AzureAD / microsoft-authentication-library-for-python

Microsoft Authentication Library (MSAL) for Python makes it easy to authenticate to Microsoft Entra ID. General docs are available here https://learn.microsoft.com/entra/msal/python/ Stable APIs are documented here https://msal-python.readthedocs.io. Questions can be asked on www.stackoverflow.com with tag "msal" + "python".
https://stackoverflow.com/questions/tagged/azure-ad-msal+python
Other
754 stars 191 forks source link

[Feature Request] Re-enable username password flow in Windows broker code path #702

Closed rayluo closed 3 days ago

rayluo commented 1 month ago

MSAL client type

Public

Problem Statement

In a recent meeting on May 6th, we agreed that the username password flow (a.k.a. ROPC), albeit inadvisable, is not ready to be deprecated. So, we shall re-enable its implementation in this code base.

Proposed solution

No response

jiasli commented 1 month ago

We are aiming to enforce MFA for all Azure CLI users on all tenants. Username password flow will not be possible in that case.

Also see https://techcommunity.microsoft.com/t5/core-infrastructure-and-security/microsoft-will-require-mfa-for-all-azure-users/ba-p/4140391

fengga commented 1 month ago

PBI created at: https://identitydivision.visualstudio.com/Engineering/_workitems/edit/2944387

fengga commented 1 week ago

PR https://github.com/AzureAD/microsoft-authentication-library-for-python/pull/712 merged. We can consider closing this issue.

rayluo commented 3 days ago

Implemented in #712 and #714. Will be shipped in the next release.