Update OBO page to not use \common and how to get the tenant ID from the assertion

[pmaytak]

Add to the OBO page

• To not use common and org endpoints.
• How to get a tenant ID from the user assertion.

Correct pattern is:

Extract tid claim from client assertion
Use authority cloud/tid to perform OBO on

Related to this issue in MSAL: AzureAD/microsoft-authentication-library-for-dotnet#4606

---

Document Details

⚠ Do not edit this section. It is required for learn.microsoft.com ➟ GitHub issue linking.

• ID: 700e556f-d6f8-a3a5-8660-a9e78e371b9f
• Version Independent ID: 700e556f-d6f8-a3a5-8660-a9e78e371b9f
• Content: On-behalf-of flows with MSAL.NET - Microsoft Authentication Library for .NET
• Content Source: msal-dotnet-articles/acquiring-tokens/web-apps-apis/on-behalf-of-flow.md
• Service: msal
• GitHub Login: @localden
• Microsoft Alias: ddelimarsky