> For the complete documentation index, see [llms.txt](https://docs.jianny.net/work/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.jianny.net/work/azure/aad-mobile-troubleshooting.md).

# AAD Mobile Troubleshooting

<figure><img src="/files/Qtmf8d3mZjEp4s0ybxyQ" alt=""><figcaption></figcaption></figure>

Background:

* A user is experiencing an "invalid credential" error when attempting to log in to a mobile app using OKTA.&#x20;
* The same credentials work on other platforms, including the mobile's Safari, except for O365.&#x20;
* The user is certain that the password entered is correct.&#x20;

      ![How Brands Can Use Memes to Connect With Consumers in a New Way](https://static-prod.adweek.com/wp-content/uploads/2018/07/confused-guy-meme-content-2018-652x367.jpg)

* Logs tell us that the issue may be due to different encoding.&#x20;
* Capturing the network traffic will help diagnose the problem or provide evidence if escalation is needed.

<figure><img src="/files/FgL1R1noGVipoxV28JJg" alt=""><figcaption></figcaption></figure>

{% hint style="danger" %}
Important Notes

* Ensure the issue can be reproduced before performing these steps.
* Handle the output file securely as it contains sensitive information.
  {% endhint %}

Steps:

1\. Prepare the Network:  &#x20;

\- Connect the iPhone and the computer (used as a proxy) to the same network or subnet/VLAN.  &#x20;

\- Ensure the Fiddler listening port (default is 8888) is not blocked on the computer. Temporarily disable the Windows firewall if necessary.

\
2\. Install and Configure Fiddler on the Computer:  &#x20;

\- Download Fiddler from <https://www.telerik.com/download/fiddler>   &#x20;

\- In Fiddler, go to Tools -> Options -> Connections, and enable “Allow remote computers to connect”.

<figure><img src="/files/6MTreNo6hEnTYw5kUXyV" alt=""><figcaption></figcaption></figure>

3. Configure Fiddler for HTTPS Traffic:
   * Go to Tools -> Options -> HTTPS, and check “Decrypt HTTPS traffic”. Install and trust the Fiddler Root Certificate on the computer by following the prompts.

<figure><img src="/files/H5nO9CRGF84HjjCscLv1" alt=""><figcaption></figcaption></figure>

<figure><img src="/files/HHjG5Ft2BRe64SLKNMBL" alt=""><figcaption></figcaption></figure>

4\. Install Certificate Maker Plugin for Fiddler:  &#x20;

\- Download and install the Certificate Maker Plugin from <https://www.telerik.com/fiddler/add-ons>  &#x20;

\- Restart Fiddler to apply changes.  &#x20;

\- Hover over the Online indicator on the Fiddler toolbar to display the computer’s IP addresses.  &#x20;

\- Ensure Fiddler is capturing traffic (indicated in the lower-left corner of Fiddler).

<figure><img src="/files/caIpTJzmg3gNZ02NbzHf" alt=""><figcaption></figcaption></figure>

<figure><img src="/files/2fJx8hHKAJClJQI6vxN4" alt=""><figcaption></figcaption></figure>

5. Configure the iPhone:
   * Connect the iPhone to the same network as the computer via Wi-Fi. Disable 3G/4G connections.
   * Verify the iPhone can reach Fiddler by navigating to `http://FiddlerMachineIP:8888` in a browser. This should display the Fiddler Echo Service page.
   * Go to Settings -> WLAN -> Select the connected Wi-Fi network -> Configure Proxy -> Manual.
   * Enter the IP address of the Fiddler machine in the Server box and the port (usually 8888) in the Port box. Ensure Authentication is off, then save the configuration.
   * In a browser on the iPhone, go to `http://<FiddlerMachineIP>.fiddler:8888` and download the FiddlerRoot certificate from the Fiddler Echo Service webpage.
   * Open the FiddlerRoot.cer file and install it.
   * Go to Settings -> General -> About -> Certificate Trust Settings and manually enable full trust for the FiddlerRoot certificate. Accept the dialog about third-party eavesdropping.

<figure><img src="/files/cw0EpuBhOZuUYMqEu8YU" alt=""><figcaption></figcaption></figure>

<figure><img src="/files/JS3jdUvT5FGDJ3ieQJFS" alt=""><figcaption></figcaption></figure>

<figure><img src="/files/u2prKlDkabf6pVOQQf15" alt=""><figcaption></figcaption></figure>

6. Reproduce the Issue:
   * On the iPhone, open “Authenticator” and attempt to log in to reproduce the issue.
   * Once the issue is reproduced, stop Fiddler capturing by clicking “Capturing” in the lower-left corner of Fiddler.
   * Save the captured sessions by clicking File and selecting Save.

<figure><img src="/files/wPftck7PVYblHFw16McF" alt=""><figcaption></figcaption></figure>

<figure><img src="/files/BpLiIWNxmBiDGusajfRU" alt=""><figcaption></figcaption></figure>