Skip to content

Commit 615c776

Browse files
committed
Learn Editor: Update linux-broker-py.md
1 parent 152b5a9 commit 615c776

File tree

1 file changed

+10
-4
lines changed

1 file changed

+10
-4
lines changed

msal-python-conceptual/advanced/linux-broker-py.md

Lines changed: 10 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -15,14 +15,20 @@ ms.date: 03/18/2025
1515
# Using MSAL Python with an Authentication Broker on Linux
1616

1717

18-
# Using MSAL Python with an Authentication Broker on macOS
19-
2018
> [!NOTE]
2119
> Linux authentication broker support is introduced with `msal` version UPDATE_ME.
2220
23-
Using an authentication brokers on macOS enables you to simplify how your users authenticate with Microsoft Entra ID from your application, as well as take advantage of future functionality that protects Microsoft Entra ID refresh tokens from exfiltration and misuse.
21+
Using an authentication brokers on Linux enables you to simplify how your users authenticate with Microsoft Entra ID from your application, as well as take advantage of future functionality that protects Microsoft Entra ID refresh tokens from exfiltration and misuse.
22+
23+
Authentication brokers are **not** pre-installed on Linux but are applications developed by Microsoft, such as [Company Portal](/mem/intune/apps/apps-company-portal-macos). These applications are usually installed when a Linux computer is enrolled in a company's device fleet via an endpoint management solution like [Microsoft Intune](/mem/intune/fundamentals/what-is-intune). To learn more about Linux device set up with the Microsoft Identity Platform, refer to {TODO} [Microsoft Enterprise SSO plug-in for Apple devices](/entra/identity-platform/apple-sso-plugin).
24+
25+
1. In the MSAL Python library, we've introduced the `enable_broker_on_linux` flag, which enables the broker on both WSL and standalone Linux. However, if your goal is to enable broker support solely on WSL for Azure CLI, you can consider modifying the Azure CLI app code to activate the `enable_broker_on_linux` flag exclusively on WSL.
26+
27+
1. For WSL, there are no additional dependencies required. The Windows Authentication Manager (WAM), which is available by default on Windows, will serve as the broker. For standalone Linux, you'll need to have the Intune Portal installed for the Linux standalone broker to be set up and running.
28+
29+
1. If the broker is not installed on standalone Linux, it will fall back to the non-broker authentication flow.
2430

25-
Authentication brokers are **not** pre-installed on macOS but are applications developed by Microsoft, such as [Company Portal](/mem/intune/apps/apps-company-portal-macos). These applications are usually installed when a macOS computer is enrolled in a company's device fleet via an endpoint management solution like [Microsoft Intune](/mem/intune/fundamentals/what-is-intune). To learn more about Apple device set up with the Microsoft Identity Platform, refer to [Microsoft Enterprise SSO plug-in for Apple devices](/entra/identity-platform/apple-sso-plugin).
31+
1. If you choose to enable the broker on standalone Linux as well, you would need to test this environment to ensure there is no regression.
2632

2733
## Usage
2834

0 commit comments

Comments
 (0)