Refused to display 'https://login.microsoftonline.com/' in a frame because it set 'X-Frame-Options' to 'deny'

[webelieve]

Core Library

MSAL.js (@azure/msal-browser)

Core Library Version

"react": "^18.2.0",

Wrapper Library

MSAL React (@azure/msal-react)

Wrapper Library Version

"react": "^18.2.0",

Public or Confidential Client?

Public

Description

Hi!

We have encountered issue on this error - Refused to display 'https://login.microsoftonline.com/' in a frame
because it set 'X-Frame-Options' to 'deny'. Could you please advise? Thank you!

When users logged in with multiple accounts https://myaccount.microsoft.com/, then try to access to our app.

Results:

• Console log tab: Refused to display 'https://login.microsoftonline.com/' in a frame because it set 'X-Frame-Options' to 'deny'

Copy https://login.microsoftonline.com in a new tab, it takes the user to

• office.com

MSAL Configuration

export const msalConfig: Msal.Configuration = {
  auth: {
    clientId: EnvironmentService.getAzureClientId(),
    redirectUri: `${window.location.origin}`,
    authority: `https://login.microsoftonline.com/getAzureTenantId()`
  },
  cache: {
    cacheLocation: "sessionStorage",
    storeAuthStateInCookie: true,
  }
}

[webelieve]

@tnorling Hi Thomas, I noticed that you answered a previous post on this issue. I appreciate if you can assist. Thank you!

#2731

We are dealing with a scenario where multiple accounts are logged in simultaneously. How should we handle this? We want to authenticate the user after they select the their primary account and access our app, ensuring they see the same content as they only logged in using primary accounts. However, we are currently facing an issue where, after the user selecting their primary account from Azure logging popup window, our app encounters a “Refused to display 'https://login.microsoftonline.com/' in a frame because it set 'X-Frame-Options' to 'deny” error in the console log, though the user will not see unless they use DevTools to inspect. Is it possible to allow the user to log in silently even they logged by multiple accounts?

Please advise. Thanks!