Microsoft.Identity.Web Namespace

Options passed-in to create the AadIssuerValidator object.

Extension methods for IAccount.

Extension methods to retrieve a Graph service client, or interfaces used to call downstream web APIs.

Extension methods on an ASP.NET application to add a web app or web API.

Extension class on IApplicationBuilder to initialize the service provider of the TokenAcquirerFactory in ASP.NET Core.

Extension methods related to App Services authentication (Easy Auth).

Default values related to AppServiceAuthentication handler.

App service authentication handler.

Information about the App Services configuration on the host.

Options for Azure App Services authentication.

Implementation of ITokenAcquisition for App Services authentication (EasyAuth).

Filter used on a controller action to trigger incremental consent.

Extensions for AzureFunctionsAuthenticationHttpContextExtension.

Gets a signed assertion from Azure workload identity for kubernetes when an app is running in a container in Azure Kubernetes Services. See https://aka.ms/ms-id-web/certificateless and https://learn.microsoft.com/azure/aks/workload-identity-overview

Extension methods for Graph requests

Description of a certificate.

Options for configuring CertificatelessOptions. See https://aka.ms/ms-id-web/certificateless.

Constants for claim types.

Extensions for ClaimsPrincipal.

Factory class to create ClaimsPrincipal objects.

Client assertion.

Description of a client assertion in the application configuration. See https://aka.ms/ms-id-web/client-assertions.

General constants for Microsoft Identity Web.

Extension methods to retrieve a Graph service client and interfaces used to call a downstream web API.

Extension class containing cookie policies (work around for same site).

Certificate Loader. Only use when loading a certificate from a daemon application, or an ASP NET app, using MSAL .NET directly. For an ASP NET Core app, Microsoft Identity Web will handle the certificate loading for you.

IConfidentialClientApplication app;
ICertificateLoader certificateLoader = new DefaultCertificateLoader();
    certificateLoader.LoadIfNeeded(config.CertificateDescription);

   app = ConfidentialClientApplicationBuilder.Create(config.ClientId)
          .WithCertificate(config.CertificateDescription.Certificate)
          .WithAuthority(new Uri(config.Authority))
          .Build();

Default credentials loader.

Extension methods to support downstream REST API services.

Implementation for the downstream web API.

Extension methods to support downstream web API services.

Extensions for the downstream web API.

Options passed-in to call downstream web APIs. To call Microsoft Graph, see rather MicrosoftGraphOptions in the Microsoft.Identity.Web.MicrosoftGraph assembly.

Extensions methods on a MicrosoftIdentityAppCallingWebApiAuthenticationBuilder builder to add support to call Microsoft Graph.

See https://aka.ms/ms-id-web/certificateless.

Extensions methods on a MicrosoftIdentityAppCallingWebApiAuthenticationBuilder builder to add support to call Microsoft Graph.

Options passed-in to call Microsoft Graph.

A DelegatingHandler implementation that add an authorization header with a token for the application.

Authentication builder returned by the EnableTokenAcquisitionToCallDownstreamApi methods enabling you to decide token cache implementations.

Authentication builder returned by the EnableTokenAcquisitionToCallDownstreamApi methods enabling you to use the session cache implementation.

Base class for Microsoft Identity authentication message handlers.

Base options passed-in to authenticate with Microsoft Identity.

Extension for IHttpClientBuilder for startup initialization of Microsoft Identity authentication handlers.

Options passed-in to Microsoft Identity message handlers.

Base class for web app and web API Microsoft Identity authentication builders.

Extensions for IServerSideBlazorBuilder for startup initialization of web APIs.

Handler for Blazor specific APIs to handle incremental consent and conditional access.

Options for configuring authentication using Azure Active Directory. It has both AAD and B2C configuration attributes.

A DelegatingHandler implementation that add an authorization header with a token on behalf of the current user.

Authentication builder for a web API.

Extensions for AuthenticationBuilder for startup initialization of web APIs.

Builder for web API authentication with configuration.

Extension for IServiceCollection for startup initialization of web APIs.

Authentication builder specific for Microsoft identity platform.

Extensions for the AuthenticationBuilder for startup initialization.

Builder for a Microsoft identity web app authentication where configuration is available for EnableTokenAcquisitionToCallDownstreamApi.

Extension for IServiceCollection for startup initialization.

Microsoft Identity Web specific exception class for use in Blazor or Razor pages to process the user challenge. Handles the MsalUiRequiredException.

Extensions for building the RequiredScope policy during application startup.

Extensions to retrieve a SecurityToken from ClaimsPrincipal.

Extensions for building the required scope attribute during application startup.

Extensions for building the required scope or app permission attribute during application startup.

Implements an IAuthorizationRequirement which requires at least one instance of the specified claim type, and, if allowed values are specified, the claim value must be any of the allowed values.

Implements an IAuthorizationRequirement which requires at least one instance of the specified claim type, and, if allowed values are specified, the claim value must be any of the allowed values.

Extensions for IServiceCollection for startup initialization of web APIs.

Azure SDK token credential for App tokens based on the ITokenAcquisition service.

Factory of a token acquirer.

Azure SDK token credential based on the ITokenAcquisition service.

Azure SDK token credential for App tokens based on the ITokenAcquisition service.

Options for TokenAcquisition add-ins. These options consist in a set of events, that can be subscribed to by add-ins or parts of the add-ins.

Options passed-in to create the token acquisition object which calls into MSAL .NET.

Azure SDK token credential based on the ITokenAcquisition service.

Extension methods to expose a simplified developer experience for adding token caches to MSAL.NET confidential client applications in ASP.NET, or .NET Core, or .NET FW.

This is the metadata that describes required auth scopes for a given endpoint in a web API. It's the underlying data structure the requirement ScopeAuthorizationRequirement will look for in order to validate scopes in the scope claims.

This is the metadata that describes required auth scopes or app permissions for a given endpoint in a web API. It's the underlying data structure the requirement ScopeOrAppPermissionAuthorizationRequirement will look for in order to validate scopes in the scope claims or app permissions in the roles claim.

Interface to implement loading of a certificate. Only use when loading a certificate from a daemon application, or an ASP NET app, using MSAL .NET directly. For an ASP NET Core app, Microsoft Identity Web will handle the certificate loading for you.

IConfidentialClientApplication app;
ICertificateLoader certificateLoader = new DefaultCertificateLoader();
    certificateLoader.LoadIfNeeded(config.CertificateDescription);

   app = ConfidentialClientApplicationBuilder.Create(config.ClientId)
          .WithCertificate(config.CertificateDescription.Certificate)
          .WithAuthority(new Uri(config.Authority))
          .Build();

Interface used to call a downstream web API, for instance from controllers.

Provides access to get or set the current error status. The default implementation will use TempData and be enabled when run under Development.

Interface to a class that provides the DelegatingHandler that adds an authorization header with a token for the application.

Interface for the token acquisition service (encapsulating MSAL.NET).

Source for a certificate.

Signature for token acquisition extensions that act on the request builder, for an app token

Signature for token acquisition extensions that act on the request builder, for ROPC flow.