Authentication Loop in IFrame

[wlumetsberger]

If the Balzor-Seite is embedded in an IFrame (Microsoft Teams WebsiteTab) the Authentication ends up in a Loop.
Teams uses also Federated Authentication with Okta.
Using the Site Standalone the Authentication Works as aspect.
AccountController is called -> Challange is Called -> Okta Login does appear
OnTokenValidateEvent gets fired containing the authenticated Userprincipal in args.Identity

AccountController is called -> HttpContext.User is authenticated

Using the same Site in a Team Websitetab the steps are the following:
AccountController is called -> Challenge is Called -> no Okta Login appears (Token is already here)

OnTokenValidateEvent gets fired containing the authenticated Userprincipal

AccountController is called -> but now User is not authenticated! --> Loop

This is the Configuration used:

[wlumetsberger]

Issue is also during use in a standard IFrame:

[bryanapellanes-okta]

@wlumetsberger,
Thanks for reaching out to report this! To help us reproduce and investigate the issue further can you share a project/solution that reproduces the issue as you describe? I have added an item for internal tracking for further review.

[wlumetsberger]

@bryanapellanes-okta
here is a link to the repo:
https://github.com/wlumetsberger/okta-blazor-server-side-tests