acquireTokenSilent only works in Incognito window

Library

msal@1.3.0 (Same issue with msal@1.2.1)

Description

In a SPA, trying to login with gmail account using Azure B2C.

• Works ok when in Incognito window.
• When I try to login into my registered app, in a window where I am already logged in my gmail account(in a different tab in the same browser window, on https://mail.google.com/), the acquireTokeSilent fails. I get the error Refused to display 'https://accounts.google.com/signin/oauth?client_id=4…` in a frame because it set ‘X-Frame-Options’ to ‘deny’. Scopes used : myRegisteredAppUri/user_impersonation

I know about this : https://github.com/AzureAD/microsoft-authentication-library-for-js/wiki/FAQ#i-get-this-error-refused-to-display--in-a-frame-because-it-set-x-frame-options-to-deny , but this is taken care off in the code, my issue seems to be caused by something else given that it works in an Incognito window. Any ideas?

##Framework Js + LitElement

Configuration

const authOptions = { auth: { clientId: this.config.client_id, authority: this.config.authority, validateAuthority: false, redirectUri: this.config.user_agent_app_config.redirectUri }, cache: { cacheLocation: ‘localStorage’ as CacheLocation }
}; return new Msal.UserAgentApplication(authOptions);

// For Azure B2C issues, please include your policies.
B2C_1_signup_signin

Browsers

Not browser specific

[tnorling]

@acory This is a known issue when you have multiple Google accounts logged in. Unfortunately this is a service issue and not something msal can fix. Generally we recommend you call acquireTokenRedirect or acquireTokenPopup if the silent acquisition fails. You can track #842 for updates on this particular issue and if you like, you can also open a ticket with the b2c service. Instructions are in this comment

[acory]

I will try this: https://github.com/AzureAD/microsoft-authentication-library-for-js/issues/609#issuecomment-520738294