Skip to content

Commit 9e30438

Browse files
committed
recommendation-adal-081523
1 parent f8b7956 commit 9e30438

File tree

1 file changed

+9
-20
lines changed

1 file changed

+9
-20
lines changed

articles/active-directory/reports-monitoring/recommendation-migrate-from-adal-to-msal.md

Lines changed: 9 additions & 20 deletions
Original file line numberDiff line numberDiff line change
@@ -1,18 +1,16 @@
11
---
2-
title: Azure Active Directory recommendation - Migrate from ADAL to MSAL | Microsoft Docs
2+
title: Migrate from ADAL to MSAL recommendation
33
description: Learn why you should migrate from the Azure Active Directory Library to the Microsoft Authentication Libraries.
44
services: active-directory
55
author: shlipsey3
66
manager: amycolannino
77
ms.service: active-directory
88
ms.topic: reference
9-
ms.workload: identity
9+
ms.workload: identityr
1010
ms.subservice: report-monitor
11-
ms.date: 08/10/2023
11+
ms.date: 08/15/2023
1212
ms.author: sarahlipsey
1313
ms.reviewer: jamesmantu
14-
15-
ms.collection: M365-identity-device-management
1614
---
1715

1816
# Azure AD recommendation: Migrate from the Azure Active Directory Library to the Microsoft Authentication Libraries
@@ -37,25 +35,16 @@ Existing apps that use ADAL will continue to work after the end-of-support date.
3735

3836
## Action plan
3937

40-
The first step to migrating your apps from ADAL to MSAL is to identify all applications in your tenant that are currently using ADAL. You can identify your apps in the Azure portal or programmatically with the Microsoft Graph API or the Microsoft Graph PowerShell SDK.
41-
42-
### [Azure portal](#tab/Azure-portal)
43-
44-
There are four steps to identifying and updating your apps in the Azure portal. The following steps are covered in detail in the [List all apps using ADAL](../develop/howto-get-list-of-all-auth-library-apps.md) article.
45-
46-
1. Send Azure AD sign-in event to Azure Monitor.
47-
1. [Access the sign-ins workbook in Azure AD.](../develop/howto-get-list-of-all-auth-library-apps.md)
48-
1. Identify the apps that use ADAL.
49-
1. Update your code.
50-
- The steps to update your code vary depending on the type of application.
51-
- For example, the steps for .NET and Python applications have separate instructions.
52-
- For a full list of instructions for each scenario, see [How to migrate to MSAL](../develop/msal-migration.md#how-to-migrate-to-msal).
38+
The first step to migrating your apps from ADAL to MSAL is to identify all applications in your tenant that are currently using ADAL. You can identify your apps programmatically with the Microsoft Graph API or the Microsoft Graph PowerShell SDK. The steps for the Microsoft Graph PowerShell SDK are provided in the Recommendation details in the Azure Active Directory portal.
5339

5440
### [Microsoft Graph API](#tab/Microsoft-Graph-API)
5541

5642
You can use Microsoft Graph to identify apps that need to be migrated to MSAL. To get started, see [How to use Microsoft Graph with Azure AD recommendations](howto-use-recommendations.md#how-to-use-microsoft-graph-with-azure-active-directory-recommendations).
5743

58-
Run the following query in Microsoft Graph, replacing the `<TENANT_ID>` placeholder with your tenant ID. This query returns a list of the impacted resources in your tenant.
44+
1. Sign in to [Graph Explorer](https://aka.ms/ge).
45+
1. Select **GET** as the HTTP method from the dropdown.
46+
1. Set the API version to **beta**.
47+
1. Run the following query in Microsoft Graph, replacing the `<TENANT_ID>` placeholder with your tenant ID. This query returns a list of the impacted resources in your tenant.
5948

6049
```http
6150
https://graph.microsoft.com/beta/directory/recommendations/<TENANT_ID>_Microsoft.Identity.IAM.Insights.AdalToMsalMigration/impactedResources
@@ -116,7 +105,7 @@ To reduce false positives, the service uses a 30 day window for ADAL requests. T
116105

117106
### How were ADAL applications identified before the recommendation was released?
118107

119-
The [Azure AD sign-ins workbook](../develop/howto-get-list-of-all-auth-library-apps.md) is an alternative method to identify these apps. The workbook is still available to you, but using the workbook requires streaming sign-in logs to Azure Monitor first. The ADAL to MSAL recommendation works out of the box. Plus, the sign-ins workbook does not capture Service Principal sign-ins, while the recommendation does.
108+
The [Azure AD sign-ins workbook](../develop/howto-get-list-of-all-auth-library-apps.md) was an alternative method to identify these apps. The workbook is still available to you, but using the workbook requires streaming sign-in logs to Azure Monitor first. The ADAL to MSAL recommendation works out of the box. Plus, the sign-ins workbook doesn't capture Service Principal sign-ins, while the recommendation does.
120109

121110
### Why is the number of ADAL applications different in the workbook and the recommendation?
122111

0 commit comments

Comments
 (0)