Skip to content

Use MSAL's recent UserFIC API for agentic flows #3842

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
Avery-Dunn wants to merge 8 commits into
base: master
Choose a base branch
from
Open

Use MSAL's recent UserFIC API for agentic flows #3842

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
8 commits
Select commit Hold shift + click to select a range
44a045b
Fix #3840: Use native MSAL UserFIC API for agentic UPN flows
Avery-Dunn Jun 4, 2026
a267646
Add OID UserFIC support, bump MSAL to 4.84.2, remove add-in
Avery-Dunn Jun 5, 2026
9821f57
Better handling of national cloud endpoints for FIC scope
Avery-Dunn Jun 5, 2026
62d8adc
Bump MSAL.NET to 4.84.2 and align OWIN binding redirects (#3844)
Copilot Jun 5, 2026
5952470
Fix #3840: Use native MSAL UserFIC API for agentic UPN flows
Avery-Dunn Jun 4, 2026
aa4b404
Add OID UserFIC support, bump MSAL to 4.84.2, remove add-in
Avery-Dunn Jun 5, 2026
e4b3f16
Better handling of national cloud endpoints for FIC scope
Avery-Dunn Jun 5, 2026
e3f4ee1
Merge branch 'avdunn/agentic-fic-scenario-fix' of https://github.com/…
Avery-Dunn Jun 5, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion Directory.Build.props
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -80,7 +80,7 @@

<PropertyGroup Label="Common dependency versions">
<MicrosoftIdentityModelVersion Condition="'$(MicrosoftIdentityModelVersion)' == ''">8.18.0</MicrosoftIdentityModelVersion>
<MicrosoftIdentityClientVersion Condition="'$(MicrosoftIdentityClientVersion)' == ''">4.84.1</MicrosoftIdentityClientVersion>
<MicrosoftIdentityClientVersion Condition="'$(MicrosoftIdentityClientVersion)' == ''">4.84.2</MicrosoftIdentityClientVersion>
<MicrosoftIdentityAbstractionsVersion Condition="'$(MicrosoftIdentityAbstractionsVersion)' == ''">12.0.0</MicrosoftIdentityAbstractionsVersion>
<FxCopAnalyzersVersion>3.3.0</FxCopAnalyzersVersion>
<SystemTextEncodingsWebVersion>4.7.2</SystemTextEncodingsWebVersion>
Expand Down
7 changes: 0 additions & 7 deletions src/Microsoft.Identity.Web.AgentIdentities/AgentIdentitiesExtension.cs
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -5,7 +5,6 @@
using System.Collections.Generic;
using Microsoft.Extensions.DependencyInjection;
using Microsoft.Identity.Abstractions;
using Microsoft.Identity.Web.AgentIdentities;

namespace Microsoft.Identity.Web
{
Expand All @@ -26,12 +25,6 @@ public static IServiceCollection AddAgentIdentities(this IServiceCollection serv
// Register the OidcFic services for agent applications to work.
services.AddOidcFic();

// Register a callback to process the agent user identity before acquiring a token.
services.Configure<TokenAcquisitionExtensionOptions>(options =>
{
options.OnBeforeTokenAcquisitionForTestUserAsync += AgentUserIdentityMsalAddIn.OnBeforeUserFicForAgentUserIdentityAsync;
});

return services;
}

Expand Down
102 changes: 0 additions & 102 deletions src/Microsoft.Identity.Web.AgentIdentities/AgentUserIdentityMsalAddIn.cs
View file
Open in desktop

This file was deleted.

6 changes: 6 additions & 0 deletions src/Microsoft.Identity.Web.TokenAcquisition/Constants.cs
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -236,6 +236,12 @@ public static class Constants
* Treat as a public member.
*/
internal const string MicrosoftIdentityOptionsParameter = "IDWEB_FMI_MICROSOFT_IDENTITY_OPTIONS";
/*
* Used by Microsoft.Identity.Web.AgentIdentities
* Any changes to this member (including removal) can cause runtime failures.
* Treat as a public member.
*/
internal const string TokenExchangeUrlKey = "IDWEB_TOKEN_EXCHANGE_URL";

/// <summary>
/// Error codes indicating certificate or signed assertion issues that warrant retry with a new certificate.
Expand Down
Loading
Loading