One solution to PowerApps login problems on Android phones
Tonight I had an issue where I was unable to log into one of my client’s PowerApps tenant using PowerApps from the app store. I tried with several android phones and all had the same issue (although iPhones did not). The symptom was that after entering my email address, I was redirected to a loading screen for a short time and then returned to the logon page. While the PowerApps client was not playing ball, I was able to connect to PowerApps site via the Chrome browser on the device.
Now my client uses their own ADFS, so I felt the issue might be related to local configuration or a certificate problem. After doing a little bit of reading, I came across this article, which let me to the SSL analyser tool at ssllabs.com. As the article predicted, when I ran SSL analyser against my client’s ADFS URL, my issue was related to certificate paths.
The article states that is you see “extra download” in your certification paths as shown below, Android will have an issue with it. Quoting from the support article: “Android does not support downloading additional certificates from the authorityInformationAccess field of the certificate. This is true across all Android versions and devices, and for the Chrome browser. Any server authentication certificate that’s marked for extra download based on the authorityInformationAccess field will trigger this error if the entire certificate chain is not passed from Active Directory Federation Services (AD FS).”
Now the article talks about a change to your ADFS configuration to address this issue, but I also wanted to make it clear that this can be addressed (at least for PowerApps) on a per-device basis. In my client’s case, the problematic certificate was an Entrust certificate called Entrust Certification Authority – L1K.
All I did to fix it was using my phone, visited the Entrust root certificates page and clicked on the “Entrust Certificate Authority L1K” link. The certificate was downloaded and when I ran it, I was presented with a screen to give it a display name and confirm it was to be used for “VPN and apps”.
Once I did this. I could log into PowerApps again.
Hope this helps someone else out there…
Paul Culmsee
Hi Paul
Thanks for the detailed article. However I tried to install the certificate , but no luck. Same error repeats. Unable proceed from login screen. I can work smoothly on iOS device though.
Just one question- while installing certificate, what name should be given? I name it Entrust Certificates Authority L1K. I am using Samsung J8 device also tried on Moto G5s plus. But no luck on Android devices yet. Any other way?
This page really has all the information and facts
I wanted about this subject and didn’t know who to
ask.
You can definitely see your skills in the work you write.
The world hopes for even more passionate writers like you who are not afraid
to mention how they believe. At all times
follow your heart.
This web site truly has all of the information I wanted concerning this subject and didn’t know
who to ask.
Pretty! This has been an incredibly wonderful post. Many thanks for providing
this info.
belong to every second poker sites online poker gambling.
exchange member or recognized colleague is a associate that has been provided by an Online Gambling Agent Site or Site, which aims
to create it easier for you to entrance your favorite Online Gambling Site
or Site if using determined internet.
As we have discussed, that sites or websites that argue as soon as online
gambling are utterly easy to use clear or Blocked Newsletters.
Because maybe you normally entrance it through the attributed
site. correspondingly confused you are looking for alternating contacts where.
In the later we will convey anything in full below.
The Advantages of Playing Poker Online at swing connections sitedominoqq99.
For those of you who have problems considering compilation, you want to perform the
website, don’t want to gate or ERROR. Here we have several recognized contacts or rotate contacts that you can use if you
receive positive Internet or ERROR. Online Gambling Sites which will
have more swap friends to find the money for
you considering members, later than mirror
sites, alternative sites and fanatic sites.
Makes it simple for you to con and admission the QBandar Trusted
Online Bandar Sakong Site. every every other contacts provided have been credited forgive of phishing and scams.
Security entry upon your account will be guaranteed 100%, if you use the substitute
associate sitedominoqq99.
invoice