login with AAD with clientCertificate seems not working

[MichaelMaIkea]

Current behavior

Recently our company migrate from Auth0 to EntraID, it gives problem for our e2e test.

We follow your guide Azure Active Directory Authentication and also config the certificate in the config file from doc Client Certificates
But still when login we got

I am not sure what could be problem here. Could it be our test AAD account issue?
our Security department mentioned the account is indeed in the risky list.

Desired behavior

No response

Test code to reproduce

  cy.origin(
    'login.microsoftonline.com',
    {
      args: {
        user,
        password,
      },
    },
    ({ user, password }) => {
      cy.get('input[type="email"]').type(user || Cypress.env('auth_username'), {
        log: false,
      });
      cy.get('input[type="submit"]').click();
      cy.get('input[type="password"]').type(password || Cypress.env('auth_password'), {
        log: false,
      });
      cy.get('input[type="submit"]').click();
    },
  );

Cypress Version

13.13.2

Node version

v20.10.0

Operating System

macOS 14.5

Debug Logs

Other

No response

[jennifer-shehane]

@MichaelMaIkea Could you try Cypress 14.0.0? That update includes some updates that should resolve some issues around login, but upgrading will help confirm if it’s related.

[MichaelMaIkea]

I've upgraded to [email protected] , but I still got the same error.

So after I config the certificates, is this part still necessary or need some adaptation ?

cy.origin(
        'login.microsoftonline.com',
        {
          args: {
            user,
            password,
          },
        },
        ({ user, password }) => {
          cy.get('input[type="email"]').type(user || Cypress.env('auth_username'), {
            log: false,
          });
          cy.get('input[type="submit"]').click();
          cy.get('input[type="password"]').type(password || Cypress.env('auth_password'), {
            log: false,
          });
          cy.get('input[type="submit"]').click();
        },
      );

[MichaelMaIkea]

It seems, the cypres can not select the certificate and the "Certificate validation failed" pops up.

[MichaelMaIkea]

I manage to test the certificate and private key with Chrome, but I don't think Cypress can manage to select the certificate from the popup window of the certificate right?

so
cy.get('a[id="idA_PWD_SwitchToCertificate"]').click(); won't work.