You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: docs/MSAL_2x_Release_Announcement_and_Migration_Guide.md
+18-18Lines changed: 18 additions & 18 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -26,15 +26,15 @@ This standardization enables secure and valid redirection to brokered authentica
26
26
27
27
#### How to Migrate
28
28
29
-
#####a. Register a valid redirect URI
29
+
#####1. Register a valid redirect URI
30
30
31
31
In the Azure Portal under-App Registrations > Authentication, configure a redirect URI in the format: `msauth.[BUNDLE_ID]://auth`.
32
32
33
33
Note: If migrating from ADAL, the `<scheme>://[BUNDLE_ID]` format is still supported.
34
34
35
35
⚠️ Important: Ensure this redirect URI is configured across all app targets and extensions (such as Share Extensions) to enable smooth brokered authentication.
36
36
37
-
#####b. Update Info.plist
37
+
#####2. Update Info.plist
38
38
39
39
Add the following entry to your app’s Info.plist:
40
40
@@ -50,7 +50,7 @@ Add the following entry to your app’s Info.plist:
50
50
</array>
51
51
```
52
52
53
-
#####c. Add URL schemes to Info.plist
53
+
#####3. Add URL schemes to Info.plist
54
54
55
55
Include the following in Info.plist under LSApplicationQueriesSchemes:
56
56
@@ -62,7 +62,7 @@ Include the following in Info.plist under LSApplicationQueriesSchemes:
62
62
</array>
63
63
```
64
64
65
-
#####d. Initialize MSALPublicClientApplication using the configured redirect URI
65
+
#####4. Initialize MSALPublicClientApplication using the configured redirect URI
66
66
67
67
Objective-C:
68
68
```objc
@@ -103,7 +103,7 @@ Note: Remember to replace any placeholder values with your actual app-specific v
103
103
104
104
⚠️ Important: Do not set bypassRedirectURIValidation = YES/true on MSALPublicClientApplicationConfig when using enterprise (AAD) redirect URIs. This will disable MSAL’s validation and brokered authentication, leading to failures in supported authentication scenarios.
105
105
106
-
### Invalid Format Handling
106
+
####Invalid Format Handling
107
107
108
108
If an invalid redirect URI is provided for enterprise (AAD) scenarios, MSAL will fail at initialization of `MSALPublicClientApplication` with the following error:
109
109
@@ -114,7 +114,7 @@ If an invalid redirect URI is provided for enterprise (AAD) scenarios, MSAL will
114
114
|**Internal Error Code**|`-42011`|
115
115
|**Description**| Varies depending on the validation failure (e.g., missing scheme, mismatched bundle ID, invalid host) |
0 commit comments