You might see the following message…

Update your browser
Your browser is not supported or up-to-date. Try updating it, or else download and install the latest version of Microsoft Edge.
You could also try to access https://aka.ms/mysecurityinfo from another device.

As a quick solution for the user.  Have the user register for MFA ahead of time before using the app. Simply open a supported Browser like Edge or Chrome and have the user navigate to…

https://myapps.microsoft.com

Overview

You might see this when your using an App that integrate or have underlying components that depend on ADAL or MSAL. The solution will depend on the developers implementation. Entra ID Multifactor and self-service password reset registration wizard does not support older versions of Internet Explorer.

ADAL and MSAL when using embedded browser in lower version of .NET uses WinForms which is based on IE 7 components. The recommended solution would be to migrate to MSAL and use the Broker.

Developer or application vendor will need to…

First and foremost, upgrade to the latest version of MSAL.

There is no solution for ADAL

Preferably, enable Web Account Manager (WAM) support with MSAL…
https://learn.microsoft.com/en-us/entra/identity-platform/scenario-desktop-acquire-token-wam

var pca = PublicClientApplicationBuilder.Create("client_id").WithBroker(new BrokerOptions(BrokerOptions.OperatingSystems.Windows))

If for some reason WAM can’t be used (for example on Windows Server), then you can use WebView2 (based on Edge). To do this, the application must target the framework .net6+ Windows (this is configured on the project file)…

<TargetFramework>net6.0-windows10.0.22621.0</TargetFramework>

If your unable to use WAM or can’t target .net 6+ Windows, then use the system browser…
https://learn.microsoft.com/en-us/entra/msal/dotnet/acquiring-tokens/using-web-browsers#how-to-use-the-default-system-browser

var result = await pca.AcquireTokenInteractive(s_scopes).WithUseEmbeddedWebView(false)

Leave a Comment