Repository navigation
Apple-ID Authorization via federated microsoft account fails #857
Description
Describe the bug
I tried to login with my company account via federated microsoft login in browser to my Apple-ID.
The error message is:
AADSTS750056: SAML message was not properly base64-encoded.
To Reproduce
- Open Xcodes.app
- Click on login button top right
- Enter email and password
- Alert with federated url to open is provided
- Click on "Open browser" button
- Safari browser opens with error
Expected behavior
Login via Safari browser works.
Screenshots
Version
- OS: macOS 27.0
- Xcodes: 4.1.1 (41)
Activity
twocs commentedon Oct 7, 2026
I also see the same issue on macOS: 26.6.2, Xcodes: 4.1.1 (41).
Kolpa commentedon Oct 12, 2026
I've raised this issue prior in XcodesOrg/XcodesLoginKit#4 also detailing two possible approaches for a fix but i have not recieved any feedback from a maintainer so far.
MattKiazyk commentedon Oct 12, 2026
Hello!
I unfortunately don't have any access to any federated microsoft accounts to go to the next level and look at a possible solution. If someone is willing to test a fix for it, i'm more then happy to merge it in and get it out!
Kolpa commentedon Oct 12, 2026
Hey Matt,
Thank you for looking into this!
i've proposed two different fixes in the linked issue, both technically work but come with some tradeoffs regarding maintainability and / or reliability of the solution.
I would appreciate your insight into which of the approaches you would prefer and i can test and provide a implementation for either of them or even a completely different approach if we manage to come up with something else.
MattKiazyk commentedon Oct 12, 2026
Solution 2 would be better IMO to not have to have another dependency if at all possible. Hacky a bit - but as long as it's documented inside on why it's doing what it's doing, I'm perfectly fine with that.
We've done "hacky" things in order to get login to work properly with Apple over the years.
Kolpa commentedon Oct 13, 2026
I've opened a first draft PR for a possible fix over at XcodesOrg/XcodesLoginKit#8 i've tested it by building both the cli and desktop versions of xcodes against my branch and it does at-least solve the issues for my specific ms entra use case.
I would love some feedback from other users if this also solves their issues, as there are still some setups and cases i could not test against.