference is the Live page gives you the option to switch to OrgID, but the OrgID doesn't give you the option to go to live!
Thanks!
-Neil
neilgo