AzureAD / microsoft-authentication-library-for-dotnet

Microsoft Authentication Library (MSAL) for .NET
https://aka.ms/msal-net
MIT License
1.39k stars 342 forks source link

[Documentation] #4831

Closed gladjohn closed 2 months ago

gladjohn commented 2 months ago

Issue : https://github.com/AzureAD/microsoft-authentication-library-for-dotnet/issues/4606

From Teams Channel thread Jeff R reported

Just started getting an OBO error about using the token tenant False MSAL 4.61.1.0 MSAL.Desktop 4.8 or later Windows Server 2022 Datacenter Azure Edition [2024-06-21 05:29:44Z - ba3af25a-532e-442f-a135-1707d32fc5e4] The current authority is targeting the /common or /organizations endpoint. Instead, it should target the same tenant as the client, which can be found in the 'tid' claim of the incoming client token. See https://aka.ms/msal-net-on-behalf-of for more details. When I go to the linked article I couldn't find any guidence on the authority to use. Is this a new requirement? Is it documented why we should do this somewhere?

Looks like our docs are not updated for the fix we took on the above ref issue.

This is a tracking item to update docs, to add the correct pattern : -

gladjohn commented 2 months ago

https://github.com/MicrosoftDocs/microsoft-authentication-library-dotnet/pull/464