Upon successful login to Microsoft AD using iOS device, signInWithWebUI throws the UserCancelledException. (It works fine with iOS Simulator)

[IsuruCTS]

Description

Upon successful login to Microsoft AD (using the Authenticator app for two factor authentication) using iOS device (iOS 16.7.2), signInWithWebUI throws the UserCancelledException with following error.

`[AXRuntimeCommon] AX Lookup problem - errorCode:1100 error:Permission denied portName:'com.apple.iphone.axserver' PID:9624 (
0 AXRuntime 0x00000001e616d960 _AXGetPortFromCache + 940
1 AXRuntime 0x00000001e616fe84 AXUIElementPerformFencedActionWithValue + 848
2 UIKit 0x00000002400301ec BAA2EF76-5F22-34FE-960D-04C473D0D29A + 737772
3 libdispatch.dylib 0x00000001c4b7c7a8 30AB7A30-04BC-3C9C-AE24-8DE17D9D2AF2 + 407464
4 libdispatch.dylib 0x00000001c4b7d780 30AB7A30-04BC-3C9C-AE24-8DE17D9D2AF2 + 411520
5 libdispatch.dylib 0x00000001c4b586fc 30AB7A30-04BC-3C9C-AE24-8DE17D9D2AF2 + 259836
6 libdispatch.dylib 0x00000001c4b591b0 30AB7A30-04BC-3C9C-AE24-8DE17D9D2AF2 + 262576
7 libdispatch.dylib 0x00000001c4b62f14 30AB7A30-04BC-3C9C-AE24-8DE17D9D2AF2 + 302868

8 libsystem_pthread.dylib 0x0000000207e29bd0 _pthread_wqthread + 284
9 libsystem_pthread.dylib 0x0000000207e29720 start_wqthread + 8
)
[AXRuntimeCommon] AX Lookup problem - errorCode:1100 error:Permission denied portName:'com.apple.iphone.axserver' PID:9624 (
0 AXRuntime 0x00000001e616d960 _AXGetPortFromCache + 940
1 AXRuntime 0x00000001e616fe84 AXUIElementPerformFencedActionWithValue + 848
2 UIKit 0x00000002400301ec BAA2EF76-5F22-34FE-960D-04C473D0D29A + 737772
3 libdispatch.dylib 0x00000001c4b7c7a8 30AB7A30-04BC-3C9C-AE24-8DE17D9D2AF2 + 407464
4 libdispatch.dylib 0x00000001c4b7d780 30AB7A30-04BC-3C9C-AE24-8DE17D9D2AF2 + 411520
5 libdispatch.dylib 0x00000001c4b586fc 30AB7A30-04BC-3C9C-AE24-8DE17D9D2AF2 + 259836
6 libdispatch.dylib 0x00000001c4b591b0 30AB7A30-04BC-3C9C-AE24-8DE17D9D2AF2 + 262576
7 libdispatch.dylib 0x00000001c4b62f14 30AB7A30-04BC-3C9C-AE24-8DE17D9D2AF2 + 302868
8 libsystem_pthread.dylib 0x0000000207e29bd0 _pthread_wqthread + 284
9 libsystem_pthread.dylib 0x0000000207e29720 start_wqthread + 8
)
[AXRuntimeCommon] AX Lookup problem - errorCode:1100 error:Permission denied portName:'com.apple.iphone.axserver' PID:9624 (
0 AXRuntime 0x00000001e616d960 _AXGetPortFromCache + 940
1 AXRuntime 0x00000001e616fe84 AXUIElementPerformFencedActionWithValue + 848
2 UIKit 0x00000002400301ec BAA2EF76-5F22-34FE-960D-04C473D0D29A + 737772
3 libdispatch.dylib 0x00000001c4b7c7a8 30AB7A30-04BC-3C9C-AE24-8DE17D9D2AF2 + 407464
4 libdispatch.dylib 0x00000001c4b7d780 30AB7A30-04BC-3C9C-AE24-8DE17D9D2AF2 + 411520
5 libdispatch.dylib 0x00000001c4b586fc 30AB7A30-04BC-3C9C-AE24-8DE17D9D2AF2 + 259836
6 libdispatch.dylib 0x00000001c4b591b0 30AB7A30-04BC-3C9C-AE24-8DE17D9D2AF2 + 262576
7 libdispatch.dylib 0x00000001c4b62f14 30AB7A30-04BC-3C9C-AE24-8DE17D9D2AF2 + 302868
8 libsystem_pthread.dylib 0x0000000207e29bd0 _pthread_wqthread + 284
9 libsystem_pthread.dylib 0x0000000207e29720 start_wqthread + 8
)`

However, I am able to log in successfully in the simulator.
I would appreciate any information regarding this issue.

Categories

• Analytics
• API (REST)
• API (GraphQL)
• Auth
• Authenticator
• DataStore
• Notifications (Push)
• Storage

Steps to Reproduce

1. Configure Cognito to use Microsoft AD as a federated login service
2. Select Microsoft AD as the SSO provider from the mobile app
3. Log in to the Microsoft AD (using the Authenticator app for two factor authentication)
4. After successfully login to the Microsoft AD app throws the UserCancelledException.

Screenshots

No response

Platforms

• iOS
• Android
• Web
• macOS
• Windows
• Linux

Flutter Version

3.16.3

Amplify Flutter Version

1.6.1

Deployment Method

Amplify CLI

Schema

No response

[Jordan-Nelson]

@IsuruCTS - Thanks for taking the time to open the issue and provide the info above.

Can you clarify what you mean by "Authenticator"? Amplify Flutter offers a UI Widget called the Authenticator, which adds the UI for authentication workflows (sign in, sign up, etc.). I believe you are referring to a third party Authenticator application that would be used for multi factor auth such as Microsoft Authenticator. Is that correct?

Can you share some of the code that is invoked which results in this?

[IsuruCTS]

Thanks your reply @Jordan-Nelson,

"Authenticator" means third party Authenticator application that would be used for multi factor auth such as Microsoft Authenticator.

Can you share some of the code that is invoked which results in this?

  Future<void> signInWithWebUIProvider(String providerName) async {
    try {
      final result = await Amplify.Auth.signInWithWebUI(
        provider: AuthProvider.custom(providerName),
        options: const SignInWithWebUIOptions(
          pluginOptions: CognitoSignInWithWebUIPluginOptions(
            isPreferPrivateSession: true,
          ),
        ),
      );
      safePrint('Result: $result');
    } on AuthException catch (e) {
      safePrint('Error signing in: ${e.message}');
      rethrow;
    }
  }

• Note: I am able to log in successfully in the simulator. I assume that this works because after entering the username and password, Microsoft AD sends a code to Microsoft Authenticator for multi-factor authentication. And simulator app does not switch to Microsoft Authenticator in this scenario, but in real device it switches to Microsoft Authenticator. (Currently, I do not have two devices on hand to test this scenario)

[Jordan-Nelson]

Thanks. Just to clarify, the end user workflow is as follows:

• User initiates sign in
• User signs in to Microsoft AD with username/pw
• User manually opens third party authenticator (ex: Microsoft Authenticator) to get code
• User manually switches back to Flutter app
• User enters code
• Exception is thrown

[IsuruCTS]

This is the correct the end user workflow:

1. User initiates sign in

2. User signs in to Microsoft AD with username/pw
   

3. Display 'Approve sign in request' screen (Open Microsoft Authenticator and enter the number shown in screen).
   

4. User manually opens Microsoft Authenticator and enter the given number.
   

5. User manually switches back to Flutter app and provide confirmation to stay logged in (Select 'No' or 'Yes' button).
   

6. Exception is thrown

[Jordan-Nelson]

Thanks @IsuruCTS.

Based on similar logs on Stack Overflow and Apple developer forums, it seems that the error is related to an access issue with the Accessibility Runtime. I am not sure why it is surfacing in this scenario. Do you have any accessibility features enabled (under Settings -> Accessibility)? Are you able to get a hold of another device to test this on to see if it is device specific? Is there any additional log output?