AzureAD / microsoft-authentication-library-for-dotnet

Microsoft Authentication Library (MSAL) for .NET
https://aka.ms/msal-net
MIT License
1.39k stars 342 forks source link

Fix for #4608- do not throw exception for ADFS + WithTenantId #4753

Closed bgavrilMS closed 4 months ago

bgavrilMS commented 4 months ago

Fixes #4608

This will help partners (Id.Web) keep their code simple and not having to worry about authority type in OBO.

https://github.com/AzureAD/microsoft-identity-web/issues/2509

Note that normally there should not even be a tid claim in the ADFS tokens. However, there are some cases when admins choose to manually add this claim (set it to some static value) to make ADFS work with some Web APIs :). It's an "adapter" pattern of sorts.

Changes proposed in this request

Testing

Performance impact

Documentation