You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/active-directory/reports-monitoring/recommendation-migrate-from-adal-to-msal.md
+10-20Lines changed: 10 additions & 20 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -1,18 +1,16 @@
1
1
---
2
-
title: Azure Active Directory recommendation - Migrate from ADAL to MSAL | Microsoft Docs
2
+
title: Migrate from ADAL to MSAL recommendation
3
3
description: Learn why you should migrate from the Azure Active Directory Library to the Microsoft Authentication Libraries.
4
4
services: active-directory
5
5
author: shlipsey3
6
6
manager: amycolannino
7
7
ms.service: active-directory
8
8
ms.topic: reference
9
-
ms.workload: identity
9
+
ms.workload: identityr
10
10
ms.subservice: report-monitor
11
-
ms.date: 08/10/2023
11
+
ms.date: 08/15/2023
12
12
ms.author: sarahlipsey
13
13
ms.reviewer: jamesmantu
14
-
15
-
ms.collection: M365-identity-device-management
16
14
---
17
15
18
16
# Azure AD recommendation: Migrate from the Azure Active Directory Library to the Microsoft Authentication Libraries
@@ -37,25 +35,16 @@ Existing apps that use ADAL will continue to work after the end-of-support date.
37
35
38
36
## Action plan
39
37
40
-
The first step to migrating your apps from ADAL to MSAL is to identify all applications in your tenant that are currently using ADAL. You can identify your apps in the Azure portal or programmatically with the Microsoft Graph API or the Microsoft Graph PowerShell SDK.
41
-
42
-
### [Azure portal](#tab/Azure-portal)
43
-
44
-
There are four steps to identifying and updating your apps in the Azure portal. The following steps are covered in detail in the [List all apps using ADAL](../develop/howto-get-list-of-all-auth-library-apps.md) article.
45
-
46
-
1. Send Azure AD sign-in event to Azure Monitor.
47
-
1.[Access the sign-ins workbook in Azure AD.](../develop/howto-get-list-of-all-auth-library-apps.md)
48
-
1. Identify the apps that use ADAL.
49
-
1. Update your code.
50
-
- The steps to update your code vary depending on the type of application.
51
-
- For example, the steps for .NET and Python applications have separate instructions.
52
-
- For a full list of instructions for each scenario, see [How to migrate to MSAL](../develop/msal-migration.md#how-to-migrate-to-msal).
38
+
The first step to migrating your apps from ADAL to MSAL is to identify all applications in your tenant that are currently using ADAL. You can identify your apps programmatically with the Microsoft Graph API or the Microsoft Graph PowerShell SDK. The steps for the Microsoft Graph PowerShell SDK are provided in the Recommendation details in the Azure Active Directory portal.
You can use Microsoft Graph to identify apps that need to be migrated to MSAL. To get started, see [How to use Microsoft Graph with Azure AD recommendations](howto-use-recommendations.md#how-to-use-microsoft-graph-with-azure-active-directory-recommendations).
57
43
58
-
Run the following query in Microsoft Graph, replacing the `<TENANT_ID>` placeholder with your tenant ID. This query returns a list of the impacted resources in your tenant.
44
+
1. Sign in to [Graph Explorer](https://aka.ms/ge).
45
+
1. Select **GET** as the HTTP method from the dropdown.
46
+
1. Set the API version to **beta**.
47
+
1. Run the following query in Microsoft Graph, replacing the `<TENANT_ID>` placeholder with your tenant ID. This query returns a list of the impacted resources in your tenant.
@@ -108,6 +97,7 @@ You can run the following set of commands in Windows PowerShell. These commands
108
97
109
98
---
110
99
100
+
111
101
## Frequently asked questions
112
102
113
103
### Why does it take 30 days to change the status to completed?
@@ -116,7 +106,7 @@ To reduce false positives, the service uses a 30 day window for ADAL requests. T
116
106
117
107
### How were ADAL applications identified before the recommendation was released?
118
108
119
-
The [Azure AD sign-ins workbook](../develop/howto-get-list-of-all-auth-library-apps.md)is an alternative method to identify these apps. The workbook is still available to you, but using the workbook requires streaming sign-in logs to Azure Monitor first. The ADAL to MSAL recommendation works out of the box. Plus, the sign-ins workbook does not capture Service Principal sign-ins, while the recommendation does.
109
+
The [Azure AD sign-ins workbook](../develop/howto-get-list-of-all-auth-library-apps.md)was an alternative method to identify these apps. The workbook is still available to you, but using the workbook requires streaming sign-in logs to Azure Monitor first. The ADAL to MSAL recommendation works out of the box. Plus, the sign-ins workbook doesn't capture Service Principal sign-ins, while the recommendation does.
120
110
121
111
### Why is the number of ADAL applications different in the workbook and the recommendation?
0 commit comments