# Perspective iOS app always launches Safari when using an third-party IdP **URL:** \ **Category:** Ignition\ **Tags:** perspective\ **Created:** [July 16, 2025, 8:55pm UTC](https://forum.inductiveautomation.com/t/perspective-ios-app-always-launches-safari-when-using-an-third-party-idp/108580 "2025-07-16T20:55:27Z")\ **Posts on this page:** 6\ **Page:** 1
**Author:** ![framebuilder](https://avatars.discourse-cdn.com/v4/letter/f/96bed5/32.png) [@framebuilder](https://forum.inductiveautomation.com/u/framebuilder)\ **Post date:** [July 16, 2025, 8:55pm UTC](https://forum.inductiveautomation.com/t/perspective-ios-app-always-launches-safari-when-using-an-third-party-idp/108580/1 "2025-07-16T20:55:27Z")
We're currently using a third-party IdP (Entra) and it is working correctly. However, on iOS devices, when launching the Perspective app and clicking "Continue to Log in", it then says "Ignition Perspective" Wants to Use "companyname.global" to Sign In" and redirects the authentication to Safari browser. Our company has a policy to only pass internal domain URLs (like companyname.global) through an on-demand VPN (The Perspective app is configured with a policy to also connect through an on-demand VPN) and open in Edge browser only. This causes the authentication to fail when Safari tries to resolve the server url. If I click the failure message in Safari and then "Open in Microsoft Edge" and go back to the iOS Perspective app and wait a few seconds, it will authenticate and work properly. I have tried setting the default Browser on the iPhone to Edge and the iOS Perspective app still tries to launch Safari which causes the page cannot be displayed error. Is there a way to force the iOS Perspective app to use Edge during IdP logins? Or any other suggestions? ---
**Author:** ![Chris\_Bingham](https://avatars.discourse-cdn.com/v4/letter/c/e5b9ba/32.png) [@Chris\_Bingham](https://forum.inductiveautomation.com/u/Chris_Bingham)\ **Post date:** [July 17, 2025, 1:39am UTC](https://forum.inductiveautomation.com/t/perspective-ios-app-always-launches-safari-when-using-an-third-party-idp/108580/2 "2025-07-17T01:39:22Z")
For starters, make sure you're using the latest version of the app. See: [Ignition Perspective Mobile App Changelog](https://www.docs.inductiveautomation.com/docs/8.1/new-in-this-version#ignition-perspective-mobile-app-changelog). There are some AppConfig settings in the latter versions that your iOS AppConfig management team can tweak, specifically: - ephemeral\_auth\_sessions - internal\_webview\_auth Unsure if the Internal WebView option would work for you, but is the most appropriate option for external idp auth (my opinion - note the caution on the changelog page). The AppConfig team should be able to reference the [Ignition Perspective iOS App - AppConfig XML](https://files.inductiveautomation.com/release/perspective/ios/perspective-specfile-v3.xml) provided on the [Ignition Extras](https://inductiveautomation.com/downloads/extra-material) page for insight. ---
**Author:** ![framebuilder](https://avatars.discourse-cdn.com/v4/letter/f/96bed5/32.png) [@framebuilder](https://forum.inductiveautomation.com/u/framebuilder)\ **Post date:** [July 17, 2025, 3:50am UTC](https://forum.inductiveautomation.com/t/perspective-ios-app-always-launches-safari-when-using-an-third-party-idp/108580/3 "2025-07-17T03:50:30Z")
Thank you, that's great info. Based on the caution _Note that this should not be used unless it is the only way to perform auth_ and _Some Identity Providers do not allow this and authentication may fail._ ,do you know if setting internal\_webview\_auth to true will break the Ignition Internal IdP? ---
**Author:** ![Chris\_Bingham](https://avatars.discourse-cdn.com/v4/letter/c/e5b9ba/32.png) [@Chris\_Bingham](https://forum.inductiveautomation.com/u/Chris_Bingham)\ **Post date:** [July 17, 2025, 4:00pm UTC](https://forum.inductiveautomation.com/t/perspective-ios-app-always-launches-safari-when-using-an-third-party-idp/108580/4 "2025-07-17T16:00:21Z")
Internal IdP shouldn't utilize WebView, so this setting should have no impact there. ---
**Author:** ![framebuilder](https://avatars.discourse-cdn.com/v4/letter/f/96bed5/32.png) [@framebuilder](https://forum.inductiveautomation.com/u/framebuilder)\ **Post date:** [July 23, 2025, 4:02pm UTC](https://forum.inductiveautomation.com/t/perspective-ios-app-always-launches-safari-when-using-an-third-party-idp/108580/5 "2025-07-23T16:02:58Z")
I wanted to update everyone because this was a huge learning curve for me and hope it helps someone else. Evidently different MDMs use different formats of AppConfig to configure iOS applications. And some MDMs have even more specific requirements in how they parse the AppConfig and keys. Microsoft Intune and SOTI MobiControl: ```python internal_webview_auth ``` SimpleMDM: ```python internal_webview_auth ``` Those were the three MDMs I tested. None of them supported the format of [Ignition Perspective iOS App - AppConfig XML](https://files.inductiveautomation.com/release/perspective/ios/perspective-specfile-v3.xml) but I'm sure there are some that do since it appears to follow the AppConfig XML v3 spec. The handling of arrays is different on the platforms I tested so here is an example (remove the plist keys if using Intune): ```python initial_gateway_urls https://testserver1.company.com:8043 https://testserver23.othercompany.com:8043 ``` Oh, and the _internal\_webview\_auth_ key set to true worked perfectly with keeping the IdP redirect inside of the app inside of launching Safari. So now Entra IdP and SSO is working for us. ---
**Author:** ![Chris\_Bingham](https://avatars.discourse-cdn.com/v4/letter/c/e5b9ba/32.png) [@Chris\_Bingham](https://forum.inductiveautomation.com/u/Chris_Bingham)\ **Post date:** [July 23, 2025, 4:19pm UTC](https://forum.inductiveautomation.com/t/perspective-ios-app-always-launches-safari-when-using-an-third-party-idp/108580/6 "2025-07-23T16:19:55Z")
👍 Glad you were able to make some headway! > [@framebuilder](#): > > Evidently different MDMs use different formats of AppConfig to configure iOS applications. This matches my experience as well. A client of mine uses [Workspace ONE](https://vdc-download.vmware.com/vmwb-repository/dcr-public/88e45a2f-18a2-48f0-a1c3-bf889aa5e8df/190edcac-fa2b-468b-ad0e-f94f94447d67/WorkspaceONE_iOS_BaseIntegration.pdf). Little could be migrated from the AppConfig XML provided by Ignition, but it did offer some good insight (as to available key-value pairs, etc.). Thanks for sharing details of your findings!