Skip to content

Commit 11e87ca

Browse files
Merge pull request #248332 from shlipsey3/recommendation-adal-081523
recommendation-adal-081523
2 parents a5f6971 + 310cf03 commit 11e87ca

File tree

1 file changed

+10
-20
lines changed

1 file changed

+10
-20
lines changed

articles/active-directory/reports-monitoring/recommendation-migrate-from-adal-to-msal.md

Lines changed: 10 additions & 20 deletions
Original file line numberDiff line numberDiff line change
@@ -1,18 +1,16 @@
11
---
2-
title: Azure Active Directory recommendation - Migrate from ADAL to MSAL | Microsoft Docs
2+
title: Migrate from ADAL to MSAL recommendation
33
description: Learn why you should migrate from the Azure Active Directory Library to the Microsoft Authentication Libraries.
44
services: active-directory
55
author: shlipsey3
66
manager: amycolannino
77
ms.service: active-directory
88
ms.topic: reference
9-
ms.workload: identity
9+
ms.workload: identityr
1010
ms.subservice: report-monitor
11-
ms.date: 08/10/2023
11+
ms.date: 08/15/2023
1212
ms.author: sarahlipsey
1313
ms.reviewer: jamesmantu
14-
15-
ms.collection: M365-identity-device-management
1614
---
1715

1816
# Azure AD recommendation: Migrate from the Azure Active Directory Library to the Microsoft Authentication Libraries
@@ -37,25 +35,16 @@ Existing apps that use ADAL will continue to work after the end-of-support date.
3735

3836
## Action plan
3937

40-
The first step to migrating your apps from ADAL to MSAL is to identify all applications in your tenant that are currently using ADAL. You can identify your apps in the Azure portal or programmatically with the Microsoft Graph API or the Microsoft Graph PowerShell SDK.
41-
42-
### [Azure portal](#tab/Azure-portal)
43-
44-
There are four steps to identifying and updating your apps in the Azure portal. The following steps are covered in detail in the [List all apps using ADAL](../develop/howto-get-list-of-all-auth-library-apps.md) article.
45-
46-
1. Send Azure AD sign-in event to Azure Monitor.
47-
1. [Access the sign-ins workbook in Azure AD.](../develop/howto-get-list-of-all-auth-library-apps.md)
48-
1. Identify the apps that use ADAL.
49-
1. Update your code.
50-
- The steps to update your code vary depending on the type of application.
51-
- For example, the steps for .NET and Python applications have separate instructions.
52-
- For a full list of instructions for each scenario, see [How to migrate to MSAL](../develop/msal-migration.md#how-to-migrate-to-msal).
38+
The first step to migrating your apps from ADAL to MSAL is to identify all applications in your tenant that are currently using ADAL. You can identify your apps programmatically with the Microsoft Graph API or the Microsoft Graph PowerShell SDK. The steps for the Microsoft Graph PowerShell SDK are provided in the Recommendation details in the Azure Active Directory portal.
5339

5440
### [Microsoft Graph API](#tab/Microsoft-Graph-API)
5541

5642
You can use Microsoft Graph to identify apps that need to be migrated to MSAL. To get started, see [How to use Microsoft Graph with Azure AD recommendations](howto-use-recommendations.md#how-to-use-microsoft-graph-with-azure-active-directory-recommendations).
5743

58-
Run the following query in Microsoft Graph, replacing the `<TENANT_ID>` placeholder with your tenant ID. This query returns a list of the impacted resources in your tenant.
44+
1. Sign in to [Graph Explorer](https://aka.ms/ge).
45+
1. Select **GET** as the HTTP method from the dropdown.
46+
1. Set the API version to **beta**.
47+
1. Run the following query in Microsoft Graph, replacing the `<TENANT_ID>` placeholder with your tenant ID. This query returns a list of the impacted resources in your tenant.
5948

6049
```http
6150
https://graph.microsoft.com/beta/directory/recommendations/<TENANT_ID>_Microsoft.Identity.IAM.Insights.AdalToMsalMigration/impactedResources
@@ -108,6 +97,7 @@ You can run the following set of commands in Windows PowerShell. These commands
10897

10998
---
11099

100+
111101
## Frequently asked questions
112102

113103
### Why does it take 30 days to change the status to completed?
@@ -116,7 +106,7 @@ To reduce false positives, the service uses a 30 day window for ADAL requests. T
116106

117107
### How were ADAL applications identified before the recommendation was released?
118108

119-
The [Azure AD sign-ins workbook](../develop/howto-get-list-of-all-auth-library-apps.md) is an alternative method to identify these apps. The workbook is still available to you, but using the workbook requires streaming sign-in logs to Azure Monitor first. The ADAL to MSAL recommendation works out of the box. Plus, the sign-ins workbook does not capture Service Principal sign-ins, while the recommendation does.
109+
The [Azure AD sign-ins workbook](../develop/howto-get-list-of-all-auth-library-apps.md) was an alternative method to identify these apps. The workbook is still available to you, but using the workbook requires streaming sign-in logs to Azure Monitor first. The ADAL to MSAL recommendation works out of the box. Plus, the sign-ins workbook doesn't capture Service Principal sign-ins, while the recommendation does.
120110

121111
### Why is the number of ADAL applications different in the workbook and the recommendation?
122112

0 commit comments

Comments
 (0)