User Authentication

Modified on Wed, 02 Aug 2023 at 08:21 PM

Torsion uses Azure Active Directory "Single Sign-on" for authentication in SharePoint Online. This allows for a seamless login experience for users when accessing Torsion through a connected SharePoint site. Torsion uses a secure cookie as the session token for communicating with its services. The cookies created during this process are encrypted and secure, and cannot be accessed by JavaScript.

Cookie Name	Purpose
TIS_UISess	A user’s encrypted Torsion authentication token
torsionTenancyId	The ID of the customer’s Torsion Tenancy
platformConnectionId	The ID of the customer’s Platform Connection
ARRAffinitySameSite	Ensures requests are routed to the correct Torsion App Service
3PCookieCheck	Validates whether third-party cookies are enabled
i18n.langtag	Sets the display language of Torsion

If a customer has disabled third-party cookies, Torsion will not be able to set its cookies, and the customer may experience issues with missing buttons, security icons, and failed dialogues.

To resolve this, certain domains can be whitelisted by the company to allow Torsion and Microsoft to create cookies. The whitelisted domains are

https://user.torsionis.com 
https://login.microsoftonline.com

The process of whitelisting depends on the browser used, and some browsers may not support it. It is recommended that partners or IT departments make these changes via group policy.

Google Chrome - Google are potentially changing support for 3rd party cookies in 2023, but the details for this are at this time, unclear. Details on Google’s support site is here, Chrome supports whitelisting of domains.

Apple Safari on MacOS - All third-party cookies are blocked by default on Safari. Whitelisting by domain is not possible, so enabling third-party cookies should by done as per details here.

Microsoft Edge (Chromium) - All third-party cookies are enabled by default, there is yet to be official guidance from Microsoft as to how they will continue to support third-party cookies. Changes to cookies in Edge are done here.

Microsoft Edge (Legacy) - Not supported

Internet Explorer - Not supported

Firefox - All third-party cookies are blocked by default on Firefox. You can enable this on a per-site basis by following the steps here.