SSID EntraID splash sign-in with MFA and Iphones

[MartinLL]

Hi,

I have a strange issue with Iphones and EntraID sign-in with Meraki Splash pages.

When the user connects to the network the internal Iphone splash page pops up. The user gives consent and starts the sign in process with no issues. After logging they get prompted by MFA.

When the user switches to the authenticator app and completes the MFA prompt the splash page login is gone and the authentication process is interupted.

This works just fine for windows devices and android phones.

Anyone found a solutiuon to this yet?

I can also add that if the iphone user opens safari, browses and browses the default gateway the can complete the MFA process and get access. So it looks like the issue is related to the iphone built in browser for splash page signin.

[alemabrahao]

Modify your splash page to force users to open the login in Safari, bypassing the CNA browser.

Take a look at this.

Troubleshooting the Microsoft Enterprise SSO Extension plugin on Apple devices - Microsoft Entra ID ...

[merakijockey85]

Gave that article a read but am missing the pertinent config option to which you're referring. Splash page customization settings available don't seem to suggest anything about browser control. Your link to the MS SSO plugin is something we don't use, and mobile devices aren't enrolled in MDM.