search

AzureAD / microsoft-authentication-library-for-java

Microsoft Authentication Library (MSAL) for Java http://aka.ms/aadv2
MIT License
285 stars 142 forks source link

AcquireTokenForManagedIdentity should throw if a user-assigned managed identity clientID or resourceID is supplied when not supported #837

Closed bgavrilMS closed 2 months ago

bgavrilMS commented 2 months ago

The following ManagedIdentitySources do not currently support user-assigned managed identities:

AzureArc, CloudShell, ServiceFabric

If a user-assigned clientId or resourceId is specified for these sources, we should throw with a message similar to:

https://github.com/AzureAD/microsoft-authentication-library-for-dotnet/blob/5c7c527b173b5f2a719926fb89ccd68bc55d1b3e/src/client/Microsoft.Identity.Client/MsalErrorMessage.cs#L424

This behavior should be consistent cross-language.

Original issue:

https://github.com/AzureAD/microsoft-authentication-library-for-dotnet/issues/4837

rayluo commented 2 months ago

Discussed here. Feel free to reopen this issue if a discrepancy will be observed.