[Desktop] [Android] https://us.azureauth.duosecurity.com/authorization not working correctly

[joejoejo]

Description
Page wont load properly. It happens on desktop and on android.

Detailed Description
Page https://us.azureauth.duosecurity.com/authorization is giving an error message instead of the Azure Duo 2 factor login page.

Steps to Reproduce
Don't know if you can reproduce it but I will give the steps I do to get it

1. Go to office.com/login
2. Enter university email address
3. Goes to a custom Microsoft login page for entering password and click on sign in
4. It goes to https://us.azureauth.duosecurity.com/authorization

Actual result:

Expected result:

Reproduces how often:
It happens every time

Brave version (brave://version info)
Brave | 1.11.61 Chromium: 83.0.4103.97 (Official Build) beta (64-bit)
Revision | 326d148b9655369b86498d9ecca39f63dd2bdd2d-refs/branch-heads/4103@{#657}
OS | Windows 10 OS Version 2004 (Build 19041.329)

Version/Channel Information:
It happens on every build.

• Can you reproduce this issue with the current release? Yes
• Can you reproduce this issue with the beta channel? Yes
• Can you reproduce this issue with the dev channel? Yes
• Can you reproduce this issue with the nightly channel? Yes

Other Additional Information:

• Does the issue resolve itself when disabling Brave Shields? edit: should have put NO for this one
• Does the issue resolve itself when disabling Brave Rewards? Don't use
• Is the issue reproducible on the latest version of Chrome? No and does not happen on the new edge either.

Miscellaneous Information:
Talked with the university and verified they have not had any other people with that issue and they tested it with chrome and brave. They assume it is a problem with brave.

[markchart]

I have this exact same problem at this time (2020-06-11/12) from a corporate setting (using Brave 1.9.80).

DuoSecurity's advice to "whitelist cookies for duosecurity.com" is useless, even if you add a wildcard for subdomains.

[joejoejo]

I don't have the problem with my own univeristies duo login. The login is on the page has a frame that shows Duo login at https://api-cd22e904.duosecurity.com and that works fine. It is just Azure Duo login for my university that does not work for me.

[ryanbr]

If you allow all cookies in shields, does it help @markchart @joejoejo

[joejoejo]

That's not the problem as I have tried that already and tried with shields off. Then I check with shield on or shields off it shows 0 cookies in use.

I also edited my first post to indicate that shield off does not fix it like I should have put in the beginning instead of saying yes.

[markchart]

Prompted by this discussion I have found a workaround: I have to set "all cookies allowed" for both login.microsoftonline.com and us.azureauth.duosecurity.com. (However, I do not have to set "shields down".)

[joejoejo]

that fixed my problem but there should be a way to fix so that you dont need to do the workaround