search

AzureAD / MSAL.PS

MIT License
163 stars 29 forks source link

Interactive JWT flow with extra claims #7

Closed schwoerb closed 1 year ago

schwoerb commented 4 years ago

It is not clear on how to get a JWT with extra claims from an on prem ADFS2019 (non-azure integrated) server.

https://adfs.fqdn/adfs/oauth2/authorize?response_type=id_token&client_id={0}&resource={1}&redirect_uri={2}&response_mode=form_post

The above is able to work for using a POST with the body containing FormsAuthentication/username/password. Trying to move away from the custom written library and move to MSAL.PS to support interactive sessions to do username/password/+MFA authentication.

bgavrilMS commented 1 year ago

The SDK does not control the access token claims.