The MSAL library for .NET is part of the Microsoft identity platform for developers (formerly named Azure AD) v2.0. It enables you to acquire security tokens to call protected APIs. It uses industry standard OAuth2 and OpenID Connect. The library also supports Azure AD B2C.

Quick links:

MSAL.NET roadmap is available from Roadmap in the Wiki pages, along with release notes.

MSAL.NET became Generally Available with MSAL.NET 3.0.8. Since MSAL.NET moved to 4.x

• Major versions are supported for twelve months after the release of the next major version.
• Minor versions older than N-1 are not supported.

  Minor versions are bugfixes or features with non-breaking (additive) API changes. It is expected apps can upgrade. Therefore, we will not patch old minor versions of the library. You should also confirm, in issue repros, that you are using the latest minor version before the MSAL.NET team spends time investigating an issue.

• The conceptual documentation is currently available from the Microsoft identity platform documentation and our Wiki pages
• The reference documentation is available from the dotnet APIs reference in docs.microsoft.com
• A number of quickstarts are available for:
  • .NET desktop application
  • Universal Windows Platform (UWP)
  • .NET Core daemon console
• Code samples are available from Samples

This is the correct repo to file issues

Operating system:

• Windows 7 or greater

Platform of choice:

• .NET 4.5 or greater
• .NET Core 2.1 or greater
• .NET Standard 1.3
• Mono Android 9.0
• UAP 10.0
• Xamarin.iOS 10
• Xamarin.Mac 2.0

We use Stack Overflow with the community to provide support. We highly recommend you ask your questions on Stack Overflow first and browse existing issues to see if someone has asked your question before.

If you find a bug or have a feature request, please raise the issue on GitHub Issues.

To provide a recommendation, visit our User Voice page.

We enthusiastically welcome contributions and feedback. You can clone the repo and start contributing now. Read our Contribution Guide for more information.

This project has adopted the Microsoft Open Source Code of Conduct. For more information see the Code of Conduct FAQ or contact [email protected] with any additional questions or comments.

This library controls how users sign-in and access services. We recommend you always take the latest version of our library in your app when possible. We use semantic versioning so you can control the risk associated with updating your app. As an example, always downloading the latest minor version number (e.g. x.y.z) ensures you get the latest security and feature enhancements but our API surface remains the same. You can always see the latest version and release notes under the Releases tab of GitHub.

If you find a security issue with our libraries or services please report it to [email protected] with as much detail as possible. Your submission may be eligible for a bounty through the Microsoft Bounty program. Please do not post security issues to GitHub Issues or any other public site. We will contact you shortly upon receiving the information. We encourage you to get notifications of when security incidents occur by visiting this page and subscribing to Security Advisory Alerts.

Copyright (c) Microsoft Corporation. All rights reserved. Licensed under the MIT License (the "License");