MSAL
Auth - MSAL supports shared device mode from Microsoft. This connection supports Brokered authentication via MS Authenticator and Browser based authentication.
Field | Description |
---|---|
client_id | string The client ID used to register this application in Azure AD. |
authorization_user_agent | string Set to |
redirect_uri | string The configured redirect callback URI for this application. For the MSAL library, the redirect must use the application ID and its signature. Use |
authority_type | string Set to |
authority_url | string The directory from which MSAL can request tokens. Typically, set to |
logout_url | string Set to |
limit_to_launcher_groups | boolean If set to |
scopes | string OIDC scope values required for the identity provider. For MSAL, the values should be |
audience_tenant_id | string Set to the Azure Tenant ID. Replaces |
shared_device_mode_supported | boolean Set to |
broker_redirect_uri_registered | boolean If |
limit_groups_to_direct_membership | boolean If set to |
ignoreAccountChangeBroadcast | boolean if set to |
audience_type | string If set, overrides the default audience type of "AzureADMyOrg". |
default_group | string If set, is the default group assigned to a logged in user. |
account_mode | string If set, overrides the default account mode of "SINGLE". |
idpPasswordChangePolicyDays | string The number of days set in the IdP after which the password needs to be changed. |
idpPasswordChangeReminderDays | string Number of days prior to password expiration to start notifying users of upcoming password expirations. |
Auth4 Example:
For more information on configuring, see the AppAuth/OIDC IdP section.
Last updated