Microsoft.Identity.Client.4.7.1/netcoreapp2.1/Microsoft.Identity.Client.xml
|
<?xml version="1.0"?>
<doc> <assembly> <name>Microsoft.Identity.Client</name> </assembly> <members> <member name="T:Microsoft.Identity.Client.Account"> <summary> Contains information of a single account. A user can be present in multiple directories and thus have multiple accounts. This information is used for token cache lookup and enforcing the user session on the STS authorize endpoint. </summary> </member> <member name="M:Microsoft.Identity.Client.Account.#ctor(System.String,System.String,System.String)"> <summary> Constructor </summary> <param name="homeAccountId">Home account id in "uid.utid" format; can be null, for example when migrating the ADAL v3 cache</param> <param name="username">UPN style , can be null</param> <param name="environment">Identity provider for this account, e.g. <c>login.microsoftonline.com</c></param> </member> <member name="T:Microsoft.Identity.Client.AccountId"> <summary> An identifier for an account in a specific tenant. Returned by <see cref="P:IAccount.HomeAccountId"/> </summary> </member> <member name="P:Microsoft.Identity.Client.AccountId.Identifier"> <summary> Unique identifier for the account </summary> <remarks> For the Microsoft identity platform (formerly named Azure AD v2.0), the identifier is the concatenation of <see cref="P:Microsoft.Identity.Client.AccountId.ObjectId"/> and <see cref="P:Microsoft.Identity.Client.AccountId.TenantId"/> separated by a dot. Contrary to what was happening in ADAL.NET, these two segments are no longer base64 encoded. Note that there are some legitimate cases (for instance domain takeover), where the same ObjectId may show up in multiple tenants. </remarks> </member> <member name="P:Microsoft.Identity.Client.AccountId.ObjectId"> <summary> For Azure AD, a string representation for a Guid which is the Object ID of the user owning the account in the tenant </summary> </member> <member name="P:Microsoft.Identity.Client.AccountId.TenantId"> <summary> For Azure AD, a string representation for a Guid, which is the ID of the tenant where the account resides. </summary> </member> <member name="M:Microsoft.Identity.Client.AccountId.#ctor(System.String,System.String,System.String)"> <summary> Constructor of an AccountId </summary> <param name="identifier">Unique identifier for the account.</param> <param name="objectId">A string representation for a GUID which is the ID of the user owning the account in the tenant</param> <param name="tenantId">A string representation for a GUID, which is the ID of the tenant where the account resides</param> </member> <member name="M:Microsoft.Identity.Client.AccountId.#ctor(System.String)"> <summary> Constructor of an AccountId meant for Adfs scenarios since Adfs instances lack tenant ids. </summary> <param name="adfsIdentifier">Unique identifier for the account if authority is ADFS</param> </member> <member name="M:Microsoft.Identity.Client.AccountId.Equals(System.Object)"> <summary> Two accounts are equal when their <see cref="P:Microsoft.Identity.Client.AccountId.Identifier"/> properties match </summary> </member> <member name="M:Microsoft.Identity.Client.AccountId.GetHashCode"> <summary> GetHashCode implementation to match <see cref="M:Microsoft.Identity.Client.AccountId.Equals(System.Object)"/> </summary> </member> <member name="M:Microsoft.Identity.Client.AccountId.ToString"> <summary> Textual description of an <see cref="T:Microsoft.Identity.Client.AccountId"/> </summary> </member> <member name="T:Microsoft.Identity.Client.AbstractAcquireTokenParameterBuilder`1"> <summary> Base class for builders of token requests, which attempt to acquire a token based on the provided parameters </summary> <typeparam name="T"></typeparam> </member> <member name="M:Microsoft.Identity.Client.AbstractAcquireTokenParameterBuilder`1.ExecuteAsync(System.Threading.CancellationToken)"> <summary> Executes the Token request asynchronously, with a possibility of cancelling the asynchronous method. </summary> <param name="cancellationToken">Cancellation token. See <see cref="T:System.Threading.CancellationToken"/> </param> <returns>Authentication result containing a token for the requested scopes and parameters set in the builder</returns> <remarks>Cancellation is not guaranteed, it is best effort. If the operation reaches a point of no return, e.g. tokens are acquired and written to the cache, the task will complete even if cancellation was requested. Do not rely on cancellation tokens for strong consistency.</remarks> </member> <member name="M:Microsoft.Identity.Client.AbstractAcquireTokenParameterBuilder`1.ExecuteAsync"> <summary> Executes the Token request asynchronously. </summary> <returns>Authentication result containing a token for the requested scopes and parameters set in the builder</returns> </member> <member name="M:Microsoft.Identity.Client.AbstractAcquireTokenParameterBuilder`1.WithScopes(System.Collections.Generic.IEnumerable{System.String})"> <summary> Specifies which scopes to request </summary> <param name="scopes">Scopes requested to access a protected API</param> <returns>The builder to chain the .With methods</returns> </member> <member name="M:Microsoft.Identity.Client.AbstractAcquireTokenParameterBuilder`1.WithExtraQueryParameters(System.Collections.Generic.Dictionary{System.String,System.String})"> <summary> Sets Extra Query Parameters for the query string in the HTTP authentication request </summary> <param name="extraQueryParameters">This parameter will be appended as is to the query string in the HTTP authentication request to the authority as a string of segments of the form <c>key=value</c> separated by an ampersand character. The parameter can be null.</param> <returns>The builder to chain the .With methods</returns> </member> <member name="M:Microsoft.Identity.Client.AbstractAcquireTokenParameterBuilder`1.WithClaims(System.String)"> <summary> Sets claims in the query. Use when the AAD admin has enabled conditional access. Acquiring the token normally will result in a <see cref="T:Microsoft.Identity.Client.MsalServiceException"/> with the <see cref="P:Microsoft.Identity.Client.MsalServiceException.Claims"/> property set. Retry the token acquisition, and use this value in the <see cref="M:Microsoft.Identity.Client.AbstractAcquireTokenParameterBuilder`1.WithClaims(System.String)"/> method. See https://aka.ms/msal-exceptions for details </summary> <param name="claims">A string with one or multiple claims.</param> <returns>The builder to chain .With methods</returns> </member> <member name="M:Microsoft.Identity.Client.AbstractAcquireTokenParameterBuilder`1.WithExtraQueryParameters(System.String)"> <summary> Sets Extra Query Parameters for the query string in the HTTP authentication request </summary> <param name="extraQueryParameters">This parameter will be appended as is to the query string in the HTTP authentication request to the authority. The string needs to be properly URL-encdoded and ready to send as a string of segments of the form <c>key=value</c> separated by an ampersand character. </param> <returns></returns> </member> <member name="M:Microsoft.Identity.Client.AbstractAcquireTokenParameterBuilder`1.WithAuthority(System.String,System.Boolean)"> <summary> Specific authority for which the token is requested. Passing a different value than configured at the application constructor narrows down the selection to a specific tenant. This does not change the configured value in the application. This is specific to applications managing several accounts (like a mail client with several mailboxes). See https://aka.ms/msal-net-application-configuration </summary> <param name="authorityUri">Uri for the authority. In the case when the authority URI is a known Azure AD URI, this setting needs to be consistent with what is declared in the application registration portal</param> <param name="validateAuthority">Whether the authority should be validated against the server metadata.</param> <returns>The builder to chain the .With methods</returns> </member> <member name="M:Microsoft.Identity.Client.AbstractAcquireTokenParameterBuilder`1.WithAuthority(System.String,System.Guid,System.Boolean)"> <summary> Adds a known Azure AD authority to the application to sign-in users from a single organization (single tenant application) specified by its tenant ID. See https://aka.ms/msal-net-application-configuration. </summary> <param name="cloudInstanceUri">Azure Cloud instance</param> <param name="tenantId">Guid of the tenant from which to sign-in users</param> <param name="validateAuthority">Whether the authority should be validated against the server metadata.</param> <returns>The builder to chain the .With methods</returns> </member> <member name="M:Microsoft.Identity.Client.AbstractAcquireTokenParameterBuilder`1.WithAuthority(System.String,System.String,System.Boolean)"> <summary> Adds a known Azure AD authority to the application to sign-in users from a single organization (single tenant application) described by its domain name. See https://aka.ms/msal-net-application-configuration. </summary> <param name="cloudInstanceUri">Uri to the Azure Cloud instance (for instance <c>https://login.microsoftonline.com)</c></param> <param name="tenant">domain name associated with the tenant from which to sign-in users</param> <param name="validateAuthority">Whether the authority should be validated against the server metadata.</param> <remarks> <paramref name="tenant"/> can also contain the string representation of a GUID (tenantId), or even <c>common</c>, <c>organizations</c> or <c>consumers</c> but in this case it's recommended to use another override (<see cref="M:Microsoft.Identity.Client.AbstractAcquireTokenParameterBuilder`1.WithAuthority(Microsoft.Identity.Client.AzureCloudInstance,System.Guid,System.Boolean)"/> and <see cref="M:Microsoft.Identity.Client.AbstractAcquireTokenParameterBuilder`1.WithAuthority(Microsoft.Identity.Client.AzureCloudInstance,Microsoft.Identity.Client.AadAuthorityAudience,System.Boolean)"/> </remarks> <returns>The builder to chain the .With methods</returns> </member> <member name="M:Microsoft.Identity.Client.AbstractAcquireTokenParameterBuilder`1.WithAuthority(Microsoft.Identity.Client.AzureCloudInstance,System.Guid,System.Boolean)"> <summary> Adds a known Azure AD authority to the application to sign-in users from a single organization (single tenant application) described by its cloud instance and its tenant ID. See https://aka.ms/msal-net-application-configuration. </summary> <param name="azureCloudInstance">Instance of Azure Cloud (for instance Azure worldwide cloud, Azure German Cloud, US government ...)</param> <param name="tenantId">Tenant Id of the tenant from which to sign-in users</param> <param name="validateAuthority">Whether the authority should be validated against the server metadata.</param> <returns>The builder to chain the .With methods</returns> </member> <member name="M:Microsoft.Identity.Client.AbstractAcquireTokenParameterBuilder`1.WithAuthority(Microsoft.Identity.Client.AzureCloudInstance,System.String,System.Boolean)"> <summary> Adds a known Azure AD authority to the application to sign-in users from a single organization (single tenant application) described by its cloud instance and its domain name or tenant ID. See https://aka.ms/msal-net-application-configuration. </summary> <param name="azureCloudInstance">Instance of Azure Cloud (for instance Azure worldwide cloud, Azure German Cloud, US government ...)</param> <param name="tenant">Domain name associated with the Azure AD tenant from which <param name="validateAuthority">Whether the authority should be validated against the server metadata.</param> to sign-in users. This can also be a guid</param> <returns>The builder to chain the .With methods</returns> </member> <member name="M:Microsoft.Identity.Client.AbstractAcquireTokenParameterBuilder`1.WithAuthority(Microsoft.Identity.Client.AzureCloudInstance,Microsoft.Identity.Client.AadAuthorityAudience,System.Boolean)"> <summary> Adds a known Azure AD authority to the application to sign-in users specifying the cloud instance and the sign-in audience. See https://aka.ms/msal-net-application-configuration. </summary> <param name="azureCloudInstance">Instance of Azure Cloud (for instance Azure worldwide cloud, Azure German Cloud, US government ...)</param> <param name="authorityAudience">Sign-in audience (one AAD organization, any work and school accounts, or any work and school accounts and Microsoft personal accounts</param> <param name="validateAuthority">Whether the authority should be validated against the server metadata.</param> <returns>The builder to chain the .With methods</returns> </member> <member name="M:Microsoft.Identity.Client.AbstractAcquireTokenParameterBuilder`1.WithAuthority(Microsoft.Identity.Client.AadAuthorityAudience,System.Boolean)"> <summary> Adds a known Azure AD authority to the application to sign-in users specifying the sign-in audience (the cloud being the Azure public cloud). See https://aka.ms/msal-net-application-configuration. </summary> <param name="authorityAudience">Sign-in audience (one AAD organization, any work and school accounts, or any work and school accounts and Microsoft personal accounts</param> <param name="validateAuthority">Whether the authority should be validated against the server metadata.</param> <returns>The builder to chain the .With methods</returns> </member> <member name="M:Microsoft.Identity.Client.AbstractAcquireTokenParameterBuilder`1.WithAdfsAuthority(System.String,System.Boolean)"> <summary> Adds a known Authority corresponding to an ADFS server. See https://aka.ms/msal-net-adfs </summary> <param name="authorityUri">Authority URL for an ADFS server</param> <param name="validateAuthority">Whether the authority should be validated against the server metadata.</param> <remarks>MSAL.NET will only support ADFS 2019 or later.</remarks> <returns>The builder to chain the .With methods</returns> </member> <member name="M:Microsoft.Identity.Client.AbstractAcquireTokenParameterBuilder`1.WithB2CAuthority(System.String)"> <summary> Adds a known authority corresponding to an Azure AD B2C policy. See https://aka.ms/msal-net-b2c-specificities </summary> <param name="authorityUri">Azure AD B2C authority, including the B2C policy (for instance <c>"https://fabrikamb2c.b2clogin.com/tfp/{Tenant}/{policy}</c></param>) <returns>The builder to chain the .With methods</returns> </member> <member name="M:Microsoft.Identity.Client.AbstractAcquireTokenParameterBuilder`1.WithCorrelationId(System.Guid)"> <summary> Sets the correlation id to be used in the authentication request. </summary> <param name="correlationId">correlation id of the authentication request</param> <returns></returns> </member> <member name="M:Microsoft.Identity.Client.AbstractAcquireTokenParameterBuilder`1.Validate"> <summary> Validates the parameters of the AcquireToken operation. </summary> </member> <member name="T:Microsoft.Identity.Client.AbstractClientAppBaseAcquireTokenParameterBuilder`1"> <summary> Base class for parameter builders common to public client application and confidential client application token acquisition operations </summary> <typeparam name="T"></typeparam> </member> <member name="M:Microsoft.Identity.Client.AbstractClientAppBaseAcquireTokenParameterBuilder`1.ExecuteAsync(System.Threading.CancellationToken)"> <inheritdoc /> </member> <member name="T:Microsoft.Identity.Client.AbstractConfidentialClientAcquireTokenParameterBuilder`1"> <summary> Base class for confidential client application token request builders </summary> <typeparam name="T"></typeparam> </member> <member name="M:Microsoft.Identity.Client.AbstractConfidentialClientAcquireTokenParameterBuilder`1.ExecuteAsync(System.Threading.CancellationToken)"> <inheritdoc /> </member> <member name="T:Microsoft.Identity.Client.AbstractPublicClientAcquireTokenParameterBuilder`1"> <summary> Base class for public client application token request builders </summary> <typeparam name="T"></typeparam> </member> <member name="M:Microsoft.Identity.Client.AbstractPublicClientAcquireTokenParameterBuilder`1.ExecuteAsync(System.Threading.CancellationToken)"> <inheritdoc /> </member> <member name="P:Microsoft.Identity.Client.AbstractPublicClientAcquireTokenParameterBuilder`1.PublicClientApplicationExecutor"> <summary> </summary> </member> <member name="T:Microsoft.Identity.Client.AcquireTokenByAuthorizationCodeParameterBuilder"> <summary> Builder for AcquireTokenByAuthorizationCode </summary> </member> <member name="M:Microsoft.Identity.Client.AcquireTokenByAuthorizationCodeParameterBuilder.CalculateApiEventId"> <inheritdoc /> </member> <member name="M:Microsoft.Identity.Client.AcquireTokenByAuthorizationCodeParameterBuilder.Validate"> <inheritdoc /> </member> <member name="M:Microsoft.Identity.Client.AcquireTokenByAuthorizationCodeParameterBuilder.ExecuteInternalAsync(System.Threading.CancellationToken)"> <inheritdoc /> </member> <member name="M:Microsoft.Identity.Client.AcquireTokenByAuthorizationCodeParameterBuilder.WithSendX5C(System.Boolean)"> <summary> Specifies if the x5c claim (public key of the certificate) should be sent to the STS. Sending the x5c enables application developers to achieve easy certificate roll-over in Azure AD: this method will send the public certificate to Azure AD along with the token request, so that Azure AD can use it to validate the subject name based on a trusted issuer policy. This saves the application admin from the need to explicitly manage the certificate rollover (either via portal or powershell/CLI operation) </summary> <param name="withSendX5C"><c>true</c> if the x5c should be sent. Otherwise <c>false</c>. The default is <c>false</c></param> <returns>The builder to chain the .With methods</returns> </member> <member name="T:Microsoft.Identity.Client.AcquireTokenByIntegratedWindowsAuthParameterBuilder"> <summary> Builder for AcquireTokenByIntegratedWindowsAuth </summary> </member> <member name="M:Microsoft.Identity.Client.AcquireTokenByIntegratedWindowsAuthParameterBuilder.#ctor(Microsoft.Identity.Client.ApiConfig.Executors.IPublicClientApplicationExecutor)"> <inheritdoc /> </member> <member name="M:Microsoft.Identity.Client.AcquireTokenByIntegratedWindowsAuthParameterBuilder.WithUsername(System.String)"> <summary> Specifies the username. </summary> <param name="username">Identifier of the user account for which to acquire a token with Integrated Windows authentication. Generally in UserPrincipalName (UPN) format, e.g. <c>john.doe@contoso.com</c></param> <returns>The builder to chain the .With methods</returns> </member> <member name="M:Microsoft.Identity.Client.AcquireTokenByIntegratedWindowsAuthParameterBuilder.CalculateApiEventId"> <inheritdoc /> </member> <member name="T:Microsoft.Identity.Client.AcquireTokenByRefreshTokenParameterBuilder"> <summary> Parameter builder for the <see cref="M:Microsoft.Identity.Client.IByRefreshToken.AcquireTokenByRefreshToken(System.Collections.Generic.IEnumerable{System.String},System.String)"/> method. See https://aka.ms/msal-net-migration-adal2-msal2 </summary> </member> <member name="M:Microsoft.Identity.Client.AcquireTokenByRefreshTokenParameterBuilder.#ctor(Microsoft.Identity.Client.ApiConfig.Executors.IClientApplicationBaseExecutor)"> <inheritdoc /> </member> <member name="M:Microsoft.Identity.Client.AcquireTokenByRefreshTokenParameterBuilder.ExecuteInternalAsync(System.Threading.CancellationToken)"> <inheritdoc /> </member> <member name="M:Microsoft.Identity.Client.AcquireTokenByRefreshTokenParameterBuilder.CalculateApiEventId"> <inheritdoc /> </member> <member name="M:Microsoft.Identity.Client.AcquireTokenByRefreshTokenParameterBuilder.WithSendX5C(System.Boolean)"> <summary> Specifies if the x5c claim (public key of the certificate) should be sent to the STS. Sending the x5c enables application developers to achieve easy certificate roll-over in Azure AD: this method will send the public certificate to Azure AD along with the token request, so that Azure AD can use it to validate the subject name based on a trusted issuer policy. This saves the application admin from the need to explicitly manage the certificate rollover (either via portal or powershell/CLI operation) </summary> <param name="withSendX5C"><c>true</c> if the x5c should be sent. Otherwise <c>false</c>. The default is <c>false</c></param> <returns>The builder to chain the .With methods</returns> </member> <member name="T:Microsoft.Identity.Client.AcquireTokenByUsernamePasswordParameterBuilder"> <summary> Parameter builder for the <see cref="M:Microsoft.Identity.Client.IPublicClientApplication.AcquireTokenByUsernamePassword(System.Collections.Generic.IEnumerable{System.String},System.String,System.Security.SecureString)"/> operation. See https://aka.ms/msal-net-up </summary> </member> <member name="M:Microsoft.Identity.Client.AcquireTokenByUsernamePasswordParameterBuilder.ExecuteInternalAsync(System.Threading.CancellationToken)"> <inheritdoc /> </member> <member name="M:Microsoft.Identity.Client.AcquireTokenByUsernamePasswordParameterBuilder.CalculateApiEventId"> <inheritdoc /> </member> <member name="T:Microsoft.Identity.Client.AcquireTokenForClientParameterBuilder"> <summary> Builder for AcquireTokenForClient (used in client credential flows, in daemon applications). See https://aka.ms/msal-net-client-credentials </summary> </member> <member name="M:Microsoft.Identity.Client.AcquireTokenForClientParameterBuilder.#ctor(Microsoft.Identity.Client.ApiConfig.Executors.IConfidentialClientApplicationExecutor)"> <inheritdoc /> </member> <member name="M:Microsoft.Identity.Client.AcquireTokenForClientParameterBuilder.WithForceRefresh(System.Boolean)"> <summary> Specifies if the token request will ignore the access token in the application token cache and will attempt to acquire a new access token using client credentials. By default the token is taken from the application token cache (forceRefresh=false) </summary> <param name="forceRefresh">If <c>true</c>, the request will ignore the token cache. The default is <c>false</c> </param> <returns>The builder to chain the .With methods</returns> </member> <member name="M:Microsoft.Identity.Client.AcquireTokenForClientParameterBuilder.WithSendX5C(System.Boolean)"> <summary> Specifies if the x5c claim (public key of the certificate) should be sent to the STS. Sending the x5c enables application developers to achieve easy certificate roll-over in Azure AD: this method will send the public certificate to Azure AD along with the token request, so that Azure AD can use it to validate the subject name based on a trusted issuer policy. This saves the application admin from the need to explicitly manage the certificate rollover (either via portal or powershell/CLI operation) </summary> <param name="withSendX5C"><c>true</c> if the x5c should be sent. Otherwise <c>false</c>. The default is <c>false</c></param> <returns>The builder to chain the .With methods</returns> </member> <member name="M:Microsoft.Identity.Client.AcquireTokenForClientParameterBuilder.ExecuteInternalAsync(System.Threading.CancellationToken)"> <inheritdoc /> </member> <member name="M:Microsoft.Identity.Client.AcquireTokenForClientParameterBuilder.CalculateApiEventId"> <inheritdoc /> </member> <member name="T:Microsoft.Identity.Client.AcquireTokenInteractiveParameterBuilder"> <summary> Builder for an Interactive token request. See https://aka.ms/msal-net-acquire-token-interactively </summary> </member> <member name="M:Microsoft.Identity.Client.AcquireTokenInteractiveParameterBuilder.WithUseEmbeddedWebView(System.Boolean)"> <summary> Specifies if the public client application should used an embedded web browser or the system default browser </summary> <param name="useEmbeddedWebView">If <c>true</c>, will use an embedded web browser, otherwise will attempt to use a system web browser. The default depends on the platform: <c>false</c> for Xamarin.iOS and Xamarin.Android, and <c>true</c> for .NET Framework, and UWP</param> <returns>The builder to chain the .With methods</returns> </member> <member name="M:Microsoft.Identity.Client.AcquireTokenInteractiveParameterBuilder.WithSystemWebViewOptions(Microsoft.Identity.Client.SystemWebViewOptions)"> <summary> Specifies options for using the system OS browser handle interactive authentication. </summary> <param name="options">Data object with options</param> <returns>The builder to chain the .With methods</returns> </member> <member name="M:Microsoft.Identity.Client.AcquireTokenInteractiveParameterBuilder.WithLoginHint(System.String)"> <summary> Sets the <paramref name="loginHint"/>, in order to avoid select account dialogs in the case the user is signed-in with several identities. This method is mutually exclusive with <see cref="M:Microsoft.Identity.Client.AcquireTokenInteractiveParameterBuilder.WithAccount(Microsoft.Identity.Client.IAccount)"/>. If both are used, an exception will be thrown </summary> <param name="loginHint">Identifier of the user. Generally in UserPrincipalName (UPN) format, e.g. <c>john.doe@contoso.com</c></param> <returns>The builder to chain the .With methods</returns> </member> <member name="M:Microsoft.Identity.Client.AcquireTokenInteractiveParameterBuilder.WithAccount(Microsoft.Identity.Client.IAccount)"> <summary> Sets the account for which the token will be retrieved. This method is mutually exclusive with <see cref="M:Microsoft.Identity.Client.AcquireTokenInteractiveParameterBuilder.WithLoginHint(System.String)"/>. If both are used, an exception will be thrown </summary> <param name="account">Account to use for the interactive token acquisition. See <see cref="T:Microsoft.Identity.Client.IAccount"/> for ways to get an account</param> <returns>The builder to chain the .With methods</returns> </member> <member name="M:Microsoft.Identity.Client.AcquireTokenInteractiveParameterBuilder.WithExtraScopesToConsent(System.Collections.Generic.IEnumerable{System.String})"> <summary> </summary> <param name="extraScopesToConsent">Scopes that you can request the end user to consent upfront, in addition to the scopes for the protected Web API for which you want to acquire a security token.</param> <returns>The builder to chain the .With methods</returns> </member> <member name="M:Microsoft.Identity.Client.AcquireTokenInteractiveParameterBuilder.WithPrompt(Microsoft.Identity.Client.Prompt)"> <summary> Specifies the what the interactive experience is for the user. </summary> <param name="prompt">Requested interactive experience. The default is <see cref="F:Microsoft.Identity.Client.Prompt.SelectAccount"/> </param> <returns>The builder to chain the .With methods</returns> </member> <member name="M:Microsoft.Identity.Client.AcquireTokenInteractiveParameterBuilder.WithParentActivityOrWindow(System.Object)"> <summary> Sets a reference to the ViewController (if using Xamarin.iOS), Activity (if using Xamarin.Android) IWin32Window or IntPtr (if using .Net Framework). Used for invoking the browser. </summary> <remarks>Mandatory only on Android. Can also be set via the PublicClientApplcation builder.</remarks> <param name="parent">The parent as an object, so that it can be used from shared NetStandard assemblies</param> <returns>The builder to chain the .With methods</returns> </member> <member name="M:Microsoft.Identity.Client.AcquireTokenInteractiveParameterBuilder.Validate"> <inheritdoc /> </member> <member name="M:Microsoft.Identity.Client.AcquireTokenInteractiveParameterBuilder.ExecuteInternalAsync(System.Threading.CancellationToken)"> <inheritdoc /> </member> <member name="T:Microsoft.Identity.Client.AcquireTokenOnBehalfOfParameterBuilder"> <summary> Builder for AcquireTokenOnBehalfOf (OBO flow) See https://aka.ms/msal-net-on-behalf-of </summary> </member> <member name="M:Microsoft.Identity.Client.AcquireTokenOnBehalfOfParameterBuilder.#ctor(Microsoft.Identity.Client.ApiConfig.Executors.IConfidentialClientApplicationExecutor)"> <inheritdoc /> </member> <member name="M:Microsoft.Identity.Client.AcquireTokenOnBehalfOfParameterBuilder.WithSendX5C(System.Boolean)"> <summary> Specifies if the x5c claim (public key of the certificate) should be sent to the STS. Sending the x5c enables application developers to achieve easy certificate roll-over in Azure AD: this method will send the public certificate to Azure AD along with the token request, so that Azure AD can use it to validate the subject name based on a trusted issuer policy. This saves the application admin from the need to explicitly manage the certificate rollover (either via portal or powershell/CLI operation) </summary> <param name="withSendX5C"><c>true</c> if the x5c should be sent. Otherwise <c>false</c>. The default is <c>false</c></param> <returns>The builder to chain the .With methods</returns> </member> <member name="M:Microsoft.Identity.Client.AcquireTokenOnBehalfOfParameterBuilder.ExecuteInternalAsync(System.Threading.CancellationToken)"> <inheritdoc /> </member> <member name="M:Microsoft.Identity.Client.AcquireTokenOnBehalfOfParameterBuilder.CalculateApiEventId"> <inheritdoc /> </member> <member name="T:Microsoft.Identity.Client.AcquireTokenSilentParameterBuilder"> <inheritdoc /> <summary> Parameter builder for the <see cref="M:Microsoft.Identity.Client.IClientApplicationBase.AcquireTokenSilent(System.Collections.Generic.IEnumerable{System.String},Microsoft.Identity.Client.IAccount)"/> operation. See https://aka.ms/msal-net-acquiretokensilent </summary> </member> <member name="M:Microsoft.Identity.Client.AcquireTokenSilentParameterBuilder.WithForceRefresh(System.Boolean)"> <summary> Specifies if the client application should force refreshing the token from the user token cache. By default the token is taken from the the application token cache (forceRefresh=false) </summary> <param name="forceRefresh">If <c>true</c>, ignore any access token in the user token cache and attempt to acquire new access token using the refresh token for the account if one is available. This can be useful in the case when the application developer wants to make sure that conditional access policies are applied immediately, rather than after the expiration of the access token. The default is <c>false</c></param> <returns>The builder to chain the .With methods</returns> <remarks>Avoid un-necessarily setting <paramref name="forceRefresh"/> to <c>true</c> true in order to avoid negatively affecting the performance of your application</remarks> </member> <member name="M:Microsoft.Identity.Client.AcquireTokenSilentParameterBuilder.ExecuteInternalAsync(System.Threading.CancellationToken)"> <inheritdoc /> </member> <member name="M:Microsoft.Identity.Client.AcquireTokenSilentParameterBuilder.CalculateApiEventId"> <inheritdoc /> </member> <member name="M:Microsoft.Identity.Client.AcquireTokenSilentParameterBuilder.WithSendX5C(System.Boolean)"> <summary> Specifies if the x5c claim (public key of the certificate) should be sent to the STS. Sending the x5c enables application developers to achieve easy certificate roll-over in Azure AD: this method will send the public certificate to Azure AD along with the token request, so that Azure AD can use it to validate the subject name based on a trusted issuer policy. This saves the application admin from the need to explicitly manage the certificate rollover (either via portal or powershell/CLI operation) </summary> <param name="withSendX5C"><c>true</c> if the x5c should be sent. Otherwise <c>false</c>. The default is <c>false</c></param> <returns>The builder to chain the .With methods</returns> </member> <member name="M:Microsoft.Identity.Client.AcquireTokenSilentParameterBuilder.Validate"> <summary> </summary> </member> <member name="T:Microsoft.Identity.Client.AcquireTokenWithDeviceCodeParameterBuilder"> <summary> Parameters builder for the <see cref="M:Microsoft.Identity.Client.IPublicClientApplication.AcquireTokenWithDeviceCode(System.Collections.Generic.IEnumerable{System.String},System.Func{Microsoft.Identity.Client.DeviceCodeResult,System.Threading.Tasks.Task})"/> operation. See https://aka.ms/msal-net-device-code-flow </summary> </member> <member name="M:Microsoft.Identity.Client.AcquireTokenWithDeviceCodeParameterBuilder.#ctor(Microsoft.Identity.Client.ApiConfig.Executors.IPublicClientApplicationExecutor)"> <inheritdoc /> </member> <member name="M:Microsoft.Identity.Client.AcquireTokenWithDeviceCodeParameterBuilder.WithDeviceCodeResultCallback(System.Func{Microsoft.Identity.Client.DeviceCodeResult,System.Threading.Tasks.Task})"> <summary> Sets the Callback delegate so your application can interact with the user to direct them to authenticate (to a specific URL, with a code) </summary> <param name="deviceCodeResultCallback">callback containing information to show the user about how to authenticate and enter the device code.</param> <returns>The builder to chain the .With methods</returns> </member> <member name="M:Microsoft.Identity.Client.AcquireTokenWithDeviceCodeParameterBuilder.ExecuteInternalAsync(System.Threading.CancellationToken)"> <inheritdoc /> </member> <member name="M:Microsoft.Identity.Client.AcquireTokenWithDeviceCodeParameterBuilder.CalculateApiEventId"> <inheritdoc /> </member> <member name="M:Microsoft.Identity.Client.AcquireTokenWithDeviceCodeParameterBuilder.Validate"> <summary> </summary> </member> <member name="T:Microsoft.Identity.Client.ApiConfig.Parameters.AcquireTokenByIntegratedWindowsAuthParameters"> <summary> </summary> </member> <member name="M:Microsoft.Identity.Client.ApiConfig.Parameters.AcquireTokenByIntegratedWindowsAuthParameters.LogParameters(Microsoft.Identity.Client.Core.ICoreLogger)"> <inheritdoc /> </member> <member name="M:Microsoft.Identity.Client.ApiConfig.Parameters.AcquireTokenByUsernamePasswordParameters.LogParameters(Microsoft.Identity.Client.Core.ICoreLogger)"> <inheritdoc /> </member> <member name="P:Microsoft.Identity.Client.ApiConfig.Parameters.AcquireTokenForClientParameters.ForceRefresh"> <summary> </summary> </member> <member name="P:Microsoft.Identity.Client.ApiConfig.Parameters.AcquireTokenForClientParameters.SendX5C"> <summary> </summary> </member> <member name="M:Microsoft.Identity.Client.ApiConfig.Parameters.AcquireTokenForClientParameters.LogParameters(Microsoft.Identity.Client.Core.ICoreLogger)"> <inheritdoc /> </member> <member name="M:Microsoft.Identity.Client.ApiConfig.Parameters.AcquireTokenOnBehalfOfParameters.LogParameters(Microsoft.Identity.Client.Core.ICoreLogger)"> <inheritdoc /> </member> <member name="M:Microsoft.Identity.Client.ApiConfig.Parameters.AcquireTokenSilentParameters.LogParameters(Microsoft.Identity.Client.Core.ICoreLogger)"> <inheritdoc /> </member> <member name="M:Microsoft.Identity.Client.ApiConfig.Parameters.AcquireTokenWithDeviceCodeParameters.LogParameters(Microsoft.Identity.Client.Core.ICoreLogger)"> <inheritdoc /> </member> <member name="M:Microsoft.Identity.Client.ApiConfig.Parameters.GetAuthorizationRequestUrlParameters.LogParameters(Microsoft.Identity.Client.Core.ICoreLogger)"> <inheritdoc /> </member> <member name="T:Microsoft.Identity.Client.GetAuthorizationRequestUrlParameterBuilder"> <summary> NOTE: a few of the methods in AbstractAcquireTokenParameterBuilder (e.g. account) don't make sense here. Do we want to create a further base that contains ALL of the common methods, and then have another one including account, etc that are only used for AcquireToken? </summary> </member> <member name="M:Microsoft.Identity.Client.GetAuthorizationRequestUrlParameterBuilder.WithRedirectUri(System.String)"> <summary> Sets the redirect URI to add to the Authorization request URL </summary> <param name="redirectUri">Address to return to upon receiving a response from the authority.</param> <returns></returns> </member> <member name="M:Microsoft.Identity.Client.GetAuthorizationRequestUrlParameterBuilder.WithLoginHint(System.String)"> <summary> </summary> <param name="loginHint"></param> <returns></returns> </member> <member name="M:Microsoft.Identity.Client.GetAuthorizationRequestUrlParameterBuilder.WithAccount(Microsoft.Identity.Client.IAccount)"> <summary> </summary> <param name="account"></param> <returns></returns> </member> <member name="M:Microsoft.Identity.Client.GetAuthorizationRequestUrlParameterBuilder.WithExtraScopesToConsent(System.Collections.Generic.IEnumerable{System.String})"> <summary> </summary> <param name="extraScopesToConsent"></param> <returns></returns> </member> <member name="M:Microsoft.Identity.Client.GetAuthorizationRequestUrlParameterBuilder.ExecuteInternalAsync(System.Threading.CancellationToken)"> <inheritdoc /> </member> <member name="M:Microsoft.Identity.Client.GetAuthorizationRequestUrlParameterBuilder.ExecuteAsync(System.Threading.CancellationToken)"> <summary> </summary> <param name="cancellationToken"></param> <returns></returns> </member> <member name="M:Microsoft.Identity.Client.GetAuthorizationRequestUrlParameterBuilder.ExecuteAsync"> <summary> </summary> <returns></returns> </member> <member name="M:Microsoft.Identity.Client.GetAuthorizationRequestUrlParameterBuilder.CalculateApiEventId"> <inheritdoc /> </member> <member name="T:Microsoft.Identity.Client.SystemWebViewOptions"> <summary> Options for using the default OS browser as a separate process to handle interactive auth. MSAL will be listening for the OS browser to finish authenticating, but it cannot close the browser. It can however respond with a 200 OK message or a 302 Redirect, which can be configured here. For more details see https://aka.ms/msal-net-os-browser </summary> </member> <member name="P:Microsoft.Identity.Client.SystemWebViewOptions.HtmlMessageSuccess"> <summary> When the user finishes authenticating, MSAL will respond with a 200 OK message, which the browser will show to the user. </summary> </member> <member name="P:Microsoft.Identity.Client.SystemWebViewOptions.HtmlMessageError"> <summary> When the user finishes authenticating, but an error occurred, MSAL will respond with a 200 OK message, which the browser will show to the user. You can use a string format e.g. "An error has occurred: {0} details: {1}" </summary> </member> <member name="P:Microsoft.Identity.Client.SystemWebViewOptions.BrowserRedirectSuccess"> <summary> When the user finishes authenticating, MSAL will redirect the browser to the given Uri </summary> <remarks>Takes precedence over <see cref="P:Microsoft.Identity.Client.SystemWebViewOptions.HtmlMessageSuccess"/></remarks> </member> <member name="P:Microsoft.Identity.Client.SystemWebViewOptions.BrowserRedirectError"> <summary> When the user finishes authenticating, but an error occurred, MSAL will redirect the browser to the given Uri </summary> <remarks>Takes precedence over <see cref="P:Microsoft.Identity.Client.SystemWebViewOptions.HtmlMessageError"/></remarks> </member> <member name="P:Microsoft.Identity.Client.SystemWebViewOptions.OpenBrowserAsync"> <summary> Allows developers to implement their own logic for starting a browser and navigating to a specific Uri. MSAL will use this when opening the browser. Leave it null and the user configured browser will be used. Consider using the static helpers OpenWithEdgeBrowserAsync and OpenWithChromeEdgeBrowserAsync </summary> <remarks>This property is experimental and the signature may change without a major version increment.</remarks> </member> <member name="M:Microsoft.Identity.Client.SystemWebViewOptions.OpenWithEdgeBrowserAsync(System.Uri)"> <summary> Use Microsoft Edge to navigate to the given uri. On non-windows platforms it uses whatever browser is the default </summary> <remarks>This helper is experimental and the signature may change without a major version increment.</remarks> </member> <member name="M:Microsoft.Identity.Client.SystemWebViewOptions.OpenWithChromeEdgeBrowserAsync(System.Uri)"> <summary> Use Microsoft Edge Chromium to navigate to the given uri. Requires the browser to be installed. On Linux, uses the default system browser instead, as Edge is not available. </summary> <remarks>This helper is experimental and the signature may change without a major version increment.</remarks> </member> <member name="T:Microsoft.Identity.Client.AadAuthorityAudience"> <summary> Specifies which Microsoft accounts can be used for sign-in with a given application. See https://aka.ms/msal-net-application-configuration </summary> </member> <member name="F:Microsoft.Identity.Client.AadAuthorityAudience.None"> <summary> The sign-in audience was not specified </summary> </member> <member name="F:Microsoft.Identity.Client.AadAuthorityAudience.AzureAdMyOrg"> <summary> Users with a Microsoft work or school account in my organization’s Azure AD tenant (i.e. single tenant). Maps to https://[instance]/[tenantId] </summary> </member> <member name="F:Microsoft.Identity.Client.AadAuthorityAudience.AzureAdAndPersonalMicrosoftAccount"> <summary> Users with a personal Microsoft account, or a work or school account in any organization’s Azure AD tenant Maps to https://[instance]/common/ </summary> </member> <member name="F:Microsoft.Identity.Client.AadAuthorityAudience.AzureAdMultipleOrgs"> <summary> Users with a Microsoft work or school account in any organization’s Azure AD tenant (i.e. multi-tenant). Maps to https://[instance]/organizations/ </summary> </member> <member name="F:Microsoft.Identity.Client.AadAuthorityAudience.PersonalMicrosoftAccount"> <summary> Users with a personal Microsoft account. Maps to https://[instance]/consumers/ </summary> </member> <member name="T:Microsoft.Identity.Client.AbstractApplicationBuilder`1"> <summary> </summary> <typeparam name="T"></typeparam> </member> <member name="M:Microsoft.Identity.Client.AbstractApplicationBuilder`1.WithHttpClientFactory(Microsoft.Identity.Client.IMsalHttpClientFactory)"> <summary> Uses a specific <see cref="T:Microsoft.Identity.Client.IMsalHttpClientFactory"/> to communicate with the IdP. This enables advanced scenarios such as setting a proxy, or setting the Agent. </summary> <param name="httpClientFactory">HTTP client factory</param> <remarks>MSAL does not guarantee that it will not modify the HttpClient, for example by adding new headers.</remarks> <returns>The builder to chain the .With methods</returns> </member> <member name="M:Microsoft.Identity.Client.AbstractApplicationBuilder`1.WithInstanceDicoveryMetadata(System.String)"> <summary> Allows developers to configure their own valid authorities. A json string similar to https://aka.ms/aad-instance-discovery should be provided. MSAL uses this information to: <list type="bullet"> <item>Call REST APIs on the environment specified in the preferred_network</item> <item>Identify an environment under which to save tokens and accounts in the cache</item> <item>Use the environment aliases to match tokens issued to other authorities</item> </list> For more details see https://aka.ms/msal-net-custom-instance-metadata </summary> <remarks> Developers take responsibility for authority validation if they use this method. Should not be used when the authority is not know in advance. Has no effect on ADFS or B2C authorities, only for AAD authorities</remarks> <param name="instanceDiscoveryJson"></param> <returns></returns> </member> <member name="M:Microsoft.Identity.Client.AbstractApplicationBuilder`1.WithLogging(Microsoft.Identity.Client.LogCallback,System.Nullable{Microsoft.Identity.Client.LogLevel},System.Nullable{System.Boolean},System.Nullable{System.Boolean})"> <summary> Sets the logging callback. For details see https://aka.ms/msal-net-logging </summary> <param name="loggingCallback"></param> <param name="logLevel">Desired level of logging. The default is LogLevel.Info</param> <param name="enablePiiLogging">Boolean used to enable/disable logging of Personally Identifiable Information (PII). PII logs are never written to default outputs like Console, Logcat or NSLog Default is set to <c>false</c>, which ensures that your application is compliant with GDPR. You can set it to <c>true</c> for advanced debugging requiring PII </param> <param name="enableDefaultPlatformLogging">Flag to enable/disable logging to platform defaults. In Desktop/UWP, Event Tracing is used. In iOS, NSLog is used. In android, logcat is used. The default value is <c>false</c> </param> <returns>The builder to chain the .With methods</returns> <exception cref="T:System.InvalidOperationException"/> is thrown if the loggingCallback was already set on the application builder </member> <member name="M:Microsoft.Identity.Client.AbstractApplicationBuilder`1.WithDebugLoggingCallback(Microsoft.Identity.Client.LogLevel,System.Boolean,System.Boolean)"> <summary> Sets the Debug logging callback to a default debug method which displays the level of the message and the message itself. For details see https://aka.ms/msal-net-logging </summary> <param name="logLevel">Desired level of logging. The default is LogLevel.Info</param> <param name="enablePiiLogging">Boolean used to enable/disable logging of Personally Identifiable Information (PII). PII logs are never written to default outputs like Console, Logcat or NSLog Default is set to <c>false</c>, which ensures that your application is compliant with GDPR. You can set it to <c>true</c> for advanced debugging requiring PII </param> <param name="withDefaultPlatformLoggingEnabled">Flag to enable/disable logging to platform defaults. In Desktop/UWP, Event Tracing is used. In iOS, NSLog is used. In android, logcat is used. The default value is <c>false</c> </param> <returns>The builder to chain the .With methods</returns> <exception cref="T:System.InvalidOperationException"/> is thrown if the loggingCallback was already set on the application builder by calling <see cref="M:Microsoft.Identity.Client.AbstractApplicationBuilder`1.WithLogging(Microsoft.Identity.Client.LogCallback,System.Nullable{Microsoft.Identity.Client.LogLevel},System.Nullable{System.Boolean},System.Nullable{System.Boolean})"/> <seealso cref="M:Microsoft.Identity.Client.AbstractApplicationBuilder`1.WithLogging(Microsoft.Identity.Client.LogCallback,System.Nullable{Microsoft.Identity.Client.LogLevel},System.Nullable{System.Boolean},System.Nullable{System.Boolean})"/> </member> <member name="M:Microsoft.Identity.Client.AbstractApplicationBuilder`1.WithTelemetry(Microsoft.Identity.Client.TelemetryCallback)"> <summary> Sets the telemetry callback. For details see https://aka.ms/msal-net-telemetry </summary> <param name="telemetryCallback">Delegate to the callback sending the telemetry elaborated by the library to the telemetry endpoint of choice</param> <returns>The builder to chain the .With methods</returns> <exception cref="T:System.InvalidOperationException"/> is thrown if the method was already called on the application builder. </member> <member name="M:Microsoft.Identity.Client.AbstractApplicationBuilder`1.WithClientId(System.String)"> <summary> Sets the Client ID of the application </summary> <param name="clientId">Client ID (also known as <i>Application ID</i>) of the application as registered in the application registration portal (https://aka.ms/msal-net-register-app)</param> <returns>The builder to chain the .With methods</returns> </member> <member name="M:Microsoft.Identity.Client.AbstractApplicationBuilder`1.WithRedirectUri(System.String)"> <summary> Sets the redirect URI of the application. See https://aka.ms/msal-net-application-configuration </summary> <param name="redirectUri">URL where the STS will call back the application with the security token. This parameter is not required for desktop or UWP applications (as a default is used). It's not required for mobile applications that don't use a broker It is required for Web Apps</param> <returns>The builder to chain the .With methods</returns> </member> <member name="M:Microsoft.Identity.Client.AbstractApplicationBuilder`1.WithTenantId(System.String)"> <summary> Sets the Tenant Id of the organization from which the application will let users sign-in. This is classically a GUID or a domain name. See https://aka.ms/msal-net-application-configuration. Although it is also possible to set <paramref name="tenantId"/> to <c>common</c>, <c>organizations</c>, and <c>consumers</c>, it's recommended to use one of the overrides of <see cref="M:Microsoft.Identity.Client.AbstractApplicationBuilder`1.WithAuthority(Microsoft.Identity.Client.AzureCloudInstance,Microsoft.Identity.Client.AadAuthorityAudience,System.Boolean)"/> </summary> <param name="tenantId">tenant ID of the Azure AD tenant or a domain associated with this Azure AD tenant, in order to sign-in a user of a specific organization only</param> <returns>The builder to chain the .With methods</returns> </member> <member name="M:Microsoft.Identity.Client.AbstractApplicationBuilder`1.WithClientName(System.String)"> <summary> Sets the name of the calling application for telemetry purposes. </summary> <param name="clientName">The name of the application for telemetry purposes.</param> <returns></returns> </member> <member name="M:Microsoft.Identity.Client.AbstractApplicationBuilder`1.WithClientVersion(System.String)"> <summary> Sets the version of the calling application for telemetry purposes. </summary> <param name="clientVersion">The version of the calling application for telemetry purposes.</param> <returns></returns> </member> <member name="M:Microsoft.Identity.Client.AbstractApplicationBuilder`1.WithOptions(Microsoft.Identity.Client.ApplicationOptions)"> <summary> Sets application options, which can, for instance have been read from configuration files. See https://aka.ms/msal-net-application-configuration. </summary> <param name="applicationOptions">Application options</param> <returns>The builder to chain the .With methods</returns> </member> <member name="M:Microsoft.Identity.Client.AbstractApplicationBuilder`1.WithExtraQueryParameters(System.Collections.Generic.IDictionary{System.String,System.String})"> <summary> Sets Extra Query Parameters for the query string in the HTTP authentication request </summary> <param name="extraQueryParameters">This parameter will be appended as is to the query string in the HTTP authentication request to the authority as a string of segments of the form <c>key=value</c> separated by an ampersand character. The parameter can be null.</param> <returns>The builder to chain the .With methods</returns> </member> <member name="M:Microsoft.Identity.Client.AbstractApplicationBuilder`1.WithExtraQueryParameters(System.String)"> <summary> Sets Extra Query Parameters for the query string in the HTTP authentication request </summary> <param name="extraQueryParameters">This parameter will be appended as is to the query string in the HTTP authentication request to the authority. The string needs to be properly URL-encdoded and ready to send as a string of segments of the form <c>key=value</c> separated by an ampersand character. </param> <returns></returns> </member> <member name="M:Microsoft.Identity.Client.AbstractApplicationBuilder`1.WithTelemetry(Microsoft.Identity.Client.ITelemetryConfig)"> <summary> Generate telemetry aggregation events. </summary> <param name="telemetryConfig"></param> <returns></returns> </member> <member name="M:Microsoft.Identity.Client.AbstractApplicationBuilder`1.WithAuthority(System.Uri,System.Boolean)"> <summary> Adds a known authority to the application from its Uri. See https://aka.ms/msal-net-application-configuration. This constructor is mainly used for scenarios where the authority is not a standard Azure AD authority, nor an ADFS authority, nor an Azure AD B2C authority. For Azure AD, even in national and sovereign clouds, prefer using other overrides such as <see cref="M:Microsoft.Identity.Client.AbstractApplicationBuilder`1.WithAuthority(Microsoft.Identity.Client.AzureCloudInstance,Microsoft.Identity.Client.AadAuthorityAudience,System.Boolean)"/> </summary> <param name="authorityUri">Uri of the authority</param> <param name="validateAuthority">Whether the authority should be validated against the server metadata.</param> <returns>The builder to chain the .With methods</returns> </member> <member name="M:Microsoft.Identity.Client.AbstractApplicationBuilder`1.WithAuthority(System.String,System.Guid,System.Boolean)"> <summary> Adds a known Azure AD authority to the application to sign-in users from a single organization (single tenant application) specified by its tenant ID. See https://aka.ms/msal-net-application-configuration. </summary> <param name="cloudInstanceUri">Azure Cloud instance</param> <param name="tenantId">Guid of the tenant from which to sign-in users</param> <param name="validateAuthority">Whether the authority should be validated against the server metadata.</param> <returns>The builder to chain the .With methods</returns> </member> <member name="M:Microsoft.Identity.Client.AbstractApplicationBuilder`1.WithAuthority(System.String,System.String,System.Boolean)"> <summary> Adds a known Azure AD authority to the application to sign-in users from a single organization (single tenant application) described by its domain name. See https://aka.ms/msal-net-application-configuration. </summary> <param name="cloudInstanceUri">Uri to the Azure Cloud instance (for instance <c>https://login.microsoftonline.com)</c></param> <param name="tenant">domain name associated with the tenant from which to sign-in users</param> <param name="validateAuthority">Whether the authority should be validated against the server metadata.</param> <remarks> <paramref name="tenant"/> can also contain the string representation of a GUID (tenantId), or even <c>common</c>, <c>organizations</c> or <c>consumers</c> but in this case it's recommended to use another override (<see cref="M:Microsoft.Identity.Client.AbstractApplicationBuilder`1.WithAuthority(Microsoft.Identity.Client.AzureCloudInstance,System.Guid,System.Boolean)"/> and <see cref="M:Microsoft.Identity.Client.AbstractApplicationBuilder`1.WithAuthority(Microsoft.Identity.Client.AzureCloudInstance,Microsoft.Identity.Client.AadAuthorityAudience,System.Boolean)"/> </remarks> <returns>The builder to chain the .With methods</returns> </member> <member name="M:Microsoft.Identity.Client.AbstractApplicationBuilder`1.WithAuthority(Microsoft.Identity.Client.AzureCloudInstance,System.Guid,System.Boolean)"> <summary> Adds a known Azure AD authority to the application to sign-in users from a single organization (single tenant application) described by its cloud instance and its tenant ID. See https://aka.ms/msal-net-application-configuration. </summary> <param name="azureCloudInstance">Instance of Azure Cloud (for instance Azure worldwide cloud, Azure German Cloud, US government ...)</param> <param name="tenantId">Tenant Id of the tenant from which to sign-in users</param> <param name="validateAuthority">Whether the authority should be validated against the server metadata.</param> <returns>The builder to chain the .With methods</returns> </member> <member name="M:Microsoft.Identity.Client.AbstractApplicationBuilder`1.WithAuthority(Microsoft.Identity.Client.AzureCloudInstance,System.String,System.Boolean)"> <summary> Adds a known Azure AD authority to the application to sign-in users from a single organization (single tenant application) described by its cloud instance and its domain name or tenant ID. See https://aka.ms/msal-net-application-configuration. </summary> <param name="azureCloudInstance">Instance of Azure Cloud (for instance Azure worldwide cloud, Azure German Cloud, US government ...)</param> <param name="tenant">Domain name associated with the Azure AD tenant from which <param name="validateAuthority">Whether the authority should be validated against the server metadata.</param> to sign-in users. This can also be a guid</param> <returns>The builder to chain the .With methods</returns> </member> <member name="M:Microsoft.Identity.Client.AbstractApplicationBuilder`1.WithAuthority(Microsoft.Identity.Client.AzureCloudInstance,Microsoft.Identity.Client.AadAuthorityAudience,System.Boolean)"> <summary> Adds a known Azure AD authority to the application to sign-in users specifying the cloud instance and the sign-in audience. See https://aka.ms/msal-net-application-configuration. </summary> <param name="azureCloudInstance">Instance of Azure Cloud (for instance Azure worldwide cloud, Azure German Cloud, US government ...)</param> <param name="authorityAudience">Sign-in audience (one AAD organization, any work and school accounts, or any work and school accounts and Microsoft personal accounts</param> <param name="validateAuthority">Whether the authority should be validated against the server metadata.</param> <returns>The builder to chain the .With methods</returns> </member> <member name="M:Microsoft.Identity.Client.AbstractApplicationBuilder`1.WithAuthority(Microsoft.Identity.Client.AadAuthorityAudience,System.Boolean)"> <summary> Adds a known Azure AD authority to the application to sign-in users specifying the sign-in audience (the cloud being the Azure public cloud). See https://aka.ms/msal-net-application-configuration. </summary> <param name="authorityAudience">Sign-in audience (one AAD organization, any work and school accounts, or any work and school accounts and Microsoft personal accounts</param> <param name="validateAuthority">Whether the authority should be validated against the server metadata.</param> <returns>The builder to chain the .With methods</returns> </member> <member name="M:Microsoft.Identity.Client.AbstractApplicationBuilder`1.WithAuthority(System.String,System.Boolean)"> <summary> Adds a known Azure AD authority to the application to sign-in users specifying the full authority Uri. See https://aka.ms/msal-net-application-configuration. </summary> <param name="authorityUri">URL of the security token service (STS) from which MSAL.NET will acquire the tokens. Usual authorities endpoints for the Azure public Cloud are: <list type="bullet"> <item><description><c>https://login.microsoftonline.com/tenant/</c> where <c>tenant</c> is the tenant ID of the Azure AD tenant or a domain associated with this Azure AD tenant, in order to sign-in users of a specific organization only</description></item> <item><description><c>https://login.microsoftonline.com/common/</c> to sign-in users with any work and school accounts or Microsoft personal account</description></item> <item><description><c>https://login.microsoftonline.com/organizations/</c> to sign-in users with any work and school accounts</description></item> <item><description><c>https://login.microsoftonline.com/consumers/</c> to sign-in users with only personal Microsoft accounts (live)</description></item> </list> Note that this setting needs to be consistent with what is declared in the application registration portal</param> <param name="validateAuthority">Whether the authority should be validated against the server metadata.</param> <returns>The builder to chain the .With methods</returns> </member> <member name="M:Microsoft.Identity.Client.AbstractApplicationBuilder`1.WithAdfsAuthority(System.String,System.Boolean)"> <summary> Adds a known Authority corresponding to an ADFS server. See https://aka.ms/msal-net-adfs </summary> <param name="authorityUri">Authority URL for an ADFS server</param> <param name="validateAuthority">Whether the authority should be validated against the server metadata.</param> <remarks>MSAL.NET will only support ADFS 2019 or later.</remarks> <returns>The builder to chain the .With methods</returns> </member> <member name="M:Microsoft.Identity.Client.AbstractApplicationBuilder`1.WithB2CAuthority(System.String)"> <summary> Adds a known authority corresponding to an Azure AD B2C policy. See https://aka.ms/msal-net-b2c-specificities </summary> <param name="authorityUri">Azure AD B2C authority, including the B2C policy (for instance <c>"https://fabrikamb2c.b2clogin.com/tfp/{Tenant}/{policy}</c></param>) <returns>The builder to chain the .With methods</returns> </member> <member name="P:Microsoft.Identity.Client.ApplicationConfiguration.AadAuthorityAudience"> <summary> Should _not_ go in the interface, only for builder usage while determining authorities with ApplicationOptions </summary> </member> <member name="P:Microsoft.Identity.Client.ApplicationConfiguration.AzureCloudInstance"> <summary> Should _not_ go in the interface, only for builder usage while determining authorities with ApplicationOptions </summary> </member> <member name="P:Microsoft.Identity.Client.ApplicationConfiguration.Instance"> <summary> Should _not_ go in the interface, only for builder usage while determining authorities with ApplicationOptions </summary> </member> <member name="P:Microsoft.Identity.Client.ApplicationConfiguration.ValidateAuthority"> <summary> Should _not_ go in the interface, only for builder usage while determining authorities with ApplicationOptions </summary> </member> <member name="T:Microsoft.Identity.Client.ApplicationOptions"> <summary> Base class for options objects with string values loadable from a configuration file (for instance a JSON file, as in an asp.net configuration scenario) See https://aka.ms/msal-net-application-configuration See also derived classes <see cref="T:Microsoft.Identity.Client.PublicClientApplicationOptions"/> and <see cref="T:Microsoft.Identity.Client.ConfidentialClientApplicationOptions"/> </summary> </member> <member name="P:Microsoft.Identity.Client.ApplicationOptions.ClientId"> <summary> Client ID (also known as App ID) of the application as registered in the application registration portal (https://aka.ms/msal-net-register-app) </summary> </member> <member name="P:Microsoft.Identity.Client.ApplicationOptions.TenantId"> <summary> Tenant from which the application will allow users to sign it. This can be: a domain associated with a tenant, a guid (tenant id), or a meta-tenant (e.g. consumers). This property is mutually exclusive with <see cref="P:Microsoft.Identity.Client.ApplicationOptions.AadAuthorityAudience"/>. If both are provided, an exception will be thrown. </summary> <remarks>The name of the property was chosen to ensure compatibility with AzureAdOptions in ASP.NET Core configuration files (even the semantics would be tenant)</remarks> </member> <member name="P:Microsoft.Identity.Client.ApplicationOptions.AadAuthorityAudience"> <summary> Sign-in audience. This property is mutually exclusive with TenantId. If both are provided, an exception will be thrown. </summary> </member> <member name="P:Microsoft.Identity.Client.ApplicationOptions.Instance"> <summary> STS instance (for instance https://login.microsoftonline.com for the Azure public cloud). The name was chosen to ensure compatibility with AzureAdOptions in ASP.NET Core. This property is mutually exclusive with <see cref="P:Microsoft.Identity.Client.ApplicationOptions.AzureCloudInstance"/>. If both are provided, an exception will be thrown. </summary> </member> <member name="P:Microsoft.Identity.Client.ApplicationOptions.AzureCloudInstance"> <summary> Specific instance in the case of Azure Active Directory. It allows users to use the enum instead of the explicit url. This property is mutually exclusive with <see cref="P:Microsoft.Identity.Client.ApplicationOptions.Instance"/>. If both are provided, an exception will be thrown. </summary> </member> <member name="P:Microsoft.Identity.Client.ApplicationOptions.RedirectUri"> <summary> The redirect URI (also known as Reply URI or Reply URL), is the URI at which Azure AD will contact back the application with the tokens. This redirect URI needs to be registered in the app registration (https://aka.ms/msal-net-register-app). In MSAL.NET, <c>IPublicClientApplication</c> defines the following default RedirectUri values: <list type="bullet"> <item><description><c>urn:ietf:wg:oauth:2.0:oob</c> for desktop (.NET Framework and .NET Core) applications</description></item> <item><description><c>msal{ClientId}</c> for Xamarin iOS and Xamarin Android without broker (as this will be used by the system web browser by default on these platforms to call back the application) </description></item> </list> These default URIs could change in the future. For Web Apps and Web APIs, the redirect URI can be the URL of the application For daemon applications (confidential client applications using only the Client Credential flow that is calling <c>AcquireTokenForClient</c>), no reply URI is needed. </summary> <remarks>This is especially important when you deploy an application that you have initially tested locally; you then need to add the reply URL of the deployed application in the application registration portal </remarks> </member> <member name="P:Microsoft.Identity.Client.ApplicationOptions.LogLevel"> <summary> Enables you to configure the level of logging you want. The default value is <see cref="F:Microsoft.Identity.Client.LogLevel.Info"/>. Setting it to <see cref="F:Microsoft.Identity.Client.LogLevel.Error"/> will only get errors Setting it to <see cref="F:Microsoft.Identity.Client.LogLevel.Warning"/> will get errors and warning, etc.. See https://aka.ms/msal-net-logging </summary> </member> <member name="P:Microsoft.Identity.Client.ApplicationOptions.EnablePiiLogging"> <summary> Flag to enable/disable logging of Personally Identifiable Information (PII). PII logs are never written to default outputs like Console, Logcat or NSLog Default is set to <c>false</c>, which ensures that your application is compliant with GDPR. You can set it to <c>true</c> for advanced debugging requiring PII. See https://aka.ms/msal-net-logging </summary> <seealso cref="P:Microsoft.Identity.Client.ApplicationOptions.IsDefaultPlatformLoggingEnabled"/> </member> <member name="P:Microsoft.Identity.Client.ApplicationOptions.IsDefaultPlatformLoggingEnabled"> <summary> Flag to enable/disable logging to platform defaults. In Desktop/UWP, Event Tracing is used. In iOS, NSLog is used. In Android, logcat is used. The default value is <c>false</c>. See https://aka.ms/msal-net-logging </summary> <seealso cref="P:Microsoft.Identity.Client.ApplicationOptions.EnablePiiLogging"/> </member> <member name="P:Microsoft.Identity.Client.ApplicationOptions.Component"> <summary> Identifier of the component (libraries/SDK) consuming MSAL.NET. This will allow for disambiguation between MSAL usage by the app vs MSAL usage by component libraries. </summary> </member> <member name="P:Microsoft.Identity.Client.ApplicationOptions.ClientName"> <summary> The name of the calling application for telemetry purposes. </summary> </member> <member name="P:Microsoft.Identity.Client.ApplicationOptions.ClientVersion"> <summary> The version of the calling application for telemetry purposes. </summary> </member> <member name="T:Microsoft.Identity.Client.AuthorityInfo"> <remarks> This class must be kept immutable </remarks> </member> <member name="T:Microsoft.Identity.Client.AuthorityType"> <summary> </summary> </member> <member name="F:Microsoft.Identity.Client.AuthorityType.Aad"> <summary> </summary> </member> <member name="F:Microsoft.Identity.Client.AuthorityType.Adfs"> <summary> </summary> </member> <member name="F:Microsoft.Identity.Client.AuthorityType.B2C"> <summary> </summary> </member> <member name="T:Microsoft.Identity.Client.AzureCloudInstance"> <summary> </summary> </member> <member name="F:Microsoft.Identity.Client.AzureCloudInstance.None"> <summary> Value communicating that the AzureCloudInstance is not specified. </summary> </member> <member name="F:Microsoft.Identity.Client.AzureCloudInstance.AzurePublic"> <summary> Microsoft Azure public cloud. Maps to https://login.microsoftonline.com </summary> </member> <member name="F:Microsoft.Identity.Client.AzureCloudInstance.AzureChina"> <summary> Microsoft Chinese national cloud. Maps to https://login.chinacloudapi.cn </summary> </member> <member name="F:Microsoft.Identity.Client.AzureCloudInstance.AzureGermany"> <summary> Microsoft German national cloud ("Black Forest"). Maps to https://login.microsoftonline.de </summary> </member> <member name="F:Microsoft.Identity.Client.AzureCloudInstance.AzureUsGovernment"> <summary> US Government cloud. Maps to https://login.microsoftonline.us </summary> </member> <member name="T:Microsoft.Identity.Client.ConfidentialClientApplicationBuilder"> <summary> </summary> </member> <member name="M:Microsoft.Identity.Client.ConfidentialClientApplicationBuilder.#ctor(Microsoft.Identity.Client.ApplicationConfiguration)"> <inheritdoc /> </member> <member name="M:Microsoft.Identity.Client.ConfidentialClientApplicationBuilder.CreateWithApplicationOptions(Microsoft.Identity.Client.ConfidentialClientApplicationOptions)"> <summary> Constructor of a ConfidentialClientApplicationBuilder from application configuration options. See https://aka.ms/msal-net-application-configuration </summary> <param name="options">Public client applications configuration options</param> <returns>A <see cref="T:Microsoft.Identity.Client.ConfidentialClientApplicationBuilder"/> from which to set more parameters, and to create a public client application instance</returns> </member> <member name="M:Microsoft.Identity.Client.ConfidentialClientApplicationBuilder.Create(System.String)"> <summary> Creates a ConfidentialClientApplicationBuilder from a clientID. See https://aka.ms/msal-net-application-configuration </summary> <param name="clientId">Client ID (also known as App ID) of the application as registered in the application registration portal (https://aka.ms/msal-net-register-app)/.</param> <returns>A <see cref="T:Microsoft.Identity.Client.ConfidentialClientApplicationBuilder"/> from which to set more parameters, and to create a public client application instance</returns> </member> <member name="M:Microsoft.Identity.Client.ConfidentialClientApplicationBuilder.WithCertificate(System.Security.Cryptography.X509Certificates.X509Certificate2)"> <summary> Sets the certificate associated with the application </summary> <param name="certificate">The X509 certificate used as credentials to prove the identity of the application to Azure AD.</param> <remarks>You should use certificates with a private key size of at least 2048 bytes. Future versions of this library might reject certificates with smaller keys. </remarks> </member> <member name="M:Microsoft.Identity.Client.ConfidentialClientApplicationBuilder.WithClientClaims(System.Security.Cryptography.X509Certificates.X509Certificate2,System.Collections.Generic.IDictionary{System.String,System.String},System.Boolean)"> <summary> Sets the certificate associated with the application along with the specific claims to sign. By default, this will merge the <paramref name="claimsToSign"/> with the default required set of claims needed for authentication. If <paramref name="mergeWithDefaultClaims"/> is set to false, you will need to provide the required default claims. See https://aka.ms/msal-net-client-assertion </summary> <param name="certificate">The X509 certificate used as credentials to prove the identity of the application to Azure AD.</param> <param name="claimsToSign">The claims to be signed by the provided certificate.</param> <param name="mergeWithDefaultClaims">Determines whether or not to merge <paramref name="claimsToSign"/> with the default claims required for authentication.</param> <remarks>You should use certificates with a private key size of at least 2048 bytes. Future versions of this library might reject certificates with smaller keys. </remarks> </member> <member name="M:Microsoft.Identity.Client.ConfidentialClientApplicationBuilder.WithClientSecret(System.String)"> <summary> Sets the application secret </summary> <param name="clientSecret">Secret string previously shared with AAD at application registration to prove the identity of the application (the client) requesting the tokens</param> <returns></returns> </member> <member name="M:Microsoft.Identity.Client.ConfidentialClientApplicationBuilder.WithClientAssertion(System.String)"> <summary> Sets the application client assertion. See https://aka.ms/msal-net-client-assertion </summary> <param name="signedClientAssertion">The client assertion used to prove the identity of the application to Azure AD. This is a Base-64 encoded JWT.</param> <returns></returns> </member> <member name="M:Microsoft.Identity.Client.ConfidentialClientApplicationBuilder.Validate"> <inheritdoc /> </member> <member name="M:Microsoft.Identity.Client.ConfidentialClientApplicationBuilder.Build"> <summary> Builds the ConfidentialClientApplication from the parameters set in the builder </summary> <returns></returns> </member> <member name="M:Microsoft.Identity.Client.ConfidentialClientApplicationBuilder.BuildConcrete"> <summary> </summary> <returns></returns> </member> <member name="T:Microsoft.Identity.Client.ConfidentialClientApplicationOptions"> <summary> Configuration options for a confidential client application (Web app / Web API / daemon app). See https://aka.ms/msal-net/application-configuration </summary> </member> <member name="P:Microsoft.Identity.Client.ConfidentialClientApplicationOptions.ClientSecret"> <summary> Client secret for the confidential client application. This secret (application password) is provided by the application registration portal, or provided to Azure AD during the application registration with PowerShell AzureAD, PowerShell AzureRM, or Azure CLI. </summary> </member> <member name="T:Microsoft.Identity.Client.IAppConfig"> <summary> Configuration properties used to build a public or confidential client application </summary> </member> <member name="P:Microsoft.Identity.Client.IAppConfig.ClientId"> <summary> Client ID (also known as App ID) of the application as registered in the application registration portal (https://aka.ms/msal-net-register-app) </summary> </member> <member name="P:Microsoft.Identity.Client.IAppConfig.EnablePiiLogging"> <summary> Flag telling if logging of Personally Identifiable Information (PII) is enabled/disabled for the application. See https://aka.ms/msal-net-logging </summary> <seealso cref="P:Microsoft.Identity.Client.IAppConfig.IsDefaultPlatformLoggingEnabled"/> </member> <member name="P:Microsoft.Identity.Client.IAppConfig.HttpClientFactory"> <summary> <see cref="T:Microsoft.Identity.Client.IMsalHttpClientFactory"/> used to get HttpClient instances to communicate with the identity provider. </summary> </member> <member name="P:Microsoft.Identity.Client.IAppConfig.LogLevel"> <summary> Level of logging requested for the app. See https://aka.ms/msal-net-logging </summary> </member> <member name="P:Microsoft.Identity.Client.IAppConfig.IsDefaultPlatformLoggingEnabled"> <summary> Flag telling if logging to platform defaults is enabled/disabled for the app. In Desktop/UWP, Event Tracing is used. In iOS, NSLog is used. In Android, logcat is used. See https://aka.ms/msal-net-logging </summary> </member> <member name="P:Microsoft.Identity.Client.IAppConfig.RedirectUri"> <summary> Redirect URI for the application. See <see cref="P:Microsoft.Identity.Client.ApplicationOptions.RedirectUri"/> </summary> </member> <member name="P:Microsoft.Identity.Client.IAppConfig.TenantId"> <summary> Audience for the application. See <see cref="P:Microsoft.Identity.Client.ApplicationOptions.TenantId"/> </summary> </member> <member name="P:Microsoft.Identity.Client.IAppConfig.LoggingCallback"> <summary> Callback used for logging. It was set with <see cref="M:Microsoft.Identity.Client.AbstractApplicationBuilder`1.WithLogging(Microsoft.Identity.Client.LogCallback,System.Nullable{Microsoft.Identity.Client.LogLevel},System.Nullable{System.Boolean},System.Nullable{System.Boolean})"/> See https://aka.ms/msal-net-logging </summary> </member> <member name="P:Microsoft.Identity.Client.IAppConfig.ExtraQueryParameters"> <summary> Extra query parameters that will be applied to every acquire token operation. See <see cref="M:Microsoft.Identity.Client.AbstractApplicationBuilder`1.WithExtraQueryParameters(System.Collections.Generic.IDictionary{System.String,System.String})"/> </summary> </member> <member name="P:Microsoft.Identity.Client.IAppConfig.IsBrokerEnabled"> <summary> </summary> </member> <member name="P:Microsoft.Identity.Client.IAppConfig.ClientName"> <summary> The name of the calling application for telemetry purposes. </summary> </member> <member name="P:Microsoft.Identity.Client.IAppConfig.ClientVersion"> <summary> The version of the calling application for telemetry purposes. </summary> </member> <member name="P:Microsoft.Identity.Client.IAppConfig.TelemetryConfig"> <summary> </summary> </member> <member name="P:Microsoft.Identity.Client.IAppConfig.ClientSecret"> <summary> </summary> </member> <member name="P:Microsoft.Identity.Client.IAppConfig.ClientCredentialCertificate"> <summary> </summary> </member> <member name="P:Microsoft.Identity.Client.IAppConfig.ParentActivityOrWindowFunc"> <summary> </summary> </member> <member name="P:Microsoft.Identity.Client.IApplicationConfiguration.IsExtendedTokenLifetimeEnabled"> <summary> ExtendedLifeTimeEnabled is a Boolean that applications can set to true in case when the STS has an outage, to be more resilient. </summary> </member> <member name="P:Microsoft.Identity.Client.IApplicationConfiguration.AuthorityInfo"> <summary> </summary> </member> <member name="P:Microsoft.Identity.Client.IApplicationConfiguration.ClientCredential"> <summary> </summary> </member> <member name="P:Microsoft.Identity.Client.IApplicationConfiguration.TelemetryCallback"> <summary> Callback used for sending telemetry about MSAL.NET out of your app. It was set by a call to <see cref="M:Microsoft.Identity.Client.AbstractApplicationBuilder`1.WithTelemetry(Microsoft.Identity.Client.TelemetryCallback)"/> </summary> </member> <member name="T:Microsoft.Identity.Client.IMsalHttpClientFactory"> <summary> Factory responsible for creating HttpClient .Net recommends to use a single instance of HttpClient </summary> <remarks> Implementations must be thread safe. Consider creating and configuring an HttpClient in the constructor of the factory, and returning the same object in <see cref="M:Microsoft.Identity.Client.IMsalHttpClientFactory.GetHttpClient"/> </remarks> </member> <member name="M:Microsoft.Identity.Client.IMsalHttpClientFactory.GetHttpClient"> <summary> Method returning an Http client that will be used to communicate with Azure AD. This enables advanced scenarios. See https://aka.ms/msal-net-application-configuration </summary> <returns>An Http client</returns> </member> <member name="T:Microsoft.Identity.Client.TelemetryAudienceType"> <summary> Describes the types of audiences for telemetry. <see cref="P:Microsoft.Identity.Client.ITelemetryConfig.AudienceType"/> </summary> <remarks>This API is experimental and it may change in future versions of the library without an major version increment</remarks> </member> <member name="F:Microsoft.Identity.Client.TelemetryAudienceType.PreProduction"> <summary> Indicates a PreProduction environment. PreProd environments are not sampled. </summary> </member> <member name="F:Microsoft.Identity.Client.TelemetryAudienceType.Production"> <summary> Indicates a Production environment. These environments are sampled based on the platforms' device info to reduce data load. </summary> </member> <member name="T:Microsoft.Identity.Client.ITelemetryConfig"> <summary> </summary> <remarks>This API is experimental and it may change in future versions of the library without an major version increment</remarks> </member> <member name="P:Microsoft.Identity.Client.ITelemetryConfig.AudienceType"> <summary> Communicates which audience the telemetry is for (e.g. Production or Pre-Production) so that MSAL.NET can change sampling and filtering behavior. </summary> <remarks>This API is experimental and it may change in future versions of the library without an major version increment</remarks> </member> <member name="P:Microsoft.Identity.Client.ITelemetryConfig.SessionId"> <summary> ID for the telemetry session. </summary> <remarks>This API is experimental and it may change in future versions of the library without an major version increment</remarks> </member> <member name="P:Microsoft.Identity.Client.ITelemetryConfig.DispatchAction"> <summary> Implementers of the interface will receive this callback when telemetry data is available. The implementation should transfer the data in ITelemetryEventPayload to a specific telemetry uploader instance. </summary> <remarks>This API is experimental and it may change in future versions of the library without an major version increment</remarks> </member> <member name="T:Microsoft.Identity.Client.ITelemetryEventPayload"> <summary> Data that represents a single snapshot in the series of events that are collected </summary> <remarks>This API is experimental and it may change in future versions of the library without an major version increment</remarks> </member> <member name="P:Microsoft.Identity.Client.ITelemetryEventPayload.Name"> <summary> </summary> <remarks>This API is experimental and it may change in future versions of the library without an major version increment</remarks> <returns></returns> </member> <member name="P:Microsoft.Identity.Client.ITelemetryEventPayload.BoolValues"> <summary> </summary> <remarks>This API is experimental and it may change in future versions of the library without an major version increment</remarks> </member> <member name="P:Microsoft.Identity.Client.ITelemetryEventPayload.Int64Values"> <summary> </summary> <remarks>This API is experimental and it may change in future versions of the library without an major version increment</remarks> </member> <member name="P:Microsoft.Identity.Client.ITelemetryEventPayload.IntValues"> <summary> </summary> <remarks>This API is experimental and it may change in future versions of the library without an major version increment</remarks> </member> <member name="P:Microsoft.Identity.Client.ITelemetryEventPayload.StringValues"> <summary> </summary> <remarks>This API is experimental and it may change in future versions of the library without an major version increment</remarks> </member> <member name="M:Microsoft.Identity.Client.ITelemetryEventPayload.ToJsonString"> <summary> Used for debugging and testing. </summary> <remarks>This API is experimental and it may change in future versions of the library without an major version increment</remarks> <returns></returns> </member> <member name="T:Microsoft.Identity.Client.PublicClientApplicationBuilder"> <summary> </summary> </member> <member name="M:Microsoft.Identity.Client.PublicClientApplicationBuilder.#ctor(Microsoft.Identity.Client.ApplicationConfiguration)"> <inheritdoc /> </member> <member name="M:Microsoft.Identity.Client.PublicClientApplicationBuilder.CreateWithApplicationOptions(Microsoft.Identity.Client.PublicClientApplicationOptions)"> <summary> Creates a PublicClientApplicationBuilder from public client application configuration options. See https://aka.ms/msal-net-application-configuration </summary> <param name="options">Public client applications configuration options</param> <returns>A <see cref="T:Microsoft.Identity.Client.PublicClientApplicationBuilder"/> from which to set more parameters, and to create a public client application instance</returns> </member> <member name="M:Microsoft.Identity.Client.PublicClientApplicationBuilder.Create(System.String)"> <summary> Creates a PublicClientApplicationBuilder from a clientID. See https://aka.ms/msal-net-application-configuration </summary> <param name="clientId">Client ID (also known as App ID) of the application as registered in the application registration portal (https://aka.ms/msal-net-register-app)/.</param> <returns>A <see cref="T:Microsoft.Identity.Client.PublicClientApplicationBuilder"/> from which to set more parameters, and to create a public client application instance</returns> </member> <member name="M:Microsoft.Identity.Client.PublicClientApplicationBuilder.WithDefaultRedirectUri"> <summary> Configures the public client application to use the recommended reply URI for the platform. See https://aka.ms/msal-net-default-reply-uri. <list type="table"> <listheader> <term>Platform</term> <term>Default Reply URI</term> </listheader> <item> <term>.NET desktop</term> <term><c>https://login.microsoftonline.com/common/oauth2/nativeclient</c></term> </item> <item> <term>UWP</term> <term>value of <c>WebAuthenticationBroker.GetCurrentApplicationCallbackUri()</c></term> </item> <item> <term>For system browser on .NET Core</term> <term><c>https://localhost</c></term> </item> </list> NOTE:There will be an update to the default rediect uri in the future to accomodate for system browsers on the .NET desktop and .NET Core platforms. </summary> <returns>A <see cref="T:Microsoft.Identity.Client.PublicClientApplicationBuilder"/> from which to set more parameters, and to create a public client application instance</returns> </member> <member name="M:Microsoft.Identity.Client.PublicClientApplicationBuilder.WithIosKeychainSecurityGroup(System.String)"> <summary> You can specify a Keychain Access Group to use for persisting the token cache across multiple applications. This enables you to share the token cache between several applications having the same keychain access group. Sharing the token cache allows single sign-on between all of the applications that use the same Keychain access Group. See https://aka.ms/msal-net-ios-keychain-security-group for more information. </summary> <param name="keychainSecurityGroup"></param> <returns>A <see cref="T:Microsoft.Identity.Client.PublicClientApplicationBuilder"/> from which to set more parameters, and to create a public client application instance</returns> </member> <member name="M:Microsoft.Identity.Client.PublicClientApplicationBuilder.WithBroker(System.Boolean)"> <summary> On Android and iOS, brokers enable Single-Sign-On, device identification, and application identification verification. To enable one of these features, you need to set the WithBroker() parameters to true. See https://aka.ms/msal-net-brokers for more information on platform specific settings required to enable the broker. </summary> <param name="enableBroker">Determines whether or not to use broker with the default set to true.</param> <returns>A <see cref="T:Microsoft.Identity.Client.PublicClientApplicationBuilder"/> from which to set more parameters, and to create a public client application instance</returns> </member> <member name="M:Microsoft.Identity.Client.PublicClientApplicationBuilder.WithParentActivityOrWindow(System.Func{System.Object})"> <summary> Sets a reference to the ViewController (if using Xamarin.iOS), Activity (if using Xamarin.Android) IWin32Window or IntPtr (if using .Net Framework). Used for invoking the browser. </summary> <remarks> Mandatory only on Android to be set either from here or from AcquireTokenInteractive builder. See https://aka.ms/msal-net-android-activity for further documentation and details. </remarks> <param name="parentActivityOrWindowFunc">The parent as an object, so that it can be used from shared NetStandard assemblies</param> <returns>The builder to chain the .With methods</returns> </member> <member name="M:Microsoft.Identity.Client.PublicClientApplicationBuilder.Build"> <summary> </summary> <returns></returns> </member> <member name="M:Microsoft.Identity.Client.PublicClientApplicationBuilder.BuildConcrete"> <summary> </summary> <returns></returns> </member> <member name="M:Microsoft.Identity.Client.PublicClientApplicationBuilder.Validate"> <inheritdoc /> </member> <member name="T:Microsoft.Identity.Client.PublicClientApplicationOptions"> <summary> Configuration options for a public client application (desktop/mobile app). See https://aka.ms/msal-net/application-configuration </summary> </member> <member name="T:Microsoft.Identity.Client.TelemetryConfig"> <summary> </summary> </member> <member name="P:Microsoft.Identity.Client.TelemetryConfig.AudienceType"> <summary> </summary> </member> <member name="P:Microsoft.Identity.Client.TelemetryConfig.SessionId"> <summary> </summary> </member> <member name="P:Microsoft.Identity.Client.TelemetryConfig.DispatchAction"> <summary> </summary> </member> <member name="P:Microsoft.Identity.Client.TelemetryConfig.AllowedScopes"> <summary> </summary> </member> <member name="T:Microsoft.Identity.Client.TraceTelemetryConfig"> <summary> A simple <see cref="T:Microsoft.Identity.Client.ITelemetryConfig"/> implementation that writes data using System.Diagnostics.Trace. </summary> <remarks>This API is experimental and it may change in future versions of the library without an major version increment</remarks> </member> <member name="M:Microsoft.Identity.Client.TraceTelemetryConfig.#ctor"> <summary> </summary> <remarks>This API is experimental and it may change in future versions of the library without an major version increment</remarks> </member> <member name="P:Microsoft.Identity.Client.TraceTelemetryConfig.AudienceType"> <summary> </summary> <remarks>This API is experimental and it may change in future versions of the library without an major version increment</remarks> </member> <member name="P:Microsoft.Identity.Client.TraceTelemetryConfig.SessionId"> <summary> </summary> <remarks>This API is experimental and it may change in future versions of the library without an major version increment</remarks> </member> <member name="P:Microsoft.Identity.Client.TraceTelemetryConfig.DispatchAction"> <summary> </summary> <remarks>This API is experimental and it may change in future versions of the library without an major version increment</remarks> </member> <member name="P:Microsoft.Identity.Client.TraceTelemetryConfig.AllowedScopes"> <summary> </summary> <remarks>This API is experimental and it may change in future versions of the library without an major version increment</remarks> </member> <member name="T:Microsoft.Identity.Client.AuthenticationResult"> <summary> Contains the results of one token acquisition operation in <see cref="T:Microsoft.Identity.Client.PublicClientApplication"/> or <see cref="T:ConfidentialClientApplication"/>. For details see https://aka.ms/msal-net-authenticationresult </summary> </member> <member name="M:Microsoft.Identity.Client.AuthenticationResult.#ctor(System.String,System.Boolean,System.String,System.DateTimeOffset,System.DateTimeOffset,System.String,Microsoft.Identity.Client.IAccount,System.String,System.Collections.Generic.IEnumerable{System.String},System.Guid,System.String)"> <summary> Constructor meant to help application developers test their apps. Allows mocking of authentication flows. App developers should <b>never</b> new-up <see cref="T:Microsoft.Identity.Client.AuthenticationResult"/> in product code. </summary> <param name="accessToken">Access Token that can be used as a bearer token to access protected web APIs</param> <param name="account">Account information</param> <param name="expiresOn">Expiry date-time for the access token</param> <param name="extendedExpiresOn">See <see cref="P:Microsoft.Identity.Client.AuthenticationResult.ExtendedExpiresOn"/></param> <param name="idToken">ID token</param> <param name="isExtendedLifeTimeToken">See <see cref="P:Microsoft.Identity.Client.AuthenticationResult.IsExtendedLifeTimeToken"/></param> <param name="scopes">Granted scope values as returned by the service</param> <param name="tenantId">Identifier for the Azure AD tenant from which the token was acquired. Can be <c>null</c></param> <param name="uniqueId">Unique Id of the account. It can be null. When the <see cref="P:Microsoft.Identity.Client.AuthenticationResult.IdToken"/> is not <c>null</c>, this is its ID, that is its ObjectId claim, or if that claim is <c>null</c>, the Subject claim.</param> <param name="correlationId">The correlation id of the authentication request</param> <param name="tokenType">The token type, defaults to Bearer. Note: this property is experimental and may change in future versions of the library.</param> </member> <member name="P:Microsoft.Identity.Client.AuthenticationResult.AccessToken"> <summary> Access Token that can be used as a bearer token to access protected web APIs </summary> </member> <member name="P:Microsoft.Identity.Client.AuthenticationResult.IsExtendedLifeTimeToken"> <summary> In case when Azure AD has an outage, to be more resilient, it can return tokens with an expiration time, and also with an extended expiration time. The tokens are then automatically refreshed by MSAL when the time is more than the expiration time, except when ExtendedLifeTimeEnabled is true and the time is less than the extended expiration time. This goes in pair with Web APIs middleware which, when this extended life time is enabled, can accept slightly expired tokens. Client applications accept extended life time tokens only if the ExtendedLifeTimeEnabled Boolean is set to true on ClientApplicationBase. </summary> </member> <member name="P:Microsoft.Identity.Client.AuthenticationResult.UniqueId"> <summary> Gets the Unique Id of the account. It can be null. When the <see cref="P:Microsoft.Identity.Client.AuthenticationResult.IdToken"/> is not <c>null</c>, this is its ID, that is its ObjectId claim, or if that claim is <c>null</c>, the Subject claim. </summary> </member> <member name="P:Microsoft.Identity.Client.AuthenticationResult.ExpiresOn"> <summary> Gets the point in time in which the Access Token returned in the <see cref="P:Microsoft.Identity.Client.AuthenticationResult.AccessToken"/> property ceases to be valid. This value is calculated based on current UTC time measured locally and the value expiresIn received from the service. </summary> </member> <member name="P:Microsoft.Identity.Client.AuthenticationResult.ExtendedExpiresOn"> <summary> Gets the point in time in which the Access Token returned in the AccessToken property ceases to be valid in MSAL's extended LifeTime. This value is calculated based on current UTC time measured locally and the value ext_expiresIn received from the service. </summary> </member> <member name="P:Microsoft.Identity.Client.AuthenticationResult.TenantId"> <summary> Gets an identifier for the Azure AD tenant from which the token was acquired. This property will be null if tenant information is not returned by the service. </summary> </member> <member name="P:Microsoft.Identity.Client.AuthenticationResult.Account"> <summary> Gets the account information. Some elements in <see cref="T:Microsoft.Identity.Client.IAccount"/> might be null if not returned by the service. The account can be passed back in some API overloads to identify which account should be used such as <see cref="M:Microsoft.Identity.Client.IClientApplicationBase.AcquireTokenSilent(System.Collections.Generic.IEnumerable{System.String},Microsoft.Identity.Client.IAccount)"/> or <see cref="M:Microsoft.Identity.Client.IClientApplicationBase.RemoveAsync(Microsoft.Identity.Client.IAccount)"/> for instance </summary> </member> <member name="P:Microsoft.Identity.Client.AuthenticationResult.IdToken"> <summary> Gets the Id Token if returned by the service or null if no Id Token is returned. </summary> </member> <member name="P:Microsoft.Identity.Client.AuthenticationResult.Scopes"> <summary> Gets the granted scope values returned by the service. </summary> </member> <member name="P:Microsoft.Identity.Client.AuthenticationResult.CorrelationId"> <summary> Gets the correlation id used for the request. </summary> </member> <member name="P:Microsoft.Identity.Client.AuthenticationResult.TokenType"> <summary> Identifies the type of access token. By default tokens returned by Azure Active Directory are Bearer tokens. <seealso cref="M:Microsoft.Identity.Client.AuthenticationResult.CreateAuthorizationHeader"/> for getting an HTTP authorization header from an AuthenticationResult. </summary> <remarks>This API is experimental and may change without a major version upgrade. The values returned by this property are not guaranteed to remain the same. Please use <seealso cref="M:Microsoft.Identity.Client.AuthenticationResult.CreateAuthorizationHeader"/> instead.</remarks> </member> <member name="M:Microsoft.Identity.Client.AuthenticationResult.CreateAuthorizationHeader"> <summary> Creates the content for an HTTP authorization header from this authentication result, so that you can call a protected API </summary> <returns>Created authorization header of the form "Bearer {AccessToken}"</returns> <example> Here is how you can call a protected API from this authentication result (in the <c>result</c> variable): <code> HttpClient client = new HttpClient(); client.DefaultRequestHeaders.Add("Authorization", result.CreateAuthorizationHeader()); HttpResponseMessage r = await client.GetAsync(urlOfTheProtectedApi); </code> </example> </member> <member name="P:Microsoft.Identity.Client.AuthenticationResult.User"> <summary> In MSAL.NET 1.x, returned the user who signed in to get the authentication result. From MSAL 2.x rather use <see cref="P:Microsoft.Identity.Client.AuthenticationResult.Account"/> instead. See https://aka.ms/msal-net-2-released for more details. </summary> </member> <member name="T:Microsoft.Identity.Client.CacheV2.CacheManager"> <inheritdoc /> </member> <member name="M:Microsoft.Identity.Client.CacheV2.CacheManager.TryReadCache(Microsoft.Identity.Client.OAuth2.MsalTokenResponse@,Microsoft.Identity.Client.IAccount@)"> <inheritdoc /> </member> <member name="M:Microsoft.Identity.Client.CacheV2.CacheManager.CacheTokenResponse(Microsoft.Identity.Client.OAuth2.MsalTokenResponse)"> <inheritdoc /> </member> <member name="M:Microsoft.Identity.Client.CacheV2.CacheManager.DeleteCachedRefreshToken"> <inheritdoc /> </member> <member name="T:Microsoft.Identity.Client.CacheV2.ICacheManager"> <summary> This interface is for an individual request to access the cache functions. It is assumed that the implementation will have context about the call when using the cache manager. In msal, this context means AuthenticationParameters. </summary> </member> <member name="M:Microsoft.Identity.Client.CacheV2.ICacheManager.TryReadCache(Microsoft.Identity.Client.OAuth2.MsalTokenResponse@,Microsoft.Identity.Client.IAccount@)"> <summary> Try to read the cache. If a cache hit of any kind is found, return the token(s) and account information that was discovered. </summary> <param name="msalTokenResponse"></param> <param name="account"></param> <returns>True if a cache hit of any kind is found, False otherwise.</returns> </member> <member name="M:Microsoft.Identity.Client.CacheV2.ICacheManager.CacheTokenResponse(Microsoft.Identity.Client.OAuth2.MsalTokenResponse)"> <summary> Given a MsalTokenResponse from the server, cache any relevant entries. </summary> <param name="tokenResponse"></param> <returns></returns> </member> <member name="M:Microsoft.Identity.Client.CacheV2.ICacheManager.DeleteCachedRefreshToken"> <summary> Delete the cached refresh token for this cache context. </summary> </member> <member name="M:Microsoft.Identity.Client.CacheV2.Impl.AdalLegacyCacheManager.WriteAdalRefreshToken"> <inheritdoc /> </member> <member name="M:Microsoft.Identity.Client.CacheV2.Impl.AdalLegacyCacheManager.GetAdalRefreshToken"> <inheritdoc /> </member> <member name="M:Microsoft.Identity.Client.CacheV2.Impl.AdalLegacyCacheManager.GetAllAdalUsers"> <inheritdoc /> </member> <member name="M:Microsoft.Identity.Client.CacheV2.Impl.AdalLegacyCacheManager.RemoveAdalUser"> <inheritdoc /> </member> <member name="T:Microsoft.Identity.Client.CacheV2.Impl.IAdalLegacyCacheManager"> <summary> Interface to handle transforming unified schema types to/from the ADAL Legacy cache format and storing/retrieving them to/from the adal cache persistence. </summary> </member> <member name="T:Microsoft.Identity.Client.CacheV2.Impl.ICachePathStorage"> <summary> This interface represents raw byte i/o for cache data stored using relative paths (e.g. in memory, file system). </summary> </member> <member name="T:Microsoft.Identity.Client.CacheV2.Impl.ICredentialPathManager"> <summary> Interface providing mechanism to transform the unified schema types into their appropriate "path" or "key" for storage/retrieval. For example, on Windows, this will be a relative file system path. But on iOS/macOS is will be a path to keychain storage. </summary> </member> <member name="T:Microsoft.Identity.Client.CacheV2.Impl.InMemory.InMemoryCachePathStorage"> <summary> This is the in-memory cache implementation. This should be used when a developer wants to persist the cache data on their own (e.g. in a distributed cloud environment). </summary> </member> <member name="M:Microsoft.Identity.Client.CacheV2.Impl.InMemory.InMemoryCachePathStorage.FsDirectory.ListContents(System.Boolean)"> <summary> Returns list of relative paths at this directory, and downwards if recurse is true. </summary> <param name="recurse"></param> <returns></returns> </member> <member name="T:Microsoft.Identity.Client.CacheV2.Impl.IStorageManager"> <summary> Equivalence layer with MSAL C++ and other native platforms for handing read/write/query operations on the various credential and account types in the unified cache. Also provides (on msal.net) access to the Adal Legacy Cache Manager for ensuring legacy cache interop during storage access. </summary> </member> <member name="T:Microsoft.Identity.Client.CacheV2.Impl.IStorageWorker"> <summary> This does most of the raw work of IStorageManager but without knowledge of cross cutting concerns like telemetry. </summary> </member> <member name="M:Microsoft.Identity.Client.CacheV2.Impl.StorageManager.Serialize"> <inheritdoc /> </member> <member name="M:Microsoft.Identity.Client.CacheV2.Impl.StorageManager.Deserialize(System.Byte[])"> <inheritdoc /> </member> <member name="T:Microsoft.Identity.Client.CacheV2.Impl.TokenResponse"> <summary> TODO: this should be merged conceptually with MsalTokenResponse... </summary> </member> <member name="T:Microsoft.Identity.Client.CacheV2.Impl.Utils.Base32Hex"> <summary> A class to implement Base32Hex encoding </summary> </member> <member name="F:Microsoft.Identity.Client.CacheV2.Impl.Utils.Base32Hex.Base32HexAllowedCharacters"> <summary> The different characters allowed in Base32 encoding. </summary> <remarks> This is a 32-character subset of the twenty-six letters A–Z and six digits 2–7. https://en.wikipedia.org/wiki/Base32 </remarks> </member> <member name="M:Microsoft.Identity.Client.CacheV2.Impl.Utils.Base32Hex.ToBase32String(System.Byte[],System.Boolean)"> <summary> Converts a byte array into a Base32 string. </summary> <param name="input">The string to convert to Base32.</param> <param name="addPadding">Whether or not to add RFC3548 '='-padding to the string.</param> <returns>A Base32 string.</returns> <remarks> https://tools.ietf.org/html/rfc3548#section-2.2 indicates padding MUST be added unless the reference to the RFC tells us otherswise. https://github.com/google/google-authenticator/wiki/Key-Uri-Format indicates that padding SHOULD be omitted. To meet both requirements, you can omit padding when required. </remarks> </member> <member name="M:Microsoft.Identity.Client.CacheV2.Impl.Utils.Base32Hex.ToByteArray(System.String)"> <summary> Converts a Base32 string into the corresponding byte array, using 5 bits per character. </summary> <param name="input">The Base32 String</param> <returns>A byte array containing the properly encoded bytes.</returns> </member> <member name="T:Microsoft.Identity.Client.CacheV2.ITokenCacheAdapter"> <summary> Given that we want to be able to migrate to CacheV2 with confidence, we want the existing cache infrastructure to work and be able to test the new cache. This interface acts as the adapter between the product and the particular cache version being used. Once we've fully moved to the V2 cache, the goal is that this adapter infra will be removed and the implementation within this class for the V2 cache will move into the product code directly. </summary> </member> <member name="T:Microsoft.Identity.Client.CacheV2.Schema.Account"> <summary> This is the object we will serialize (using StorageJson* classes for specific field names) for Account information. If you're modifying this object and the related (de)serialization, you're modifying the cache persistence model and need to ensure it's compatible and compliant with the other cache implementations. </summary> </member> <member name="T:Microsoft.Identity.Client.CacheV2.Schema.Credential"> <summary> This is the object we will serialize (using StorageJson* classes for specific field names) for Credential information. Credentials include Access Tokens, Refresh Tokens, etc. If you're modifying this object and the related (de)serialization, you're modifying the cache persistence model and need to ensure it's compatible and compliant with the other cache implementations. </summary> </member> <member name="T:Microsoft.Identity.Client.CacheV2.Schema.StorageJsonUtils"> <summary> This class contains the methods for encoding/decoding our object representations of cache data. If you're modifying this class, you're updating the schema persistence behavior so ensure you're aligned with the other cache schema models. </summary> </member> <member name="T:Microsoft.Identity.Client.Cache.AdalResult"> <summary> Contains the results of one token acquisition operation. </summary> </member> <member name="M:Microsoft.Identity.Client.Cache.AdalResult.#ctor(System.String,System.String,System.DateTimeOffset)"> <summary> Creates result returned from AcquireToken. Except in advanced scenarios related to token caching, you do not need to create any instance of AuthenticationResult. </summary> <param name="accessTokenType">Type of the Access Token returned</param> <param name="accessToken">The Access Token requested</param> <param name="expiresOn">The point in time in which the Access Token returned in the AccessToken property ceases to be valid</param> </member> <member name="M:Microsoft.Identity.Client.Cache.AdalResult.#ctor(System.String,System.String,System.DateTimeOffset,System.DateTimeOffset)"> <summary> Creates result returned from AcquireToken. Except in advanced scenarios related to token caching, you do not need to create any instance of AuthenticationResult. </summary> <param name="accessTokenType">Type of the Access Token returned</param> <param name="accessToken">The Access Token requested</param> <param name="expiresOn">The point in time in which the Access Token returned in the AccessToken property ceases to be valid</param> <param name="extendedExpiresOn">The point in time in which the Access Token returned in the AccessToken property ceases to be valid</param> </member> <member name="P:Microsoft.Identity.Client.Cache.AdalResult.AccessTokenType"> <summary> Gets the type of the Access Token returned. </summary> </member> <member name="P:Microsoft.Identity.Client.Cache.AdalResult.AccessToken"> <summary> Gets the Access Token requested. </summary> </member> <member name="P:Microsoft.Identity.Client.Cache.AdalResult.ExpiresOn"> <summary> Gets the point in time in which the Access Token returned in the AccessToken property ceases to be valid. This value is calculated based on current UTC time measured locally and the value expiresIn received from the service. </summary> </member> <member name="P:Microsoft.Identity.Client.Cache.AdalResult.ExtendedExpiresOn"> <summary> Gets the point in time in which the Access Token returned in the AccessToken property ceases to be valid in ADAL's extended LifeTime. This value is calculated based on current UTC time measured locally and the value ext_expiresIn received from the service. </summary> </member> <member name="P:Microsoft.Identity.Client.Cache.AdalResult.ExtendedLifeTimeToken"> <summary> Gives information to the developer whether token returned is during normal or extended lifetime. </summary> </member> <member name="P:Microsoft.Identity.Client.Cache.AdalResult.TenantId"> <summary> Gets an identifier for the tenant the token was acquired from. This property will be null if tenant information is not returned by the service. </summary> </member> <member name="P:Microsoft.Identity.Client.Cache.AdalResult.UserInfo"> <summary> Gets user information including user Id. Some elements in UserInfo might be null if not returned by the service. </summary> </member> <member name="P:Microsoft.Identity.Client.Cache.AdalResult.IdToken"> <summary> Gets the entire Id Token if returned by the service or null if no Id Token is returned. </summary> </member> <member name="P:Microsoft.Identity.Client.Cache.AdalResult.Authority"> <summary> Gets the authority that has issued the token. </summary> </member> <member name="M:Microsoft.Identity.Client.Cache.AdalResult.CreateAuthorizationHeader"> <summary> Creates authorization header from authentication result. </summary> <returns>Created authorization header</returns> </member> <member name="P:Microsoft.Identity.Client.Cache.AdalResultWrapper.RefreshToken"> <summary> Gets the Refresh Token associated with the requested Access Token. Note: not all operations will return a Refresh Token. </summary> </member> <member name="P:Microsoft.Identity.Client.Cache.AdalResultWrapper.IsMultipleResourceRefreshToken"> <summary> Gets a value indicating whether the refresh token can be used for requesting access token for other resources. </summary> </member> <member name="M:Microsoft.Identity.Client.Cache.AdalResultWrapper.Deserialize(System.String)"> <summary> Serializes the object to a JSON string </summary> <returns>Deserialized authentication result</returns> </member> <member name="M:Microsoft.Identity.Client.Cache.AdalResultWrapper.Serialize"> <summary> Serializes the object to a JSON string </summary> <returns>Serialized authentication result</returns> </member> <member name="T:Microsoft.Identity.Client.Cache.TokenSubjectType"> <summary> Determines what type of subject the token was issued for. </summary> </member> <member name="F:Microsoft.Identity.Client.Cache.TokenSubjectType.User"> <summary> User </summary> </member> <member name="F:Microsoft.Identity.Client.Cache.TokenSubjectType.Client"> <summary> Client </summary> </member> <member name="F:Microsoft.Identity.Client.Cache.TokenSubjectType.UserPlusClient"> <summary> UserPlusClient: This is for confidential clients used in middle tier. </summary> </member> <member name="T:Microsoft.Identity.Client.Cache.AdalTokenCacheKey"> <summary> <see cref="T:Microsoft.Identity.Client.Cache.AdalTokenCacheKey"/> can be used with Linq to access items from the TokenCache dictionary. </summary> </member> <member name="M:Microsoft.Identity.Client.Cache.AdalTokenCacheKey.Equals(System.Object)"> <summary> Determines whether the specified object is equal to the current object. </summary> <returns> true if the specified object is equal to the current object; otherwise, false. </returns> <param name="obj">The object to compare with the current object. </param><filterpriority>2</filterpriority> </member> <member name="M:Microsoft.Identity.Client.Cache.AdalTokenCacheKey.Equals(Microsoft.Identity.Client.Cache.AdalTokenCacheKey)"> <summary> Determines whether the specified TokenCacheKey is equal to the current object. </summary> <returns> true if the specified TokenCacheKey is equal to the current object; otherwise, false. </returns> <param name="other">The TokenCacheKey to compare with the current object. </param><filterpriority>2</filterpriority> </member> <member name="M:Microsoft.Identity.Client.Cache.AdalTokenCacheKey.GetHashCode"> <summary> Returns the hash code for this TokenCacheKey. </summary> <returns> A 32-bit signed integer hash code. </returns> </member> <member name="T:Microsoft.Identity.Client.Cache.AdalUserInfo"> <summary> Contains information of a single user. This information is used for token cache lookup. Also if created with userId, userId is sent to the service when login_hint is accepted. </summary> </member> <member name="M:Microsoft.Identity.Client.Cache.AdalUserInfo.#ctor"> <summary> Create user information for token cache lookup </summary> </member> <member name="M:Microsoft.Identity.Client.Cache.AdalUserInfo.#ctor(Microsoft.Identity.Client.Cache.AdalUserInfo)"> <summary> Create user information copied from another UserInfo object </summary> </member> <member name="P:Microsoft.Identity.Client.Cache.AdalUserInfo.UniqueId"> <summary> Gets identifier of the user authenticated during token acquisition. </summary> </member> <member name="P:Microsoft.Identity.Client.Cache.AdalUserInfo.DisplayableId"> <summary> Gets a displayable value in UserPrincipalName (UPN) format. The value can be null. </summary> </member> <member name="P:Microsoft.Identity.Client.Cache.AdalUserInfo.GivenName"> <summary> Gets given name of the user if provided by the service. If not, the value is null. </summary> </member> <member name="P:Microsoft.Identity.Client.Cache.AdalUserInfo.FamilyName"> <summary> Gets family name of the user if provided by the service. If not, the value is null. </summary> </member> <member name="P:Microsoft.Identity.Client.Cache.AdalUserInfo.PasswordExpiresOn"> <summary> Gets the time when the password expires. Default value is 0. </summary> </member> <member name="P:Microsoft.Identity.Client.Cache.AdalUserInfo.PasswordChangeUrl"> <summary> Gets the url where the user can change the expiring password. The value can be null. </summary> </member> <member name="P:Microsoft.Identity.Client.Cache.AdalUserInfo.IdentityProvider"> <summary> Gets identity provider if returned by the service. If not, the value is null. </summary> </member> <member name="T:Microsoft.Identity.Client.Cache.CacheData"> <summary> Data class, common to ADAL.NET and MSAL.NET V2 used for the token cache serialization in a dual format: the ADAL V3 cache format, and the new unified cache format, common to ADAL.NET 4.x, MSAL.NET 2.x and other libraries in the same Operating System (for instance ADAL and MSAL for objective C in iOS) </summary> </member> <member name="P:Microsoft.Identity.Client.Cache.CacheData.AdalV3State"> <summary> Array of bytes containing the serialized cache in ADAL.NET V3 format </summary> </member> <member name="P:Microsoft.Identity.Client.Cache.CacheData.UnifiedState"> <summary> Array of bytes containing the serialized MSAL.NET V2 cache </summary> </member> <member name="M:Microsoft.Identity.Client.Cache.CacheFallbackOperations.GetAllAdalUsersForMsal(Microsoft.Identity.Client.Core.ICoreLogger,Microsoft.Identity.Client.Cache.ILegacyCachePersistence,System.String)"> <summary> Returns a tuple where Item1 is a map of ClientInfo -> AdalUserInfo for those users that have ClientInfo Item2 is a list of AdalUserInfo for those users that do not have ClientInfo </summary> </member> <member name="M:Microsoft.Identity.Client.Cache.CacheFallbackOperations.RemoveAdalUser(Microsoft.Identity.Client.Core.ICoreLogger,Microsoft.Identity.Client.Cache.ILegacyCachePersistence,System.String,System.String,System.String)"> <summary> Algorithm to delete: DisplayableId cannot be null Removal is scoped by enviroment and clientId; If accountId != null then delete everything with the same clientInfo otherwise, delete everything with the same displayableId Notes: - displayableId can change rarely - ClientCredential Grant uses the app token cache, not the user token cache, so this algorithm does not apply (nor will GetAccounts / RemoveAccount work) </summary> </member> <member name="T:Microsoft.Identity.Client.Cache.CacheSessionManager"> <summary> MSAL should only interact with the cache though this object. It is reponsible for firing cache notifications. Flows should only perform (at most) 2 cache accesses: one to read data and one to write tokens. Reading data multiple times (e.g. read all ATs, read all RTs) should not refresh the cache from disk because of perf impact. Write operations are still the responsability of TokenCache. </summary> </member> <member name="P:Microsoft.Identity.Client.Cache.Items.MsalAccessTokenCacheItem.NormalizedScopes"> <summary> String comprised of scopes that have been lowercased and ordered. </summary> <remarks>Normalization is important when creating unique keys.</remarks> </member> <member name="P:Microsoft.Identity.Client.Cache.Items.MsalAccessTokenCacheItem.KeyId"> <summary> Used when the token is bound to a public / private key pair which is identified by a key id (kid). Currently used by PoP tokens </summary> </member> <member name="P:Microsoft.Identity.Client.Cache.Items.MsalAccessTokenCacheItem.RefreshOnUnixTimestamp"> <summary> If set, AT should be refreshed earlier to make sure the token cache always has ATs with a long life. </summary> </member> <member name="T:Microsoft.Identity.Client.Cache.Items.MsalAppMetadataCacheItem"> <summary> Apps shouldn't rely on its presence, unless the app itself wrote it. It means that SDK should translate absense of app metadata to the default values of its required fields. Other apps that don't support app metadata should never remove existing app metadata. App metadata is a non-removable entity.It means there's no need for a public API to remove app metadata, and it shouldn't be removed when removeAccount is called. App metadata is a non-secret entity. It means that it cannot store any secret information, like tokens, nor PII, like username etc. App metadata can be extended by adding additional fields when required.Absense of any non-required field should translate to default values for those field. </summary> </member> <member name="P:Microsoft.Identity.Client.Cache.Items.MsalAppMetadataCacheItem.ClientId"> <remarks>mandatory</remarks> </member> <member name="P:Microsoft.Identity.Client.Cache.Items.MsalAppMetadataCacheItem.Environment"> <remarks>mandatory</remarks> </member> <member name="P:Microsoft.Identity.Client.Cache.Items.MsalAppMetadataCacheItem.FamilyId"> <summary> The family id of which this application is part of. This is an internal feature and there is currently a single app, with id 1. If familyId is empty, it means an app is not part of a family. A missing entry means unkown status. </summary> </member> <member name="M:Microsoft.Identity.Client.Cache.Items.MsalItemWithAdditionalFields.PopulateFieldsFromJObject(Microsoft.Identity.Json.Linq.JObject)"> <remarks> Important: order matters. This MUST be the last one called since it will extract the remaining fields out. </remarks> </member> <member name="P:Microsoft.Identity.Client.Cache.Items.MsalRefreshTokenCacheItem.FamilyId"> <summary> Optional. A value here means the token in an FRT. </summary> </member> <member name="P:Microsoft.Identity.Client.Cache.Items.MsalRefreshTokenCacheItem.IsFRT"> <summary> Family Refresh Tokens, can be used for all clients part of the family </summary> </member> <member name="T:Microsoft.Identity.Client.Cache.Keys.MsalAccessTokenCacheKey"> <summary> An object representing the key of the token cache AT dictionary. The format of the key is not important for this library, as long as it is unique. </summary> <remarks>The format of the key is platform dependent</remarks> </member> <member name="T:Microsoft.Identity.Client.Cache.Keys.MsalAccountCacheKey"> <summary> An object representing the key of the token cache Account dictionary. The format of the key is not important for this library, as long as it is unique. </summary> </member> <member name="T:Microsoft.Identity.Client.Cache.Keys.MsalAppMetadataCacheKey"> <summary> App metadata is an optional entity in cache and can be used by apps to store additional metadata applicable to a particular client. </summary> </member> <member name="M:Microsoft.Identity.Client.Cache.Keys.MsalAppMetadataCacheKey.ToString"> <summary> Ex: appmetadata-login.microsoftonline.com-b6c69a37-df96-4db0-9088-2ab96e1d8215 </summary> <returns></returns> </member> <member name="T:Microsoft.Identity.Client.Cache.Keys.MsalIdTokenCacheKey"> <summary> An object representing the key of the token cache Id Token dictionary. The format of the key is not important for this library, as long as it is unique. </summary> </member> <member name="T:Microsoft.Identity.Client.Cache.Keys.MsalRefreshTokenCacheKey"> <summary> An object representing the key of the token cache RT dictionary. The format of the key is not important for this library, as long as it is unique. </summary> <remarks> Normal RTs are scoped by env, account_id and clientID FRTs are scoped by env, account_id and familyID (clientID exists, but is irrelevant) </remarks> </member> <member name="M:Microsoft.Identity.Client.Cache.Keys.MsalRefreshTokenCacheKey.#ctor(System.String,System.String,System.String,System.String)"> <summary> Constructor </summary> <param name="environment"></param> <param name="clientId"></param> <param name="userIdentifier"></param> <param name="familyId">Can be null or empty, denoting a normal RT. A value signifies an FRT.</param> </member> <member name="T:Microsoft.Identity.Client.Cache.TokenCacheDictionarySerializer"> <remarks> The dictionary serializer does not handle Unknown Nodes </remarks> </member> <member name="T:Microsoft.Identity.Client.ClientApplicationBase"> <Summary> Abstract class containing common API methods and properties. Both <see cref="T:Microsoft.Identity.Client.PublicClientApplication"/> and <see cref="T:Microsoft.Identity.Client.ConfidentialClientApplication"/> extend this class. For details see https://aka.ms/msal-net-client-applications </Summary> <Summary> Abstract class containing common API methods and properties. Both <see cref="T:PublicClientApplication"/> and <see cref="T:ConfidentialClientApplication"/> extend this class. For details see https://aka.ms/msal-net-client-applications </Summary> </member> <member name="F:Microsoft.Identity.Client.ClientApplicationBase.DefaultAuthority"> <Summary> Default Authority used for interactive calls. </Summary> </member> <member name="P:Microsoft.Identity.Client.ClientApplicationBase.AppConfig"> <summary> Details on the configuration of the ClientApplication for debugging purposes. </summary> </member> <member name="P:Microsoft.Identity.Client.ClientApplicationBase.Authority"> <Summary> Gets the URL of the authority, or security token service (STS) from which MSAL.NET will acquire security tokens The return value of this property is either the value provided by the developer in the constructor of the application, or otherwise the value of the <see cref="F:Microsoft.Identity.Client.ClientApplicationBase.DefaultAuthority"/> static member (that is <c>https://login.microsoftonline.com/common/</c>) </Summary> </member> <member name="P:Microsoft.Identity.Client.ClientApplicationBase.UserTokenCache"> <Summary> User token cache. This case holds id tokens, access tokens and refresh tokens for accounts. It's used and updated silently if needed when calling <see cref="M:Microsoft.Identity.Client.ClientApplicationBase.AcquireTokenSilent(System.Collections.Generic.IEnumerable{System.String},Microsoft.Identity.Client.IAccount)"/> or one of the overrides of <see cref="M:Microsoft.Identity.Client.ClientApplicationBase.AcquireTokenSilent(System.Collections.Generic.IEnumerable{System.String},Microsoft.Identity.Client.IAccount)"/>. It is updated by each AcquireTokenXXX method, with the exception of <c>AcquireTokenForClient</c> which only uses the application cache (see <c>IConfidentialClientApplication</c>). </Summary> <remarks>On .NET Framework and .NET Core you can also customize the token cache serialization. See https://aka.ms/msal-net-token-cache-serialization. This is taken care of by MSAL.NET on other platforms. </remarks> </member> <member name="M:Microsoft.Identity.Client.ClientApplicationBase.GetAccountsAsync"> <summary> Returns all the available <see cref="T:Microsoft.Identity.Client.IAccount">accounts</see> in the user token cache for the application. </summary> </member> <member name="M:Microsoft.Identity.Client.ClientApplicationBase.GetAccountAsync(System.String)"> <summary> Get the <see cref="T:Microsoft.Identity.Client.IAccount"/> by its identifier among the accounts available in the token cache. </summary> <param name="accountId">Account identifier. The identifier is typically the value of the <see cref="P:Microsoft.Identity.Client.AccountId.Identifier"/> property of <see cref="T:Microsoft.Identity.Client.AccountId"/>. You typically get the account id from an <see cref="T:Microsoft.Identity.Client.IAccount"/> by using the <see cref="P:Microsoft.Identity.Client.IAccount.HomeAccountId"/> property> </param> </member> <member name="M:Microsoft.Identity.Client.ClientApplicationBase.RemoveAsync(Microsoft.Identity.Client.IAccount)"> <summary> Removes all tokens in the cache for the specified account. </summary> <param name="account">Instance of the account that needs to be removed</param> </member> <member name="M:Microsoft.Identity.Client.ClientApplicationBase.AcquireTokenSilent(System.Collections.Generic.IEnumerable{System.String},Microsoft.Identity.Client.IAccount)"> <summary> [V3 API] Attempts to acquire an access token for the <paramref name="account"/> from the user token cache. See https://aka.ms/msal-net-acquiretokensilent for more details </summary> <param name="scopes">Scopes requested to access a protected API</param> <param name="account">Account for which the token is requested.</param> <returns>An <see cref="T:Microsoft.Identity.Client.AcquireTokenSilentParameterBuilder"/> used to build the token request, adding optional parameters</returns> <exception cref="T:Microsoft.Identity.Client.MsalUiRequiredException">will be thrown in the case where an interaction is required with the end user of the application, for instance, if no refresh token was in the cache, or the user needs to consent, or re-sign-in (for instance if the password expired), or the user needs to perform two factor authentication</exception> <remarks> The access token is considered a match if it contains <b>at least</b> all the requested scopes. This means that an access token with more scopes than requested could be returned. If the access token is expired or close to expiration - within a 5 minute window - then the cached refresh token (if available) is used to acquire a new access token by making a silent network call. You can set additional parameters by chaining the builder with: <see cref="M:Microsoft.Identity.Client.AbstractAcquireTokenParameterBuilder`1.WithAuthority(System.String,System.Boolean)"/> or one of its overrides to request a token for a different authority than the one set at the application construction <see cref="M:Microsoft.Identity.Client.AcquireTokenSilentParameterBuilder.WithForceRefresh(System.Boolean)"/> to bypass the user token cache and force refreshing the token, as well as <see cref="M:Microsoft.Identity.Client.AbstractAcquireTokenParameterBuilder`1.WithExtraQueryParameters(System.Collections.Generic.Dictionary{System.String,System.String})"/> to specify extra query parameters </remarks> </member> <member name="M:Microsoft.Identity.Client.ClientApplicationBase.AcquireTokenSilent(System.Collections.Generic.IEnumerable{System.String},System.String)"> <summary> [V3 API] Attempts to acquire an access token for the <see cref="T:Microsoft.Identity.Client.IAccount"/> having the <see cref="P:Microsoft.Identity.Client.IAccount.Username" /> match the given <paramref name="loginHint"/>, from the user token cache. See https://aka.ms/msal-net-acquiretokensilent for more details </summary> <param name="scopes">Scopes requested to access a protected API</param> <param name="loginHint">Typically the username, in UPN format, e.g. johnd@contoso.com </param> <returns>An <see cref="T:Microsoft.Identity.Client.AcquireTokenSilentParameterBuilder"/> used to build the token request, adding optional parameters</returns> <exception cref="T:Microsoft.Identity.Client.MsalUiRequiredException">will be thrown in the case where an interaction is required with the end user of the application, for instance, if no refresh token was in the cache, or the user needs to consent, or re-sign-in (for instance if the password expired), or the user needs to perform two factor authentication</exception> <remarks> If multiple <see cref="T:Microsoft.Identity.Client.IAccount"/> match the <paramref name="loginHint"/>, or if there are no matches, an exception is thrown. The access token is considered a match if it contains <b>at least</b> all the requested scopes. This means that an access token with more scopes than requested could be returned. If the access token is expired or close to expiration - within a 5 minute window - then the cached refresh token (if available) is used to acquire a new access token by making a silent network call. You can set additional parameters by chaining the builder with: <see cref="M:Microsoft.Identity.Client.AbstractAcquireTokenParameterBuilder`1.WithAuthority(System.String,System.Boolean)"/> or one of its overrides to request a token for a different authority than the one set at the application construction <see cref="M:Microsoft.Identity.Client.AcquireTokenSilentParameterBuilder.WithForceRefresh(System.Boolean)"/> to bypass the user token cache and force refreshing the token, as well as <see cref="M:Microsoft.Identity.Client.AbstractAcquireTokenParameterBuilder`1.WithExtraQueryParameters(System.Collections.Generic.Dictionary{System.String,System.String})"/> to specify extra query parameters </remarks> </member> <member name="P:Microsoft.Identity.Client.ClientApplicationBase.Users"> <summary> In MSAL 1.x returned an enumeration of <see cref="T:Microsoft.Identity.Client.IUser"/>. From MSAL 2.x, use <see cref="M:Microsoft.Identity.Client.ClientApplicationBase.GetAccountsAsync"/> instead. See https://aka.ms/msal-net-2-released for more details. </summary> </member> <member name="M:Microsoft.Identity.Client.ClientApplicationBase.GetUser(System.String)"> <summary> In MSAL 1.x, return a user from its identifier. From MSAL 2.x, use <see cref="M:Microsoft.Identity.Client.ClientApplicationBase.GetAccountsAsync"/> instead. See https://aka.ms/msal-net-2-released for more details. </summary> <param name="identifier">Identifier of the user to retrieve</param> <returns>the user in the cache with the identifier passed as an argument</returns> </member> <member name="M:Microsoft.Identity.Client.ClientApplicationBase.Remove(Microsoft.Identity.Client.IUser)"> <summary> In MSAL 1.x removed a user from the cache. From MSAL 2.x, use <see cref="M:Microsoft.Identity.Client.ClientApplicationBase.RemoveAsync(Microsoft.Identity.Client.IAccount)"/> instead. See https://aka.ms/msal-net-2-released for more details. </summary> <param name="user">User to remove from the cache</param> </member> <member name="P:Microsoft.Identity.Client.ClientApplicationBase.Component"> <summary> Identifier of the component (libraries/SDK) consuming MSAL.NET. This will allow for disambiguation between MSAL usage by the app vs MSAL usage by component libraries. </summary> </member> <member name="P:Microsoft.Identity.Client.ClientApplicationBase.SliceParameters"> <summary> Sets or Gets a custom query parameters that may be sent to the STS for dogfood testing or debugging. This is a string of segments of the form <c>key=value</c> separated by an ampersand character. Unless requested otherwise, this parameter should not be set by application developers as it may have adverse effect on the application. </summary> </member> <member name="P:Microsoft.Identity.Client.ClientApplicationBase.ValidateAuthority"> <summary> Gets/sets a boolean value telling the application if the authority needs to be verified against a list of known authorities. The default value is <c>true</c>. It should currently be set to <c>false</c> for Azure AD B2C authorities as those are customer specific (a list of known B2C authorities cannot be maintained by MSAL.NET). This property can be set just after the construction of the application and before an operation acquiring a token or interacting with the STS. </summary> </member> <member name="P:Microsoft.Identity.Client.ClientApplicationBase.RedirectUri"> <summary> The redirect URI (also known as Reply URI or Reply URL), is the URI at which Azure AD will contact back the application with the tokens. This redirect URI needs to be registered in the app registration (https://aka.ms/msal-net-register-app). In MSAL.NET, <see cref="T:PublicClientApplication"/> define the following default RedirectUri values: <list type="bullet"> <item><description><c>urn:ietf:wg:oauth:2.0:oob</c> for desktop (.NET Framework and .NET Core) applications</description></item> <item><description><c>msal{ClientId}</c> for Xamarin iOS and Xamarin Android (as this will be used by the system web browser by default on these platforms to call back the application) </description></item> </list> These default URIs could change in the future. In <see cref="T:Microsoft.Identity.Client.ConfidentialClientApplication"/>, this can be the URL of the Web application / Web API. </summary> <remarks>This is especially important when you deploy an application that you have initially tested locally; you then need to add the reply URL of the deployed application in the application registration portal</remarks> </member> <member name="P:Microsoft.Identity.Client.ClientApplicationBase.ClientId"> <summary> Gets the Client ID (also known as <i>Application ID</i>) of the application as registered in the application registration portal (https://aka.ms/msal-net-register-app) and as passed in the constructor of the application </summary> </member> <member name="M:Microsoft.Identity.Client.ClientApplicationBase.AcquireTokenSilentAsync(System.Collections.Generic.IEnumerable{System.String},Microsoft.Identity.Client.IAccount,System.String,System.Boolean)"> <summary> [V2 API] Attempts to acquire an access token for the <paramref name="account"/> from the user token cache, with advanced parameters controlling network call. </summary> <param name="scopes">Scopes requested to access a protected API</param> <param name="account">Account for which the token is requested. <see cref="T:Microsoft.Identity.Client.IAccount"/></param> <param name="authority">Specific authority for which the token is requested. Passing a different value than configured in the application constructor narrows down the selection to a specific tenant. This does not change the configured value in the application. This is specific to applications managing several accounts (like a mail client with several mailboxes)</param> <param name="forceRefresh">If <c>true</c>, ignore any access token in the cache and attempt to acquire new access token using the refresh token for the account if this one is available. This can be useful in the case when the application developer wants to make sure that conditional access policies are applied immediately, rather than after the expiration of the access token</param> <returns>An <see cref="T:Microsoft.Identity.Client.AuthenticationResult"/> containing the requested access token</returns> <exception cref="T:Microsoft.Identity.Client.MsalUiRequiredException">can be thrown in the case where an interaction is required with the end user of the application, for instance, if no refresh token was in the cache,a or the user needs to consent, or re-sign-in (for instance if the password expired), or performs two factor authentication</exception> <remarks> The access token is considered a match if it contains <b>at least</b> all the requested scopes. This means that an access token with more scopes than requested could be returned as well. If the access token is expired or close to expiration (within a 5 minute window), then the cached refresh token (if available) is used to acquire a new access token by making a silent network call. See https://aka.ms/msal-net-acquiretokensilent for more details </remarks> </member> <member name="M:Microsoft.Identity.Client.ClientApplicationBase.AcquireTokenSilentAsync(System.Collections.Generic.IEnumerable{System.String},Microsoft.Identity.Client.IAccount)"> <summary> [V2 API] Attempts to acquire an access token for the <paramref name="account"/> from the user token cache. </summary> <param name="scopes">Scopes requested to access a protected API</param> <param name="account">Account for which the token is requested. <see cref="T:Microsoft.Identity.Client.IAccount"/></param> <returns>An <see cref="T:Microsoft.Identity.Client.AuthenticationResult"/> containing the requested token</returns> <exception cref="T:Microsoft.Identity.Client.MsalUiRequiredException">can be thrown in the case where an interaction is required with the end user of the application, for instance so that the user consents, or re-signs-in (for instance if the password expired), or performs two factor authentication</exception> <remarks> The access token is considered a match if it contains <b>at least</b> all the requested scopes. This means that an access token with more scopes than requested could be returned as well. If the access token is expired or close to expiration (within a 5 minute window), then the cached refresh token (if available) is used to acquire a new access token by making a silent network call. See https://aka.ms/msal-net-acquiretokensilent for more details </remarks> </member> <member name="T:Microsoft.Identity.Client.ConfidentialClientApplication"> <summary> Class to be used for confidential client applications (Web Apps, Web APIs, and daemon applications). </summary> <remarks> Confidential client applications are typically applications which run on servers (Web Apps, Web API, or even service/daemon applications). They are considered difficult to access, and therefore capable of keeping an application secret (hold configuration time secrets as these values would be difficult for end users to extract). A web app is the most common confidential client. The clientId is exposed through the web browser, but the secret is passed only in the back channel and never directly exposed. For details see https://aka.ms/msal-net-client-applications </remarks> </member> <member name="M:Microsoft.Identity.Client.ConfidentialClientApplication.AcquireTokenByAuthorizationCode(System.Collections.Generic.IEnumerable{System.String},System.String)"> <summary> Acquires a security token from the authority configured in the app using the authorization code previously received from the STS. It uses the OAuth 2.0 authorization code flow (See https://aka.ms/msal-net-authorization-code). It's usually used in Web Apps (for instance ASP.NET / ASP.NET Core Web apps) which sign-in users, and can request an authorization code. This method does not lookup the token cache, but stores the result in it, so it can be looked up using other methods such as <see cref="M:Microsoft.Identity.Client.IClientApplicationBase.AcquireTokenSilent(System.Collections.Generic.IEnumerable{System.String},Microsoft.Identity.Client.IAccount)"/>. </summary> <param name="scopes">Scopes requested to access a protected API</param> <param name="authorizationCode">The authorization code received from the service authorization endpoint.</param> <returns>A builder enabling you to add optional parameters before executing the token request</returns> <remarks>You can set optional parameters by chaining the builder with: <see cref="M:Microsoft.Identity.Client.AbstractAcquireTokenParameterBuilder`1.WithAuthority(System.String,System.Boolean)"/>, <see cref="M:Microsoft.Identity.Client.AbstractAcquireTokenParameterBuilder`1.WithExtraQueryParameters(System.Collections.Generic.Dictionary{System.String,System.String})"/>, </remarks> </member> <member name="M:Microsoft.Identity.Client.ConfidentialClientApplication.AcquireTokenForClient(System.Collections.Generic.IEnumerable{System.String})"> <summary> Acquires a token from the authority configured in the app, for the confidential client itself (in the name of no user) using the client credentials flow. See https://aka.ms/msal-net-client-credentials. </summary> <param name="scopes">scopes requested to access a protected API. For this flow (client credentials), the scopes should be of the form "{ResourceIdUri/.default}" for instance <c>https://management.azure.net/.default</c> or, for Microsoft Graph, <c>https://graph.microsoft.com/.default</c> as the requested scopes are defined statically with the application registration in the portal, and cannot be overriden in the application.</param> <returns>A builder enabling you to add optional parameters before executing the token request</returns> <remarks>You can also chain the following optional parameters: <see cref="M:Microsoft.Identity.Client.AcquireTokenForClientParameterBuilder.WithForceRefresh(System.Boolean)"/> <see cref="M:Microsoft.Identity.Client.AbstractAcquireTokenParameterBuilder`1.WithExtraQueryParameters(System.Collections.Generic.Dictionary{System.String,System.String})"/> </remarks> </member> <member name="M:Microsoft.Identity.Client.ConfidentialClientApplication.AcquireTokenOnBehalfOf(System.Collections.Generic.IEnumerable{System.String},Microsoft.Identity.Client.UserAssertion)"> <summary> Acquires an access token for this application (usually a Web API) from the authority configured in the application, in order to access another downstream protected Web API on behalf of a user using the OAuth 2.0 On-Behalf-Of flow. See https://aka.ms/msal-net-on-behalf-of. This confidential client application was itself called with a token which will be provided in the <paramref name="userAssertion">userAssertion</paramref> parameter. </summary> <param name="scopes">Scopes requested to access a protected API</param> <param name="userAssertion">Instance of <see cref="T:Microsoft.Identity.Client.UserAssertion"/> containing credential information about the user on behalf of whom to get a token.</param> <returns>A builder enabling you to add optional parameters before executing the token request</returns> <remarks>You can also chain the following optional parameters: <see cref="M:Microsoft.Identity.Client.AbstractAcquireTokenParameterBuilder`1.WithExtraQueryParameters(System.Collections.Generic.Dictionary{System.String,System.String})"/> </remarks> </member> <member name="M:Microsoft.Identity.Client.ConfidentialClientApplication.GetAuthorizationRequestUrl(System.Collections.Generic.IEnumerable{System.String})"> <summary> Computes the URL of the authorization request letting the user sign-in and consent to the application accessing specific scopes in the user's name. The URL targets the /authorize endpoint of the authority configured in the application. This override enables you to specify a login hint and extra query parameter. </summary> <param name="scopes">Scopes requested to access a protected API</param> <returns>A builder enabling you to add optional parameters before executing the token request to get the URL of the STS authorization endpoint parametrized with the parameters</returns> <remarks>You can also chain the following optional parameters: <see cref="M:Microsoft.Identity.Client.GetAuthorizationRequestUrlParameterBuilder.WithRedirectUri(System.String)"/> <see cref="M:Microsoft.Identity.Client.GetAuthorizationRequestUrlParameterBuilder.WithLoginHint(System.String)"/> <see cref="M:Microsoft.Identity.Client.AbstractAcquireTokenParameterBuilder`1.WithExtraQueryParameters(System.Collections.Generic.Dictionary{System.String,System.String})"/> <see cref="M:Microsoft.Identity.Client.GetAuthorizationRequestUrlParameterBuilder.WithExtraScopesToConsent(System.Collections.Generic.IEnumerable{System.String})"/> </remarks> </member> <member name="P:Microsoft.Identity.Client.ConfidentialClientApplication.AppTokenCache"> <Summary> Application token cache. This case holds access tokens and refresh tokens for the application. It's maintained and updated silently if needed when calling <see cref="M:Microsoft.Identity.Client.ConfidentialClientApplication.AcquireTokenForClient(System.Collections.Generic.IEnumerable{System.String})"/> </Summary> <remarks>On .NET Framework and .NET Core you can also customize the token cache serialization. See https://aka.ms/msal-net-token-cache-serialization. This is taken care of by MSAL.NET on other platforms </remarks> </member> <member name="M:Microsoft.Identity.Client.ConfidentialClientApplication.#ctor(System.String,System.String,Microsoft.Identity.Client.ClientCredential,Microsoft.Identity.Client.TokenCache,Microsoft.Identity.Client.TokenCache)"> <summary> [V2 API] Constructor for a confidential client application requesting tokens with the default authority (<see cref="F:Microsoft.Identity.Client.ClientApplicationBase.DefaultAuthority"/>) </summary> <param name="clientId">Client ID (also known as App ID) of the application as registered in the application registration portal (https://aka.ms/msal-net-register-app)/. REQUIRED</param> <param name="redirectUri">URL where the STS will call back the application with the security token. REQUIRED</param> <param name="clientCredential">Credential, previously shared with Azure AD during the application registration and proving the identity of the application. An instance of <see cref="P:Microsoft.Identity.Client.ConfidentialClientApplication.ClientCredential"/> can be created either from an application secret, or a certificate. REQUIRED.</param> <param name="userTokenCache">Token cache for saving user tokens. Can be set to null if the confidential client application only uses the Client Credentials grants (that is requests token in its own name and not in the name of users). Otherwise should be provided. REQUIRED</param> <param name="appTokenCache">Token cache for saving application (that is client token). Can be set to <c>null</c> except if the application uses the client credentials grants</param> <remarks> See https://aka.ms/msal-net-client-applications for a description of confidential client applications (and public client applications) Client credential grants are overrides of <see cref="M:Microsoft.Identity.Client.ConfidentialClientApplication.AcquireTokenForClientAsync(System.Collections.Generic.IEnumerable{System.String})"/> See also <see cref="T:ConfidentialClientApplicationBuilder"/> for the V3 API way of building a confidential client application with a builder pattern. It offers building the application from configuration options, and a more fluid way of providing parameters. </remarks> <seealso cref="T:Microsoft.Identity.Client.ConfidentialClientApplication"/> which enables app developers to specify the authority </member> <member name="M:Microsoft.Identity.Client.ConfidentialClientApplication.#ctor(System.String,System.String,System.String,Microsoft.Identity.Client.ClientCredential,Microsoft.Identity.Client.TokenCache,Microsoft.Identity.Client.TokenCache)"> <summary> [V2 API] Constructor for a confidential client application requesting tokens with a specified authority </summary> <param name="clientId">Client ID (also named Application ID) of the application as registered in the application registration portal (https://aka.ms/msal-net-register-app)/. REQUIRED</param> <param name="authority">Authority of the security token service (STS) from which MSAL.NET will acquire the tokens. Usual authorities are: <list type="bullet"> <item><description><c>https://login.microsoftonline.com/tenant/</c>, where <c>tenant</c> is the tenant ID of the Azure AD tenant or a domain associated with this Azure AD tenant, in order to sign-in users of a specific organization only</description></item> <item><description><c>https://login.microsoftonline.com/common/</c> to sign-in users with any work and school accounts or Microsoft personal accounts</description></item> <item><description><c>https://login.microsoftonline.com/organizations/</c> to sign-in users with any work and school accounts</description></item> <item><description><c>https://login.microsoftonline.com/consumers/</c> to sign-in users with only personal Microsoft accounts(live)</description></item> </list> Note that this setting needs to be consistent with what is declared in the application registration portal </param> <param name="redirectUri">URL where the STS will call back the application with the security token. REQUIRED</param> <param name="clientCredential">Credential, previously shared with Azure AD during the application registration and proving the identity of the application. An instance of <see cref="P:Microsoft.Identity.Client.ConfidentialClientApplication.ClientCredential"/> can be created either from an application secret, or a certificate. REQUIRED.</param> <param name="userTokenCache">Token cache for saving user tokens. Can be set to null if the confidential client application only uses the Client Credentials grants (that is requests token in its own name and not in the name of users). Otherwise should be provided. REQUIRED</param> <param name="appTokenCache">Token cache for saving application (that is client token). Can be set to <c>null</c> except if the application uses the client credentials grants</param> <remarks> See https://aka.ms/msal-net-client-applications for a description of confidential client applications (and public client applications) Client credential grants are overrides of <see cref="M:Microsoft.Identity.Client.ConfidentialClientApplication.AcquireTokenForClientAsync(System.Collections.Generic.IEnumerable{System.String})"/> See also <see cref="T:ConfidentialClientApplicationBuilder"/> for the V3 API way of building a confidential client application with a builder pattern. It offers building the application from configuration options, and a more fluid way of providing parameters. </remarks> <seealso cref="T:Microsoft.Identity.Client.ConfidentialClientApplication"/> which enables app developers to create a confidential client application requesting tokens with the default authority. </member> <member name="M:Microsoft.Identity.Client.ConfidentialClientApplication.AcquireTokenOnBehalfOfAsync(System.Collections.Generic.IEnumerable{System.String},Microsoft.Identity.Client.UserAssertion)"> <summary> [V2 API] Acquires an access token for this application (usually a Web API) from the authority configured in the application, in order to access another downstream protected Web API on behalf of a user using the OAuth 2.0 On-Behalf-Of flow. (See https://aka.ms/msal-net-on-behalf-of). This confidential client application was itself called with a token which will be provided in the <paramref name="userAssertion">userAssertion</paramref> parameter. </summary> <param name="scopes">Scopes requested to access a protected API</param> <param name="userAssertion">Instance of <see cref="T:Microsoft.Identity.Client.UserAssertion"/> containing credential information about the user on behalf of whom to get a token.</param> <returns>Authentication result containing a token for the requested scopes and account</returns> <seealso cref="M:Microsoft.Identity.Client.ConfidentialClientApplication.AcquireTokenOnBehalfOfAsync(System.Collections.Generic.IEnumerable{System.String},Microsoft.Identity.Client.UserAssertion,System.String)"/> for the on-behalf-of flow when specifying the authority <seealso cref="M:Microsoft.Identity.Client.ConfidentialClientApplication.AcquireTokenOnBehalfOf(System.Collections.Generic.IEnumerable{System.String},Microsoft.Identity.Client.UserAssertion)"/> which is the corresponding V3 API. </member> <member name="M:Microsoft.Identity.Client.ConfidentialClientApplication.AcquireTokenOnBehalfOfAsync(System.Collections.Generic.IEnumerable{System.String},Microsoft.Identity.Client.UserAssertion,System.String)"> <summary> [V2 API] Acquires an access token for this application (usually a Web API) from a specific authority, in order to access another downstream protected Web API on behalf of a user (See https://aka.ms/msal-net-on-behalf-of). This confidential client application was itself called with a token which will be provided in the <paramref name="userAssertion">userAssertion</paramref> parameter. </summary> <param name="scopes">Scopes requested to access a protected API</param> <param name="userAssertion">Instance of <see cref="T:Microsoft.Identity.Client.UserAssertion"/> containing credential information about the user on behalf of whom to get a token.</param> <param name="authority">Specific authority for which the token is requested. Passing a different value than configured does not change the configured value</param> <returns>Authentication result containing a token for the requested scopes and account</returns> <seealso cref="M:Microsoft.Identity.Client.ConfidentialClientApplication.AcquireTokenOnBehalfOfAsync(System.Collections.Generic.IEnumerable{System.String},Microsoft.Identity.Client.UserAssertion)"/> for the on-behalf-of flow without specifying the authority <seealso cref="M:Microsoft.Identity.Client.ConfidentialClientApplication.AcquireTokenOnBehalfOf(System.Collections.Generic.IEnumerable{System.String},Microsoft.Identity.Client.UserAssertion)"/> which is the corresponding V3 API. </member> <member name="M:Microsoft.Identity.Client.ConfidentialClientApplication.Microsoft#Identity#Client#IConfidentialClientApplicationWithCertificate#AcquireTokenOnBehalfOfWithCertificateAsync(System.Collections.Generic.IEnumerable{System.String},Microsoft.Identity.Client.UserAssertion)"> <summary> [V2 API] Acquires an access token for this application (usually a Web API) from the authority configured in the application, in order to access another downstream protected Web API on behalf of a user using the OAuth 2.0 On-Behalf-Of flow. (See https://aka.ms/msal-net-on-behalf-of). This confidential client application was itself called with a token which will be provided in the <paramref name="userAssertion">userAssertion</paramref> parameter. This override sends the certificate, which helps certificate rotation in Azure AD </summary> <param name="scopes">Scopes requested to access a protected API</param> <param name="userAssertion">Instance of <see cref="T:Microsoft.Identity.Client.UserAssertion"/> containing credential information about the user on behalf of whom to get a token.</param> <returns>Authentication result containing a token for the requested scopes and account</returns> <seealso cref="M:Microsoft.Identity.Client.ConfidentialClientApplication.AcquireTokenOnBehalfOf(System.Collections.Generic.IEnumerable{System.String},Microsoft.Identity.Client.UserAssertion)"/> which is the corresponding V3 API </member> <member name="M:Microsoft.Identity.Client.ConfidentialClientApplication.Microsoft#Identity#Client#IConfidentialClientApplicationWithCertificate#AcquireTokenOnBehalfOfWithCertificateAsync(System.Collections.Generic.IEnumerable{System.String},Microsoft.Identity.Client.UserAssertion,System.String)"> <summary> [V2 API] Acquires an access token for this application (usually a Web API) from a specific authority, in order to access another downstream protected Web API on behalf of a user (See https://aka.ms/msal-net-on-behalf-of). This confidential client application was itself called with a token which will be provided in the This override sends the certificate, which helps certificate rotation in Azure AD <paramref name="userAssertion">userAssertion</paramref> parameter. </summary> <param name="scopes">Scopes requested to access a protected API</param> <param name="userAssertion">Instance of <see cref="T:Microsoft.Identity.Client.UserAssertion"/> containing credential information about the user on behalf of whom to get a token.</param> <param name="authority">Specific authority for which the token is requested. Passing a different value than configured does not change the configured value</param> <returns>Authentication result containing a token for the requested scopes and account</returns> <seealso cref="M:Microsoft.Identity.Client.ConfidentialClientApplication.AcquireTokenOnBehalfOf(System.Collections.Generic.IEnumerable{System.String},Microsoft.Identity.Client.UserAssertion)"/> which is the corresponding V3 API </member> <member name="M:Microsoft.Identity.Client.ConfidentialClientApplication.AcquireTokenByAuthorizationCodeAsync(System.String,System.Collections.Generic.IEnumerable{System.String})"> <summary> [V2 API] Acquires a security token from the authority configured in the app using the authorization code previously received from the STS. It uses the OAuth 2.0 authorization code flow (See https://aka.ms/msal-net-authorization-code). It's usually used in Web Apps (for instance ASP.NET / ASP.NET Core Web apps) which sign-in users, and therefore receive an authorization code. This method does not lookup the token cache, but stores the result in it, so it can be looked up using other methods such as <see cref="M:Microsoft.Identity.Client.IClientApplicationBase.AcquireTokenSilentAsync(System.Collections.Generic.IEnumerable{System.String},Microsoft.Identity.Client.IAccount)"/>. </summary> <param name="authorizationCode">The authorization code received from service authorization endpoint.</param> <param name="scopes">Scopes requested to access a protected API</param> <returns>Authentication result containing token of the user for the requested scopes</returns> <seealso cref="M:Microsoft.Identity.Client.ConfidentialClientApplication.AcquireTokenByAuthorizationCode(System.Collections.Generic.IEnumerable{System.String},System.String)"/> which is the corresponding V2 API </member> <member name="M:Microsoft.Identity.Client.ConfidentialClientApplication.AcquireTokenForClientAsync(System.Collections.Generic.IEnumerable{System.String})"> <summary> [V3 API] Acquires a token from the authority configured in the app, for the confidential client itself (in the name of no user) using the client credentials flow. (See https://aka.ms/msal-net-client-credentials) </summary> <param name="scopes">scopes requested to access a protected API. For this flow (client credentials), the scopes should be of the form "{ResourceIdUri/.default}" for instance <c>https://management.azure.net/.default</c> or, for Microsoft Graph, <c>https://graph.microsoft.com/.default</c> as the requested scopes are really defined statically at application registration in the portal, and cannot be overriden in the application. See also </param> <returns>Authentication result containing the token of the user for the requested scopes</returns> </member> <member name="M:Microsoft.Identity.Client.ConfidentialClientApplication.AcquireTokenForClientAsync(System.Collections.Generic.IEnumerable{System.String},System.Boolean)"> <summary> [V2 API] Acquires a token from the authority configured in the app, for the confidential client itself (in the name of no user) using the client credentials flow. (See https://aka.ms/msal-net-client-credentials) </summary> <param name="scopes">Scopes requested to access a protected API. For this flow (client credentials), the scopes should be of the form "{ResourceIdUri/.default}" for instance <c>https://management.azure.net/.default</c> or, for Microsoft Graph, <c>https://graph.microsoft.com/.default</c> as the requested scopes are really defined statically at application registration in the portal, and cannot be overriden in the application</param> <param name="forceRefresh">If <c>true</c>, API will ignore the access token in the cache and attempt to acquire new access token using client credentials. This override can be used in case the application knows that conditional access policies changed</param> <returns>Authentication result containing token of the user for the requested scopes</returns> <seealso cref="M:Microsoft.Identity.Client.ConfidentialClientApplication.AcquireTokenForClient(System.Collections.Generic.IEnumerable{System.String})"/> which is the corresponding V3 API </member> <member name="M:Microsoft.Identity.Client.ConfidentialClientApplication.Microsoft#Identity#Client#IConfidentialClientApplicationWithCertificate#AcquireTokenForClientWithCertificateAsync(System.Collections.Generic.IEnumerable{System.String})"> <summary> [V2 API] Acquires token from the service for the confidential client using the client credentials flow. (See https://aka.ms/msal-net-client-credentials) This method enables application developers to achieve easy certificate roll-over in Azure AD: this method will send the public certificate to Azure AD along with the token request, so that Azure AD can use it to validate the subject name based on a trusted issuer policy. This saves the application admin from the need to explicitly manage the certificate rollover (either via portal or powershell/CLI operation) </summary> <param name="scopes">Scopes requested to access a protected API</param> <returns>Authentication result containing application token for the requested scopes</returns> <seealso cref="M:Microsoft.Identity.Client.ConfidentialClientApplication.AcquireTokenForClient(System.Collections.Generic.IEnumerable{System.String})"/> which is the corresponding V3 API </member> <member name="M:Microsoft.Identity.Client.ConfidentialClientApplication.Microsoft#Identity#Client#IConfidentialClientApplicationWithCertificate#AcquireTokenForClientWithCertificateAsync(System.Collections.Generic.IEnumerable{System.String},System.Boolean)"> <summary> [V2 API] Acquires token from the service for the confidential client using the client credentials flow. (See https://aka.ms/msal-net-client-credentials) This method attempts to look up valid access token in the cache unless<paramref name="forceRefresh"/> is true This method enables application developers to achieve easy certificate roll-over in Azure AD: this method will send the public certificate to Azure AD along with the token request, so that Azure AD can use it to validate the subject name based on a trusted issuer policy. This saves the application admin from the need to explicitly manage the certificate rollover (either via portal or powershell/CLI operation) </summary> <param name="scopes">Scopes requested to access a protected API</param> <param name="forceRefresh">If TRUE, API will ignore the access token in the cache and attempt to acquire new access token using client credentials</param> <returns>Authentication result containing application token for the requested scopes</returns> <seealso cref="M:Microsoft.Identity.Client.ConfidentialClientApplication.AcquireTokenForClient(System.Collections.Generic.IEnumerable{System.String})"/> which is the corresponding V3 API </member> <member name="M:Microsoft.Identity.Client.ConfidentialClientApplication.Microsoft#Identity#Client#IByRefreshToken#AcquireTokenByRefreshTokenAsync(System.Collections.Generic.IEnumerable{System.String},System.String)"> <summary> Acquires an access token from an existing refresh token and stores it and the refresh token into the application user token cache, where it will be available for further AcquireTokenSilentAsync calls. This method can be used in migration to MSAL from ADAL v2 and in various integration scenarios where you have a RefreshToken available. (see https://aka.ms/msal-net-migration-adal2-msal2) </summary> <param name="scopes">Scope to request from the token endpoint. Setting this to null or empty will request an access token, refresh token and ID token with default scopes</param> <param name="refreshToken">The refresh token (for example previously obtained from ADAL 2.x)</param> </member> <member name="M:Microsoft.Identity.Client.ConfidentialClientApplication.GetAuthorizationRequestUrlAsync(System.Collections.Generic.IEnumerable{System.String},System.String,System.String)"> <summary> [V2 API] Computes the URL of the authorization request letting the user sign-in and consent to the application accessing specific scopes in the user's name. The URL targets the /authorize endpoint of the authority configured in the application. This override enables you to specify a login hint and extra query parameter. </summary> <param name="scopes">Scopes requested to access a protected API</param> <param name="loginHint">Identifier of the user. Generally a UPN. This can be empty</param> <param name="extraQueryParameters">This parameter will be appended as is to the query string in the HTTP authentication request to the authority. This is expected to be a string of segments of the form <c>key=value</c> separated by an ampersand character. The parameter can be null.</param> <returns>URL of the authorize endpoint including the query parameters.</returns> <seealso cref="M:Microsoft.Identity.Client.ConfidentialClientApplication.GetAuthorizationRequestUrl(System.Collections.Generic.IEnumerable{System.String})"/> which is the corresponding V3 API </member> <member name="M:Microsoft.Identity.Client.ConfidentialClientApplication.GetAuthorizationRequestUrlAsync(System.Collections.Generic.IEnumerable{System.String},System.String,System.String,System.String,System.Collections.Generic.IEnumerable{System.String},System.String)"> <summary> [V2 API] Computes the URL of the authorization request letting the user sign-in and consent to the application accessing specific scopes in the user's name. The URL targets the /authorize endpoint of the authority specified as the <paramref name="authority"/> parameter. This override enables you to specify a redirectUri, login hint extra query parameters, extra scope to consent (which are not for the same resource as the <paramref name="scopes"/>), and an authority. </summary> <param name="scopes">Scopes requested to access a protected API (a resource)</param> <param name="redirectUri">Address to return to upon receiving a response from the authority.</param> <param name="loginHint">Identifier of the user. Generally a UPN.</param> <param name="extraQueryParameters">This parameter will be appended as is to the query string in the HTTP authentication request to the authority. This is expected to be a string of segments of the form <c>key=value</c> separated by an ampersand character. The parameter can be null.</param> <param name="extraScopesToConsent">Scopes for additional resources (other than the resource for which <paramref name="scopes"/> are requested), which a developer can request the user to consent to upfront.</param> <param name="authority">Specific authority for which the token is requested. Passing a different value than configured does not change the configured value</param> <returns>URL of the authorize endpoint including the query parameters.</returns> <seealso cref="M:Microsoft.Identity.Client.ConfidentialClientApplication.GetAuthorizationRequestUrl(System.Collections.Generic.IEnumerable{System.String})"/> which is the corresponding V3 API </member> <member name="F:Microsoft.Identity.Client.Core.MsalIdParameter.Product"> <summary> MSAL Flavor: .NET or WinRT </summary> </member> <member name="F:Microsoft.Identity.Client.Core.MsalIdParameter.Version"> <summary> MSAL assembly version </summary> </member> <member name="F:Microsoft.Identity.Client.Core.MsalIdParameter.CpuPlatform"> <summary> CPU platform with x86, x64 or ARM as value </summary> </member> <member name="F:Microsoft.Identity.Client.Core.MsalIdParameter.OS"> <summary> Version of the operating system. This will not be sent on WinRT </summary> </member> <member name="F:Microsoft.Identity.Client.Core.MsalIdParameter.DeviceModel"> <summary> Device model. This will not be sent on .NET </summary> </member> <member name="T:Microsoft.Identity.Client.Core.MsalIdHelper"> <summary> This class adds additional query parameters or headers to the requests sent to STS. This can help us in collecting statistics and potentially on diagnostics. </summary> </member> <member name="P:Microsoft.Identity.Client.Core.ServiceBundle.HttpManager"> <inheritdoc /> </member> <member name="P:Microsoft.Identity.Client.Core.ServiceBundle.TelemetryManager"> <inheritdoc /> </member> <member name="P:Microsoft.Identity.Client.Core.ServiceBundle.WsTrustWebRequestManager"> <inheritdoc /> </member> <member name="P:Microsoft.Identity.Client.Core.ServiceBundle.AuthorityEndpointResolutionManager"> <inheritdoc /> </member> <member name="P:Microsoft.Identity.Client.Core.ServiceBundle.PlatformProxy"> <inheritdoc /> </member> <member name="P:Microsoft.Identity.Client.Core.ServiceBundle.Config"> <inheritdoc /> </member> <member name="P:Microsoft.Identity.Client.Core.ServiceBundle.Mats"> <inheritdoc /> </member> <member name="T:Microsoft.Identity.Client.DeviceCodeResult"> <summary> This object is returned as part of the device code flow and has information intended to be shown to the user about where to navigate to login and what the device code needs to be entered on that device. See https://aka.ms/msal-device-code-flow. </summary> <seealso cref="M:Microsoft.Identity.Client.PublicClientApplication.AcquireTokenWithDeviceCode(System.Collections.Generic.IEnumerable{System.String},System.Func{Microsoft.Identity.Client.DeviceCodeResult,System.Threading.Tasks.Task})"> and the other overrides </seealso> </member> <member name="P:Microsoft.Identity.Client.DeviceCodeResult.UserCode"> <summary> User code returned by the service </summary> </member> <member name="P:Microsoft.Identity.Client.DeviceCodeResult.DeviceCode"> <summary> Device code returned by the service </summary> </member> <member name="P:Microsoft.Identity.Client.DeviceCodeResult.VerificationUrl"> <summary> Verification URL where the user must navigate to authenticate using the device code and credentials. </summary> </member> <member name="P:Microsoft.Identity.Client.DeviceCodeResult.ExpiresOn"> <summary> Time when the device code will expire. </summary> </member> <member name="P:Microsoft.Identity.Client.DeviceCodeResult.Interval"> <summary> Polling interval time to check for completion of authentication flow. </summary> </member> <member name="P:Microsoft.Identity.Client.DeviceCodeResult.Message"> <summary> User friendly text response that can be used for display purpose. </summary> </member> <member name="P:Microsoft.Identity.Client.DeviceCodeResult.ClientId"> <summary> Identifier of the client requesting device code. </summary> </member> <member name="P:Microsoft.Identity.Client.DeviceCodeResult.Scopes"> <summary> List of the scopes that would be held by token. </summary> </member> <member name="T:Microsoft.Identity.Client.Extensibility.AcquireTokenInteractiveParameterBuilderExtensions"> <summary> </summary> </member> <member name="M:Microsoft.Identity.Client.Extensibility.AcquireTokenInteractiveParameterBuilderExtensions.WithCustomWebUi(Microsoft.Identity.Client.AcquireTokenInteractiveParameterBuilder,Microsoft.Identity.Client.Extensibility.ICustomWebUi)"> <summary> Extension method enabling MSAL.NET extenders for public client applications to set a custom web ui that will let the user sign-in with Azure AD, present consent if needed, and get back the authorization code </summary> <param name="builder">Builder for an AcquireTokenInteractive</param> <param name="customWebUi">Customer implementation for the Web UI</param> <returns>the builder to be able to chain .With methods</returns> </member> <member name="T:Microsoft.Identity.Client.Extensibility.ICustomWebUi"> <summary> Interface that an MSAL.NET extender can implement to provide their own Web UI in public client applications to sign-in user and have them consented part of the Authorization code flow. MSAL.NET provides an embedded web view for Windows and Mac, but there are other scenarios not yet supported. This extensibility point enables them to provide such UI in a secure way </summary> </member> <member name="M:Microsoft.Identity.Client.Extensibility.ICustomWebUi.AcquireAuthorizationCodeAsync(System.Uri,System.Uri,System.Threading.CancellationToken)"> <summary> Method called by MSAL.NET to delegate the authentication code Web with the Secure Token Service (STS) </summary> <param name="authorizationUri"> URI computed by MSAL.NET that will let the UI extension navigate to the STS authorization endpoint in order to sign-in the user and have them consent </param> <param name="redirectUri">The redirect Uri that was configured. The auth code will be appended to this redirect uri and the browser will redirect to it. </param> <param name="cancellationToken">The cancellation token to which you should respond to. See https://docs.microsoft.com/en-us/dotnet/standard/parallel-programming/task-cancellation for details. </param> <returns> The URI returned back from the STS authorization endpoint. This URI contains a code=CODE parameters that MSAL.NET will extract and redeem. </returns> <remarks> The <paramref name="authorizationUri">authorizationUri</paramref>"/> is crafted to leverage PKCE in order to protect the token from a man in the middle attack. Only MSAL.NET can redeem the code. In the event of cancellation, the implementer should return OperationCanceledException. </remarks> </member> <member name="T:Microsoft.Identity.Client.Extensibility.MsalExtensionException"> <summary> </summary> </member> <member name="M:Microsoft.Identity.Client.Extensibility.MsalExtensionException.#ctor(System.String)"> <summary> </summary> <param name="message"></param> </member> <member name="M:Microsoft.Identity.Client.Extensibility.MsalExtensionException.#ctor(System.String,System.Exception)"> <summary> </summary> <param name="message"></param> <param name="innerException"></param> </member> <member name="T:Microsoft.Identity.Client.Http.HttpManager"> <remarks> We invoke this class from different threads and they all use the same HttpClient. To prevent race conditions, make sure you do not get / set anything on HttpClient itself, instead rely on HttpRequest objects which are thread specific. In particular, do not change any properties on HttpClient such as BaseAddress, buffer sizes and Timeout. You should also not access DefaultRequestHeaders because the getters are not thread safe (use HttpRequestMessage.Headers instead). </remarks> </member> <member name="M:Microsoft.Identity.Client.Http.HttpManager.SendPostForceResponseAsync(System.Uri,System.Collections.Generic.Dictionary{System.String,System.String},System.Net.Http.StringContent,Microsoft.Identity.Client.Core.ICoreLogger)"> <summary> Performs the POST request just like <see cref="M:Microsoft.Identity.Client.Http.HttpManager.SendPostAsync(System.Uri,System.Collections.Generic.IDictionary{System.String,System.String},System.Net.Http.HttpContent,Microsoft.Identity.Client.Core.ICoreLogger)"/> but does not throw a ServiceUnavailable service exception. Instead, it returns the <see cref="T:Microsoft.Identity.Client.Http.HttpResponse"/> associated with the request. </summary> </member> <member name="M:Microsoft.Identity.Client.Http.RedirectUriHelper.Validate(System.Uri,System.Boolean)"> <summary> Check common redirect uri problems. Optionally check that the redirect uri is not the OAuth2 standard redirect uri urn:ietf:wg:oauth:2.0:oob when using a system browser, because the browser cannot redirect back to the app. </summary> </member> <member name="T:Microsoft.Identity.Client.IAccount"> <summary> The IAccount interface represents information about a single account. The same user can be present in different tenants, that is, a user can have multiple accounts. An <c>IAccount</c> is returned in the <see cref="T:Microsoft.Identity.Client.AuthenticationResult"/>.<see cref="P:Microsoft.Identity.Client.AuthenticationResult.Account"/> property, and can be used as parameters of PublicClientApplication and ConfidentialClientApplication methods acquiring tokens such as <see cref="M:Microsoft.Identity.Client.ClientApplicationBase.AcquireTokenSilent(System.Collections.Generic.IEnumerable{System.String},Microsoft.Identity.Client.IAccount)"/> </summary> </member> <member name="P:Microsoft.Identity.Client.IAccount.Username"> <summary> Gets a string containing the displayable value in UserPrincipalName (UPN) format, e.g. <c>john.doe@contoso.com</c>. This can be null. </summary> <remarks>This property replaces the <c>DisplayableId</c> property of <c>IUser</c> in previous versions of MSAL.NET</remarks> </member> <member name="P:Microsoft.Identity.Client.IAccount.Environment"> <summary> Gets a string containing the identity provider for this account, e.g. <c>login.microsoftonline.com</c>. </summary> <remarks>This property replaces the <c>IdentityProvider</c> property of <c>IUser</c> in previous versions of MSAL.NET except that IdentityProvider was a URL with information about the tenant (in addition to the cloud environment), whereas Environment is only the <see cref="P:System.Uri.Host"/></remarks> </member> <member name="P:Microsoft.Identity.Client.IAccount.HomeAccountId"> <summary> AccountId of the home account for the user. This uniquely identifies the user across AAD tenants. </summary> <remarks>Can be null, for example if this account was migrated to MSAL.NET from ADAL.NET v3's token cache</remarks> </member> <member name="T:Microsoft.Identity.Client.IAuthenticationScheme"> <summary> Used to modify the experience depending on the type of token asked. </summary> </member> <member name="P:Microsoft.Identity.Client.IAuthenticationScheme.AuthorizationHeaderPrefix"> <summary> Prefix for the HTTP header that has the token. E.g. "Bearer" or "POP" </summary> </member> <member name="M:Microsoft.Identity.Client.IAuthenticationScheme.GetTokenRequestParams"> <summary> Extra paramters that are added to the request to the /token endpoint </summary> <returns>Name and values of params</returns> </member> <member name="P:Microsoft.Identity.Client.IAuthenticationScheme.KeyId"> <summary> Key ID of the public / private key pair used by the encryption algorithm, if any. Tokens obtained by authentication schemes that use this are bound to the KeyId, i.e. if a different kid is presented, the access token cannot be used. </summary> </member> <member name="M:Microsoft.Identity.Client.IAuthenticationScheme.FormatAccessToken(Microsoft.Identity.Client.Cache.Items.MsalAccessTokenCacheItem)"> <summary> Creates the access token that goes into an Authorization HTTP header. </summary> </member> <member name="T:Microsoft.Identity.Client.IByRefreshToken"> <summary> </summary> </member> <member name="M:Microsoft.Identity.Client.IByRefreshToken.AcquireTokenByRefreshToken(System.Collections.Generic.IEnumerable{System.String},System.String)"> <summary> Acquires an access token from an existing refresh token and stores it, and the refresh token, in the user token cache, where it will be available for further AcquireTokenSilent calls. This method can be used in migration to MSAL from ADAL v2, and in various integration scenarios where you have a RefreshToken available. See https://aka.ms/msal-net-migration-adal2-msal2. </summary> <param name="scopes">Scope to request from the token endpoint. Setting this to null or empty will request an access token, refresh token and ID token with default scopes</param> <param name="refreshToken">The refresh token from ADAL 2.x</param> <returns>A builder enabling you to add optional parameters before executing the token request</returns> </member> <member name="M:Microsoft.Identity.Client.IByRefreshToken.AcquireTokenByRefreshTokenAsync(System.Collections.Generic.IEnumerable{System.String},System.String)"> <summary> Acquires an access token from an existing refresh token and stores it and the refresh token into the user token cache, where it will be available for further AcquireTokenSilentAsync calls. This method can be used in migration to MSAL from ADAL v2 and in various integration scenarios where you have a RefreshToken available. (see https://aka.ms/msal-net-migration-adal2-msal2) </summary> <param name="scopes">Scope to request from the token endpoint. Setting this to null or empty will request an access token, refresh token and ID token with default scopes</param> <param name="refreshToken">The refresh token from ADAL 2.x</param> </member> <member name="T:Microsoft.Identity.Client.IClientApplicationBase"> <Summary> Abstract class containing common API methods and properties. Both <see cref="T:PublicClientApplication"/> and <see cref="T:ConfidentialClientApplication"/> extend this class. For details see https://aka.ms/msal-net-client-applications. </Summary> <Summary> Interface defining common API methods and properties. Both <see cref="T:PublicClientApplication"/> and <see cref="T:ConfidentialClientApplication"/> extend this class. For details see https://aka.ms/msal-net-client-applications </Summary> </member> <member name="P:Microsoft.Identity.Client.IClientApplicationBase.AppConfig"> <summary> Details on the configuration of the ClientApplication for debugging purposes. </summary> </member> <member name="P:Microsoft.Identity.Client.IClientApplicationBase.UserTokenCache"> <Summary> User token cache. This case holds id tokens, access tokens and refresh tokens for accounts. It's used and updated silently if needed when calling <see cref="M:Microsoft.Identity.Client.IClientApplicationBase.AcquireTokenSilent(System.Collections.Generic.IEnumerable{System.String},Microsoft.Identity.Client.IAccount)"/> It is updated by each AcquireTokenXXX method, with the exception of <c>AcquireTokenForClient</c> which only uses the application cache (see <c>IConfidentialClientApplication</c>). </Summary> <remarks>On .NET Framework and .NET Core you can also customize the token cache serialization. See https://aka.ms/msal-net-token-cache-serialization. This is taken care of by MSAL.NET on other platforms. </remarks> </member> <member name="P:Microsoft.Identity.Client.IClientApplicationBase.Authority"> <Summary> Gets the URL of the authority, or the security token service (STS) from which MSAL.NET will acquire security tokens. The return value of this propety is either the value provided by the developer in the constructor of the application, or otherwise the value of the <see cref="P:Microsoft.Identity.Client.ClientApplicationBase.Authority"/> static member (that is <c>https://login.microsoftonline.com/common/</c>) </Summary> </member> <member name="M:Microsoft.Identity.Client.IClientApplicationBase.GetAccountsAsync"> <summary> Returns all the available <see cref="T:Microsoft.Identity.Client.IAccount">accounts</see> in the user token cache for the application. </summary> </member> <member name="M:Microsoft.Identity.Client.IClientApplicationBase.GetAccountAsync(System.String)"> <summary> Get the <see cref="T:Microsoft.Identity.Client.IAccount"/> by its identifier among the accounts available in the token cache. </summary> <param name="identifier">Account identifier. The value of the identifier will probably have been stored value from the value of the <see cref="P:Microsoft.Identity.Client.AccountId.Identifier"/> property of <see cref="T:Microsoft.Identity.Client.AccountId"/>. You typically get the account id from an <see cref="T:Microsoft.Identity.Client.IAccount"/> by using the <see cref="P:Microsoft.Identity.Client.IAccount.HomeAccountId"/> property></param> </member> <member name="M:Microsoft.Identity.Client.IClientApplicationBase.AcquireTokenSilent(System.Collections.Generic.IEnumerable{System.String},Microsoft.Identity.Client.IAccount)"> <summary> Attempts to acquire an access token for the <paramref name="account"/> from the user token cache, with advanced parameters controlling the network call. See https://aka.ms/msal-net-acquiretokensilent for more details </summary> <param name="scopes">Scopes requested to access a protected API</param> <param name="account">Account for which the token is requested. <see cref="T:Microsoft.Identity.Client.IAccount"/></param> <returns>An <see cref="T:Microsoft.Identity.Client.AcquireTokenSilentParameterBuilder"/> used to build the token request, adding optional parameters</returns> <exception cref="T:Microsoft.Identity.Client.MsalUiRequiredException">will be thrown in the case where an interaction is required with the end user of the application, for instance, if no refresh token was in the cache,a or the user needs to consent, or re-sign-in (for instance if the password expired), or the user needs to perform two factor authentication</exception> <remarks> The access token is considered a match if it contains <b>at least</b> all the requested scopes. This means that an access token with more scopes than requested could be returned as well. If the access token is expired or close to expiration (within a 5 minute window), then the cached refresh token (if available) is used to acquire a new access token by making a silent network call. See also the additional parameters that you can set chain: <see cref="M:Microsoft.Identity.Client.AbstractAcquireTokenParameterBuilder`1.WithAuthority(System.String,System.Boolean)"/> or one of its overrides to request a token for a different authority than the one set at the application construction <see cref="M:Microsoft.Identity.Client.AcquireTokenSilentParameterBuilder.WithForceRefresh(System.Boolean)"/> to bypass the user token cache and force refreshing the token, as well as <see cref="M:Microsoft.Identity.Client.AbstractAcquireTokenParameterBuilder`1.WithExtraQueryParameters(System.Collections.Generic.Dictionary{System.String,System.String})"/> to specify extra query parameters </remarks> </member> <member name="M:Microsoft.Identity.Client.IClientApplicationBase.AcquireTokenSilent(System.Collections.Generic.IEnumerable{System.String},System.String)"> <summary> Attempts to acquire an access token for the <paramref name="loginHint"/> from the user token cache, with advanced parameters controlling the network call. See https://aka.ms/msal-net-acquiretokensilent for more details </summary> <param name="scopes">Scopes requested to access a protected API</param> <param name="loginHint">Typically the username, in UPN format, e.g. johnd@contoso.com </param> <returns>An <see cref="T:Microsoft.Identity.Client.AcquireTokenSilentParameterBuilder"/> used to build the token request, adding optional parameters</returns> <exception cref="T:Microsoft.Identity.Client.MsalUiRequiredException">will be thrown in the case where an interaction is required with the end user of the application, for instance, if no refresh token was in the cache,a or the user needs to consent, or re-sign-in (for instance if the password expired), or the user needs to perform two factor authentication</exception> <remarks> The access token is considered a match if it contains <b>at least</b> all the requested scopes. This means that an access token with more scopes than requested could be returned as well. If the access token is expired or close to expiration (within a 5 minute window), then the cached refresh token (if available) is used to acquire a new access token by making a silent network call. See also the additional parameters that you can set chain: <see cref="M:Microsoft.Identity.Client.AbstractAcquireTokenParameterBuilder`1.WithAuthority(System.String,System.Boolean)"/> or one of its overrides to request a token for a different authority than the one set at the application construction <see cref="M:Microsoft.Identity.Client.AcquireTokenSilentParameterBuilder.WithForceRefresh(System.Boolean)"/> to bypass the user token cache and force refreshing the token, as well as <see cref="M:Microsoft.Identity.Client.AbstractAcquireTokenParameterBuilder`1.WithExtraQueryParameters(System.Collections.Generic.Dictionary{System.String,System.String})"/> to specify extra query parameters </remarks> </member> <member name="M:Microsoft.Identity.Client.IClientApplicationBase.RemoveAsync(Microsoft.Identity.Client.IAccount)"> <summary> Removes all tokens in the cache for the specified account. </summary> <param name="account">instance of the account that needs to be removed</param> </member> <member name="P:Microsoft.Identity.Client.IClientApplicationBase.Users"> <summary> In MSAL 1.x returned an enumeration of <see cref="T:Microsoft.Identity.Client.IUser"/>. From MSAL 2.x, use <see cref="M:Microsoft.Identity.Client.IClientApplicationBase.GetAccountsAsync"/> instead. See https://aka.ms/msal-net-2-released for more details. </summary> </member> <member name="M:Microsoft.Identity.Client.IClientApplicationBase.GetUser(System.String)"> <summary> In MSAL 1.x, return a user from its identifier. From MSAL 2.x, use <see cref="M:Microsoft.Identity.Client.IClientApplicationBase.GetAccountsAsync"/> instead. See https://aka.ms/msal-net-2-released for more details. </summary> <param name="identifier">Identifier of the user to retrieve</param> <returns>the user in the cache with the identifier passed as an argument</returns> </member> <member name="M:Microsoft.Identity.Client.IClientApplicationBase.Remove(Microsoft.Identity.Client.IUser)"> <summary> In MSAL 1.x removed a user from the cache. From MSAL 2.x, use <see cref="M:Microsoft.Identity.Client.IClientApplicationBase.RemoveAsync(Microsoft.Identity.Client.IAccount)"/> instead. See https://aka.ms/msal-net-2-released for more details. </summary> <param name="user">User to remove from the cache</param> </member> <member name="P:Microsoft.Identity.Client.IClientApplicationBase.Component"> <summary> Identifier of the component (libraries/SDK) consuming MSAL.NET. This will allow for disambiguation between MSAL usage by the app vs MSAL usage by component libraries. </summary> </member> <member name="P:Microsoft.Identity.Client.IClientApplicationBase.SliceParameters"> <summary> Sets or Gets a custom query parameters that may be sent to the STS for dogfood testing or debugging. This is a string of segments of the form <c>key=value</c> separated by an ampersand character. Unless requested otherwise, this parameter should not be set by application developers as it may have adverse effect on the application. </summary> </member> <member name="P:Microsoft.Identity.Client.IClientApplicationBase.ValidateAuthority"> <summary> Gets a boolean value telling the application if the authority needs to be verified against a list of known authorities. The default value is <c>true</c>. It should currently be set to <c>false</c> for Azure AD B2C authorities as those are customer specific (a list of known B2C authorities cannot be maintained by MSAL.NET) </summary> </member> <member name="P:Microsoft.Identity.Client.IClientApplicationBase.RedirectUri"> <summary> The redirect URI (also known as Reply URI or Reply URL), is the URI at which Azure AD will contact back the application with the tokens. This redirect URI needs to be registered in the app registration (https://aka.ms/msal-net-register-app) In MSAL.NET, <see cref="T:PublicClientApplication"/> define the following default RedirectUri values: <list type="bullet"> <item><description><c>urn:ietf:wg:oauth:2.0:oob</c> for desktop (.NET Framework and .NET Core) applications</description></item> <item><description><c>msal{ClientId}</c> for Xamarin iOS and Xamarin Android (as this will be used by the system web browser by default on these platforms to call back the application) </description></item> </list> These default URIs could change in the future. In <see cref="T:Microsoft.Identity.Client.ConfidentialClientApplication"/>, this can be the URL of the Web application / Web API. </summary> <remarks>This is especially important when you deploy an application that you have initially tested locally; you then need to add the reply URL of the deployed application in the application registration portal. </remarks> </member> <member name="M:Microsoft.Identity.Client.IClientApplicationBase.AcquireTokenSilentAsync(System.Collections.Generic.IEnumerable{System.String},Microsoft.Identity.Client.IAccount)"> <summary> Attempts to acquire an access token for the <paramref name="account"/> from the user token cache. </summary> <param name="scopes">Scopes requested to access a protected API</param> <param name="account">Account for which the token is requested. <see cref="T:Microsoft.Identity.Client.IAccount"/></param> <returns>An <see cref="T:Microsoft.Identity.Client.AuthenticationResult"/> containing the requested token</returns> <exception cref="T:Microsoft.Identity.Client.MsalUiRequiredException">can be thrown in the case where an interaction is required with the end user of the application, for instance so that the user consents, or re-signs-in (for instance if the password expirred), or performs two factor authentication</exception> <remarks> The access token is considered a match if it contains <b>at least</b> all the requested scopes. This means that an access token with more scopes than requested could be returned as well. If the access token is expired or close to expiration (within 5 minute window), then the cached refresh token (if available) is used to acquire a new access token by making a silent network call. See https://aka.ms/msal-net-acuiretokensilent for more details </remarks> </member> <member name="M:Microsoft.Identity.Client.IClientApplicationBase.AcquireTokenSilentAsync(System.Collections.Generic.IEnumerable{System.String},Microsoft.Identity.Client.IAccount,System.String,System.Boolean)"> <summary> Attempts to acquire and access token for the <paramref name="account"/> from the user token cache, with advanced parameters making a network call. </summary> <param name="scopes">Scopes requested to access a protected API</param> <param name="account">Account for which the token is requested. <see cref="T:Microsoft.Identity.Client.IAccount"/></param> <param name="authority">Specific authority for which the token is requested. Passing a different value than configured in the application constructor narrows down the selection of tenants for which to get a tenant, but does not change the configured value</param> <param name="forceRefresh">If <c>true</c>, the will ignore the access token in the cache and attempt to acquire new access token using the refresh token for the account if this one is available. This can be useful in the case when the application developer wants to make sure that conditional access policies are applies immediately, rather than after the expiration of the access token</param> <returns>An <see cref="T:Microsoft.Identity.Client.AuthenticationResult"/> containing the requested token</returns> <exception cref="T:Microsoft.Identity.Client.MsalUiRequiredException">can be thrown in the case where an interaction is required with the end user of the application, for instance, if no refresh token was in the cache, or the user needs to consents, or re-sign-in (for instance if the password expirred), or performs two factor authentication</exception> <remarks> The access token is considered a match if it contains <b>at least</b> all the requested scopes. This means that an access token with more scopes than requested could be returned as well. If the access token is expired or close to expiration (within 5 minute window), then the cached refresh token (if available) is used to acquire a new access token by making a silent network call. See https://aka.ms/msal-net-acquiretokensilent for more details </remarks> </member> <member name="P:Microsoft.Identity.Client.IClientApplicationBase.ClientId"> <summary> Gets the Client ID (also known as Application ID) of the application as registered in the application registration portal (https://aka.ms/msal-net-register-app) and as passed in the constructor of the application. </summary> </member> <member name="T:Microsoft.Identity.Client.IConfidentialClientApplication"> <summary> Component to be used with confidential client applications like Web Apps/API. </summary> <summary> Component to be used with confidential client applications like Web Apps/API. </summary> </member> <member name="P:Microsoft.Identity.Client.IConfidentialClientApplication.AppTokenCache"> <Summary> Application token cache. This case holds access tokens and refresh tokens for the application. It's maintained and updated silently if needed when calling <see cref="M:Microsoft.Identity.Client.IConfidentialClientApplication.AcquireTokenForClient(System.Collections.Generic.IEnumerable{System.String})"/> </Summary> <remarks>On .NET Framework and .NET Core you can also customize the token cache serialization. See https://aka.ms/msal-net-token-cache-serialization. This is taken care of by MSAL.NET on other platforms. </remarks> </member> <member name="M:Microsoft.Identity.Client.IConfidentialClientApplication.AcquireTokenByAuthorizationCode(System.Collections.Generic.IEnumerable{System.String},System.String)"> <summary> [V3 API] Acquires a security token from the authority configured in the app using the authorization code previously received from the STS. It uses the OAuth 2.0 authorization code flow (See https://aka.ms/msal-net-authorization-code). It's usually used in Web Apps (for instance ASP.NET / ASP.NET Core Web apps) which sign-in users, and can request an authorization code. This method does not lookup the token cache, but stores the result in it, so it can be looked up using other methods such as <see cref="M:Microsoft.Identity.Client.IClientApplicationBase.AcquireTokenSilent(System.Collections.Generic.IEnumerable{System.String},Microsoft.Identity.Client.IAccount)"/>. </summary> <param name="scopes">Scopes requested to access a protected API</param> <param name="authorizationCode">The authorization code received from the service authorization endpoint.</param> <returns>A builder enabling you to add optional parameters before executing the token request</returns> <remarks>You can set optional parameters by chaining the builder with: <see cref="M:Microsoft.Identity.Client.AbstractAcquireTokenParameterBuilder`1.WithAuthority(System.String,System.Boolean)"/>, <see cref="M:Microsoft.Identity.Client.AbstractAcquireTokenParameterBuilder`1.WithExtraQueryParameters(System.Collections.Generic.Dictionary{System.String,System.String})"/>, </remarks> </member> <member name="M:Microsoft.Identity.Client.IConfidentialClientApplication.AcquireTokenForClient(System.Collections.Generic.IEnumerable{System.String})"> <summary> [V3 API] Acquires a token from the authority configured in the app, for the confidential client itself (in the name of no user) using the client credentials flow. See https://aka.ms/msal-net-client-credentials. </summary> <param name="scopes">scopes requested to access a protected API. For this flow (client credentials), the scopes should be of the form "{ResourceIdUri/.default}" for instance <c>https://management.azure.net/.default</c> or, for Microsoft Graph, <c>https://graph.microsoft.com/.default</c> as the requested scopes are really defined statically at application registration in the portal, and cannot be overridden in the application.</param> <returns>A builder enabling you to add optional parameters before executing the token request</returns> <remarks>You can also chain the following optional parameters: <see cref="M:Microsoft.Identity.Client.AcquireTokenForClientParameterBuilder.WithForceRefresh(System.Boolean)"/> <see cref="M:Microsoft.Identity.Client.AbstractAcquireTokenParameterBuilder`1.WithExtraQueryParameters(System.Collections.Generic.Dictionary{System.String,System.String})"/> </remarks> </member> <member name="M:Microsoft.Identity.Client.IConfidentialClientApplication.AcquireTokenOnBehalfOf(System.Collections.Generic.IEnumerable{System.String},Microsoft.Identity.Client.UserAssertion)"> <summary> [V3 API] Acquires an access token for this application (usually a Web API) from the authority configured in the application, in order to access another downstream protected Web API on behalf of a user using the OAuth 2.0 On-Behalf-Of flow. See https://aka.ms/msal-net-on-behalf-of. This confidential client application was itself called with a token which will be provided in the <paramref name="userAssertion">userAssertion</paramref> parameter. </summary> <param name="scopes">Scopes requested to access a protected API</param> <param name="userAssertion">Instance of <see cref="T:Microsoft.Identity.Client.UserAssertion"/> containing credential information about the user on behalf of whom to get a token.</param> <returns>A builder enabling you to add optional parameters before executing the token request</returns> <remarks>You can also chain the following optional parameters: <see cref="M:Microsoft.Identity.Client.AbstractAcquireTokenParameterBuilder`1.WithExtraQueryParameters(System.Collections.Generic.Dictionary{System.String,System.String})"/> </remarks> </member> <member name="M:Microsoft.Identity.Client.IConfidentialClientApplication.GetAuthorizationRequestUrl(System.Collections.Generic.IEnumerable{System.String})"> <summary> [V3 API] Computes the URL of the authorization request letting the user sign-in and consent to the application accessing specific scopes in the user's name. The URL targets the /authorize endpoint of the authority configured in the application. This override enables you to specify a login hint and extra query parameter. </summary> <param name="scopes">Scopes requested to access a protected API</param> <returns>A builder enabling you to add optional parameters before executing the token request to get the URL of the STS authorization endpoint parameterized with the parameters</returns> <remarks>You can also chain the following optional parameters: <see cref="M:Microsoft.Identity.Client.GetAuthorizationRequestUrlParameterBuilder.WithRedirectUri(System.String)"/> <see cref="M:Microsoft.Identity.Client.GetAuthorizationRequestUrlParameterBuilder.WithLoginHint(System.String)"/> <see cref="M:Microsoft.Identity.Client.AbstractAcquireTokenParameterBuilder`1.WithExtraQueryParameters(System.Collections.Generic.Dictionary{System.String,System.String})"/> <see cref="M:Microsoft.Identity.Client.GetAuthorizationRequestUrlParameterBuilder.WithExtraScopesToConsent(System.Collections.Generic.IEnumerable{System.String})"/> </remarks> </member> <member name="M:Microsoft.Identity.Client.IConfidentialClientApplication.AcquireTokenOnBehalfOfAsync(System.Collections.Generic.IEnumerable{System.String},Microsoft.Identity.Client.UserAssertion)"> <summary> [V3 API] Acquires token using On-Behalf-Of flow. (See https://aka.ms/msal-net-on-behalf-of) </summary> <param name="scopes">Array of scopes requested for resource</param> <param name="userAssertion">Instance of UserAssertion containing user's token.</param> <returns>Authentication result containing token of the user for the requested scopes</returns> </member> <member name="M:Microsoft.Identity.Client.IConfidentialClientApplication.AcquireTokenOnBehalfOfAsync(System.Collections.Generic.IEnumerable{System.String},Microsoft.Identity.Client.UserAssertion,System.String)"> <summary> [V3 API] Acquires token using On-Behalf-Of flow. (See https://aka.ms/msal-net-on-behalf-of) </summary> <param name="scopes">Array of scopes requested for resource</param> <param name="userAssertion">Instance of UserAssertion containing user's token.</param> <param name="authority">Specific authority for which the token is requested. Passing a different value than configured does not change the configured value</param> <returns>Authentication result containing token of the user for the requested scopes</returns> </member> <member name="M:Microsoft.Identity.Client.IConfidentialClientApplication.AcquireTokenByAuthorizationCodeAsync(System.String,System.Collections.Generic.IEnumerable{System.String})"> <summary> [V2 API] Acquires security token from the authority using authorization code previously received. This method does not lookup token cache, but stores the result in it, so it can be looked up using other methods such as <see cref="M:Microsoft.Identity.Client.IClientApplicationBase.AcquireTokenSilentAsync(System.Collections.Generic.IEnumerable{System.String},Microsoft.Identity.Client.IAccount)"/>. </summary> <param name="authorizationCode">The authorization code received from service authorization endpoint.</param> <param name="scopes">Array of scopes requested for resource</param> <returns>Authentication result containing token of the user for the requested scopes</returns> </member> <member name="M:Microsoft.Identity.Client.IConfidentialClientApplication.AcquireTokenForClientAsync(System.Collections.Generic.IEnumerable{System.String})"> <summary> [V2 API] Acquires token from the service for the confidential client. This method attempts to look up valid access token in the cache. </summary> <param name="scopes">Array of scopes requested for resource</param> <returns>Authentication result containing application token for the requested scopes</returns> </member> <member name="M:Microsoft.Identity.Client.IConfidentialClientApplication.AcquireTokenForClientAsync(System.Collections.Generic.IEnumerable{System.String},System.Boolean)"> <summary> [V2 API] Acquires token from the service for the confidential client. This method attempts to look up valid access token in the cache. </summary> <param name="scopes">Array of scopes requested for resource</param> <param name="forceRefresh">If TRUE, API will ignore the access token in the cache and attempt to acquire new access token using client credentials</param> <returns>Authentication result containing application token for the requested scopes</returns> </member> <member name="M:Microsoft.Identity.Client.IConfidentialClientApplication.GetAuthorizationRequestUrlAsync(System.Collections.Generic.IEnumerable{System.String},System.String,System.String)"> <summary> [V2 API] URL of the authorize endpoint including the query parameters. </summary> <param name="scopes">Array of scopes requested for resource</param> <param name="loginHint">Identifier of the user. Generally a UPN.</param> <param name="extraQueryParameters">This parameter will be appended as is to the query string in the HTTP authentication request to the authority. The parameter can be null.</param> <returns>URL of the authorize endpoint including the query parameters.</returns> </member> <member name="M:Microsoft.Identity.Client.IConfidentialClientApplication.GetAuthorizationRequestUrlAsync(System.Collections.Generic.IEnumerable{System.String},System.String,System.String,System.String,System.Collections.Generic.IEnumerable{System.String},System.String)"> <summary> [V2 API] Gets URL of the authorize endpoint including the query parameters. </summary> <param name="scopes">Array of scopes requested for resource</param> <param name="redirectUri">Address to return to upon receiving a response from the authority.</param> <param name="loginHint">Identifier of the user. Generally a UPN.</param> <param name="extraQueryParameters">This parameter will be appended as is to the query string in the HTTP authentication request to the authority. The parameter can be null.</param> <param name="extraScopesToConsent">Array of scopes for which a developer can request consent upfront.</param> <param name="authority">Specific authority for which the token is requested. Passing a different value than configured does not change the configured value</param> <returns>URL of the authorize endpoint including the query parameters.</returns> </member> <member name="M:Microsoft.Identity.Client.Instance.AadOpenIdConfigurationEndpointManager.ValidateAuthorityAndGetOpenIdDiscoveryEndpointAsync(Microsoft.Identity.Client.AuthorityInfo,System.String,Microsoft.Identity.Client.Core.RequestContext)"> <inheritdoc /> </member> <member name="T:Microsoft.Identity.Client.Instance.Authority"> <summary> </summary> </member> <member name="M:Microsoft.Identity.Client.Instance.Authority.CreateAuthorityForRequest(Microsoft.Identity.Client.AuthorityInfo,Microsoft.Identity.Client.AuthorityInfo,System.String)"> <summary> Figures out the authority based on the authority from the config and the authority from the request, and optionally the homeAccountTenantId, which has an impact on AcquireTokenSilent The algorithm is: 1. If there is no request authority (i.e. no authority override), use the config authority. 1.1. For AAD, if the config authority is "common" etc, try to use the tenanted version with the home account tenant ID 2. If there is a request authority, try to use it. 2.1. If the request authority is not "common", then use it 2.2 If the request authority is "common", ignore it, and use 1.1 </summary> </member> <member name="M:Microsoft.Identity.Client.Instance.Authority.GetTenantedAuthority(System.String)"> <summary> Gets a tenanted authority if the current authority is tenantless. Returns the original authority on B2C and ADFS </summary> </member> <member name="M:Microsoft.Identity.Client.Instance.B2COpenIdConfigurationEndpointManager.ValidateAuthorityAndGetOpenIdDiscoveryEndpointAsync(Microsoft.Identity.Client.AuthorityInfo,System.String,Microsoft.Identity.Client.Core.RequestContext)"> <inheritdoc /> </member> <member name="T:Microsoft.Identity.Client.Instance.Discovery.IInstanceDiscoveryManager"> <summary> Provides instance metadata across all authority types. Deals with metadata caching. </summary> </member> <member name="T:Microsoft.Identity.Client.Instance.Discovery.InstanceDiscoveryManager"> <summary> Priority order of metadata providers: If user provided metadata via <see cref="M:Microsoft.Identity.Client.AbstractApplicationBuilder`1.WithInstanceDicoveryMetadata(System.String)"/> use it exclusively. Otherwise: 1. Static cache (this is populated from the network) 2. Well-known cache if all environments present in the token cache are known (this is hardcoded into msal) 3. Cache stored in token cache (Not currently implemented) 5. AAD discovery endpoint 6. If going to the network fails with an error different than "invalid_instance" (i.e.authority validation failed), use the well-known instance metadata entry for the given authority 7. On failure, use the authority itself(i.e.preferred cache = preferred network = aliases = configured_authority) Spec: https://identitydivision.visualstudio.com/DevEx/_git/AuthLibrariesApiReview?path=%2FInstance%20Discovery%20Caching%2Fdesktop_web_caching.md </summary> </member> <member name="M:Microsoft.Identity.Client.Instance.IOpenIdConfigurationEndpointManager.ValidateAuthorityAndGetOpenIdDiscoveryEndpointAsync(Microsoft.Identity.Client.AuthorityInfo,System.String,Microsoft.Identity.Client.Core.RequestContext)"> <summary> Validates the authority if required and returns the OpenId discovery endpoint for the given tenant. This is specific to each authority type. </summary> </member> <member name="T:Microsoft.Identity.Client.Internal.Broker.NullBroker"> <summary> For platforms that do not support a broker (net desktop, net core, UWP, netstandard) </summary> </member> <member name="T:Microsoft.Identity.Client.Internal.ClientCredentialWrapper"> <summary> Meant to be used in confidential client applications, an instance of <c>ClientCredential</c> is passed to the constructors of (<see cref="T:Microsoft.Identity.Client.ConfidentialClientApplication"/>) as credentials proving that the application (the client) is what it claims it is. These credentials can be either a client secret (an application password) or a certificate. This class has one constructor for each case. These credentials are added in the application registration portal (in the secret section). </summary> </member> <member name="M:Microsoft.Identity.Client.Internal.Requests.ClientCredentialHelper.ValidateClientAssertion(Microsoft.Identity.Client.Internal.ClientCredentialWrapper,System.String,System.Boolean)"> <summary> Determines whether or not the cached client assertion can be used again for the next authentication request by checking it's values against incoming request parameters. </summary> <returns>Returns true if the previously cached client assertion is valid</returns> </member> <member name="T:Microsoft.Identity.Client.Internal.Requests.IntegratedWindowsAuthRequest"> <summary> Handles requests that are non-interactive. Currently MSAL supports Integrated Windows Auth (IWA). </summary> </member> <member name="T:Microsoft.Identity.Client.Internal.Requests.RequestBase"> <summary> Base class for all flows. Use by implementing <see cref="M:Microsoft.Identity.Client.Internal.Requests.RequestBase.ExecuteAsync(System.Threading.CancellationToken)"/> and optionally calling protected helper methods such as SendTokenRequestAsync, which know how to use all params when making the request. </summary> </member> <member name="T:Microsoft.Identity.Client.Internal.Requests.UsernamePasswordRequest"> <summary> Handles requests that are non-interactive. Currently MSAL supports Integrated Windows Auth. </summary> </member> <member name="T:Microsoft.Identity.Client.IPublicClientApplication"> <summary> Interface to be used with desktop or mobile applications (Desktop / UWP / Xamarin.iOS / Xamarin.Android). public client applications are not trusted to safely keep application secrets, and therefore they only access Web APIs in the name of the user only. For details see https://aka.ms/msal-net-client-applications. </summary> <Summary> Interface defining common API methods and properties. For details see https://aka.ms/msal-net-client-applications </Summary> </member> <member name="P:Microsoft.Identity.Client.IPublicClientApplication.IsSystemWebViewAvailable"> <summary> Tells if the application can use the system web browser, therefore getting single-sign-on with web applications. By default, MSAL will try to use a system browser on the mobile platforms, if it is available. See https://aka.ms/msal-net-uses-web-browser. </summary> </member> <member name="M:Microsoft.Identity.Client.IPublicClientApplication.AcquireTokenInteractive(System.Collections.Generic.IEnumerable{System.String})"> <summary> Interactive request to acquire a token for the specified scopes. The interactive window will be parented to the specified window. The user will be required to select an account </summary> <param name="scopes">Scopes requested to access a protected API</param> <returns>A builder enabling you to add optional parameters before executing the token request</returns> <remarks>The user will be signed-in interactively if needed, and will consent to scopes and do multi-factor authentication if such a policy was enabled in the Azure AD tenant. You can also pass optional parameters by calling: <see cref="M:Microsoft.Identity.Client.AcquireTokenInteractiveParameterBuilder.WithPrompt(Microsoft.Identity.Client.Prompt)"/> to specify the user experience when signing-in, <see cref="M:Microsoft.Identity.Client.AcquireTokenInteractiveParameterBuilder.WithUseEmbeddedWebView(System.Boolean)"/> to specify if you want to use the embedded web browser or the system default browser, <see cref="M:Microsoft.Identity.Client.AcquireTokenInteractiveParameterBuilder.WithSystemWebViewOptions(Microsoft.Identity.Client.SystemWebViewOptions)"/> to configure the user experience when using the Default browser, <see cref="M:Microsoft.Identity.Client.AcquireTokenInteractiveParameterBuilder.WithAccount(Microsoft.Identity.Client.IAccount)"/> or <see cref="M:Microsoft.Identity.Client.AcquireTokenInteractiveParameterBuilder.WithLoginHint(System.String)"/> to prevent the select account dialog from appearing in the case you want to sign-in a specific account, <see cref="M:Microsoft.Identity.Client.AcquireTokenInteractiveParameterBuilder.WithExtraScopesToConsent(System.Collections.Generic.IEnumerable{System.String})"/> if you want to let the user pre-consent to additional scopes (which won't be returned in the access token), <see cref="M:Microsoft.Identity.Client.AbstractAcquireTokenParameterBuilder`1.WithExtraQueryParameters(System.Collections.Generic.Dictionary{System.String,System.String})"/> to pass additional query parameters to the STS, and one of the overrides of <see cref="M:Microsoft.Identity.Client.AbstractAcquireTokenParameterBuilder`1.WithAuthority(System.String,System.Boolean)"/> in order to override the default authority set at the application construction. Note that the overriding authority needs to be part of the known authorities added to the application construction. </remarks> </member> <member name="M:Microsoft.Identity.Client.IPublicClientApplication.AcquireTokenWithDeviceCode(System.Collections.Generic.IEnumerable{System.String},System.Func{Microsoft.Identity.Client.DeviceCodeResult,System.Threading.Tasks.Task})"> <summary> Acquires a security token on a device without a Web browser, by letting the user authenticate on another device. This is done in two steps: <list type="bullet"> <item><description>The method first acquires a device code from the authority and returns it to the caller via the <paramref name="deviceCodeResultCallback"/>. This callback takes care of interacting with the user to direct them to authenticate (to a specific URL, with a code)</description></item> <item><description>The method then proceeds to poll for the security token which is granted upon successful login by the user based on the device code information</description></item> </list> See https://aka.ms/msal-device-code-flow. </summary> <param name="scopes">Scopes requested to access a protected API</param> <param name="deviceCodeResultCallback">Callback containing information to show the user about how to authenticate and enter the device code.</param> <returns>A builder enabling you to add optional parameters before executing the token request</returns> <remarks> You can also pass optional parameters by calling: <see cref="M:Microsoft.Identity.Client.AbstractAcquireTokenParameterBuilder`1.WithExtraQueryParameters(System.Collections.Generic.Dictionary{System.String,System.String})"/> to pass additional query parameters to the STS, and one of the overrides of <see cref="M:Microsoft.Identity.Client.AbstractAcquireTokenParameterBuilder`1.WithAuthority(System.String,System.Boolean)"/> in order to override the default authority set at the application construction. Note that the overriding authority needs to be part of the known authorities added to the application construction. </remarks> </member> <member name="M:Microsoft.Identity.Client.IPublicClientApplication.AcquireTokenByIntegratedWindowsAuth(System.Collections.Generic.IEnumerable{System.String})"> <summary> Non-interactive request to acquire a security token for the signed-in user in Windows, via Integrated Windows Authentication. See https://aka.ms/msal-net-iwa. The account used in this overrides is pulled from the operating system as the current user principal name. </summary> <param name="scopes">Scopes requested to access a protected API</param> <returns>A builder enabling you to add optional parameters before executing the token request</returns> <remarks> You can also pass optional parameters by calling: <see cref="M:Microsoft.Identity.Client.AcquireTokenByIntegratedWindowsAuthParameterBuilder.WithUsername(System.String)"/> to pass the identifier of the user account for which to acquire a token with Integrated Windows authentication. This is generally in UserPrincipalName (UPN) format, e.g. john.doe@contoso.com. This is normally not needed, but some Windows administrators set policies preventing applications from looking-up the signed-in user in Windows, and in that case the username needs to be passed. You can also chain with <see cref="M:Microsoft.Identity.Client.AbstractAcquireTokenParameterBuilder`1.WithExtraQueryParameters(System.Collections.Generic.Dictionary{System.String,System.String})"/> to pass additional query parameters to the STS, and one of the overrides of <see cref="M:Microsoft.Identity.Client.AbstractAcquireTokenParameterBuilder`1.WithAuthority(System.String,System.Boolean)"/> in order to override the default authority set at the application construction. Note that the overriding authority needs to be part of the known authorities added to the application construction. </remarks> </member> <member name="M:Microsoft.Identity.Client.IPublicClientApplication.AcquireTokenByUsernamePassword(System.Collections.Generic.IEnumerable{System.String},System.String,System.Security.SecureString)"> <summary> Non-interactive request to acquire a security token from the authority, via Username/Password Authentication. Available only on .net desktop and .net core. See https://aka.ms/msal-net-up for details. </summary> <param name="scopes">Scopes requested to access a protected API</param> <param name="username">Identifier of the user application requests token on behalf. Generally in UserPrincipalName (UPN) format, e.g. <c>john.doe@contoso.com</c></param> <param name="password">User password as a secure string.</param> <returns>A builder enabling you to add optional parameters before executing the token request</returns> <remarks>You can also pass optional parameters by chaining the builder with: <see cref="M:Microsoft.Identity.Client.AbstractAcquireTokenParameterBuilder`1.WithExtraQueryParameters(System.Collections.Generic.Dictionary{System.String,System.String})"/> to pass additional query parameters to the STS, and one of the overrides of <see cref="M:Microsoft.Identity.Client.AbstractAcquireTokenParameterBuilder`1.WithAuthority(System.String,System.Boolean)"/> in order to override the default authority set at the application construction. Note that the overriding authority needs to be part of the known authorities added to the application construction. </remarks> </member> <member name="M:Microsoft.Identity.Client.IPublicClientApplication.AcquireTokenAsync(System.Collections.Generic.IEnumerable{System.String})"> <summary> Interactive request to acquire token for the specified scopes. The user is required to select an account </summary> <param name="scopes">Scopes requested to access a protected API</param> <returns>Authentication result containing a token for the requested scopes and account</returns> <remarks>The user will be signed-in interactively if needed, and will consent to scopes and do multi-factor authentication if such a policy was enabled in the Azure AD tenant.</remarks> </member> <member name="M:Microsoft.Identity.Client.IPublicClientApplication.AcquireTokenAsync(System.Collections.Generic.IEnumerable{System.String},System.String)"> <summary> Interactive request to acquire token for the specified scopes. The user will need to sign-in but an account will be proposed based on the <paramref name="loginHint"/> </summary> <param name="scopes">Scopes requested to access a protected API</param> <param name="loginHint">Identifier of the user. Generally in UserPrincipalName (UPN) format, e.g. <c>john.doe@contoso.com</c></param> <returns>Authentication result containing a token for the requested scopes and account</returns> </member> <member name="M:Microsoft.Identity.Client.IPublicClientApplication.AcquireTokenAsync(System.Collections.Generic.IEnumerable{System.String},Microsoft.Identity.Client.IAccount)"> <summary> Interactive request to acquire token for the specified scopes. The user will need to sign-in but an account will be proposed based on the provided <paramref name="account"/> </summary> <param name="scopes">Scopes requested to access a protected API</param> <param name="account">Account to use for the interactive token acquisition. See <see cref="T:Microsoft.Identity.Client.IAccount"/> for ways to get an account</param> <returns>Authentication result containing a token for the requested scopes and account</returns> </member> <member name="M:Microsoft.Identity.Client.IPublicClientApplication.AcquireTokenAsync(System.Collections.Generic.IEnumerable{System.String},System.String,Microsoft.Identity.Client.Prompt,System.String)"> <summary> Interactive request to acquire token for a login with control of the UI behavior and possiblity of passing extra query parameters like additional claims </summary> <param name="scopes">Scopes requested to access a protected API</param> <param name="loginHint">Identifier of the user. Generally in UserPrincipalName (UPN) format, e.g. <c>john.doe@contoso.com</c></param> <param name="prompt">Designed interactive experience for the user.</param> <param name="extraQueryParameters">This parameter will be appended as is to the query string in the HTTP authentication request to the authority. This is expected to be a string of segments of the form <c>key=value</c> separated by an ampersand character. The parameter can be null.</param> <returns>Authentication result containing a token for the requested scopes and account</returns> </member> <member name="M:Microsoft.Identity.Client.IPublicClientApplication.AcquireTokenAsync(System.Collections.Generic.IEnumerable{System.String},Microsoft.Identity.Client.IAccount,Microsoft.Identity.Client.Prompt,System.String)"> <summary> Interactive request to acquire token for an account with control of the UI behavior and possiblity of passing extra query parameters like additional claims </summary> <param name="scopes">Scopes requested to access a protected API</param> <param name="account">Account to use for the interactive token acquisition. See <see cref="T:Microsoft.Identity.Client.IAccount"/> for ways to get an account</param> <param name="prompt">Designed interactive experience for the user.</param> <param name="extraQueryParameters">This parameter will be appended as is to the query string in the HTTP authentication request to the authority. This is expected to be a string of segments of the form <c>key=value</c> separated by an ampersand character. The parameter can be null.</param> <returns>Authentication result containing a token for the requested scopes and account</returns> </member> <member name="M:Microsoft.Identity.Client.IPublicClientApplication.AcquireTokenAsync(System.Collections.Generic.IEnumerable{System.String},System.String,Microsoft.Identity.Client.Prompt,System.String,System.Collections.Generic.IEnumerable{System.String},System.String)"> <summary> Interactive request to acquire token for a given login, with the possibility of controlling the user experience, passing extra query parameters, providing extra scopes that the user can pre-consent to, and overriding the authority pre-configured in the application </summary> <param name="scopes">scopes requested to access a protected API</param> <param name="loginHint">Identifier of the user. Generally in UserPrincipalName (UPN) format, e.g. <c>john.doe@contoso.com</c></param> <param name="prompt">Designed interactive experience for the user.</param> <param name="extraQueryParameters">This parameter will be appended as is to the query string in the HTTP authentication request to the authority. This is expected to be a string of segments of the form <c>key=value</c> separated by an ampersand character. The parameter can be null.</param> <param name="extraScopesToConsent">scopes that you can request the end user to consent upfront, in addition to the scopes for the protected Web API for which you want to acquire a security token.</param> <param name="authority">Specific authority for which the token is requested. Passing a different value than configured does not change the configured value</param> <returns>Authentication result containing a token for the requested scopes and account</returns> </member> <member name="M:Microsoft.Identity.Client.IPublicClientApplication.AcquireTokenAsync(System.Collections.Generic.IEnumerable{System.String},Microsoft.Identity.Client.IAccount,Microsoft.Identity.Client.Prompt,System.String,System.Collections.Generic.IEnumerable{System.String},System.String)"> <summary> Interactive request to acquire token for a given account, with the possibility of controlling the user experience, passing extra query parameters, providing extra scopes that the user can pre-consent to, and overriding the authority pre-configured in the application </summary> <param name="scopes">Scopes requested to access a protected API</param> <param name="account">Account to use for the interactive token acquisition. See <see cref="T:Microsoft.Identity.Client.IAccount"/> for ways to get an account</param> <param name="prompt">Designed interactive experience for the user.</param> <param name="extraQueryParameters">This parameter will be appended as is to the query string in the HTTP authentication request to the authority. This is expected to be a string of segments of the form <c>key=value</c> separated by an ampersand character. The parameter can be null.</param> <param name="extraScopesToConsent">Scopes that you can request the end user to consent upfront, in addition to the scopes for the protected Web API for which you want to acquire a security token.</param> <param name="authority">Specific authority for which the token is requested. Passing a different value than configured does not change the configured value</param> <returns>Authentication result containing a token for the requested scopes and account</returns> </member> <member name="M:Microsoft.Identity.Client.IPublicClientApplication.AcquireTokenAsync(System.Collections.Generic.IEnumerable{System.String},Microsoft.Identity.Client.UIParent)"> <summary> Interactive request to acquire token for the specified scopes. The interactive window will be parented to the specified window. The user will be required to select an account </summary> <param name="scopes">Scopes requested to access a protected API</param> <param name="parent">Object containing a reference to the parent window/activity. REQUIRED for Xamarin.Android only.</param> <returns>Authentication result containing a token for the requested scopes and account</returns> <remarks>The user will be signed-in interactively if needed, and will consent to scopes and do multi-factor authentication if such a policy was enabled in the Azure AD tenant.</remarks> </member> <member name="M:Microsoft.Identity.Client.IPublicClientApplication.AcquireTokenAsync(System.Collections.Generic.IEnumerable{System.String},System.String,Microsoft.Identity.Client.UIParent)"> <summary> Interactive request to acquire token for the specified scopes. The interactive window will be parented to the specified window. . The user will need to sign-in but an account will be proposed based on the <paramref name="loginHint"/> </summary> <param name="scopes">Scopes requested to access a protected API</param> <param name="loginHint">Identifier of the user. Generally in UserPrincipalName (UPN) format, e.g. <c>john.doe@contoso.com</c></param> <param name="parent">Object containing a reference to the parent window/activity. REQUIRED for Xamarin.Android only.</param> <returns>Authentication result containing a token for the requested scopes and login</returns> </member> <member name="M:Microsoft.Identity.Client.IPublicClientApplication.AcquireTokenAsync(System.Collections.Generic.IEnumerable{System.String},Microsoft.Identity.Client.IAccount,Microsoft.Identity.Client.UIParent)"> <summary> Interactive request to acquire token for the specified scopes. The user will need to sign-in but an account will be proposed based on the provided <paramref name="account"/> </summary> <param name="scopes">Scopes requested to access a protected API</param> <param name="account">Account to use for the interactive token acquisition. See <see cref="T:Microsoft.Identity.Client.IAccount"/> for ways to get an account</param> <param name="parent">Object containing a reference to the parent window/activity. REQUIRED for Xamarin.Android only.</param> <returns>Authentication result containing a token for the requested scopes and account</returns> </member> <member name="M:Microsoft.Identity.Client.IPublicClientApplication.AcquireTokenAsync(System.Collections.Generic.IEnumerable{System.String},System.String,Microsoft.Identity.Client.Prompt,System.String,Microsoft.Identity.Client.UIParent)"> <summary> Interactive request to acquire token for a login with control of the UI behavior and possiblity of passing extra query parameters like additional claims </summary> <param name="scopes">Scopes requested to access a protected API</param> <param name="loginHint">Identifier of the user. Generally in UserPrincipalName (UPN) format, e.g. <c>john.doe@contoso.com</c></param> <param name="prompt">Designed interactive experience for the user.</param> <param name="extraQueryParameters">This parameter will be appended as is to the query string in the HTTP authentication request to the authority. This is expected to be a string of segments of the form <c>key=value</c> separated by an ampersand character. The parameter can be null.</param> <param name="parent">Object containing a reference to the parent window/activity. REQUIRED for Xamarin.Android only.</param> <returns>Authentication result containing a token for the requested scopes and account</returns> </member> <member name="M:Microsoft.Identity.Client.IPublicClientApplication.AcquireTokenAsync(System.Collections.Generic.IEnumerable{System.String},Microsoft.Identity.Client.IAccount,Microsoft.Identity.Client.Prompt,System.String,Microsoft.Identity.Client.UIParent)"> <summary> Interactive request to acquire token for an account with control of the UI behavior and possiblity of passing extra query parameters like additional claims </summary> <param name="scopes">Scopes requested to access a protected API</param> <param name="account">Account to use for the interactive token acquisition. See <see cref="T:Microsoft.Identity.Client.IAccount"/> for ways to get an account</param> <param name="prompt">Designed interactive experience for the user.</param> <param name="extraQueryParameters">This parameter will be appended as is to the query string in the HTTP authentication request to the authority. This is expected to be a string of segments of the form <c>key=value</c> separated by an ampersand character. The parameter can be null.</param> <param name="parent">Object containing a reference to the parent window/activity. REQUIRED for Xamarin.Android only.</param> <returns>Authentication result containing a token for the requested scopes and account</returns> </member> <member name="M:Microsoft.Identity.Client.IPublicClientApplication.AcquireTokenAsync(System.Collections.Generic.IEnumerable{System.String},System.String,Microsoft.Identity.Client.Prompt,System.String,System.Collections.Generic.IEnumerable{System.String},System.String,Microsoft.Identity.Client.UIParent)"> <summary> Interactive request to acquire token for a given login, with the possibility of controlling the user experience, passing extra query parameters, providing extra scopes that the user can pre-consent to, and overriding the authority pre-configured in the application </summary> <param name="scopes">Scopes requested to access a protected API</param> <param name="loginHint">Identifier of the user. Generally in UserPrincipalName (UPN) format, e.g. <c>john.doe@contoso.com</c></param> <param name="prompt">Designed interactive experience for the user.</param> <param name="extraQueryParameters">This parameter will be appended as is to the query string in the HTTP authentication request to the authority. This is expected to be a string of segments of the form <c>key=value</c> separated by an ampersand character. The parameter can be null.</param> <param name="extraScopesToConsent">Scopes that you can request the end user to consent upfront, in addition to the scopes for the protected Web API for which you want to acquire a security token.</param> <param name="authority">Specific authority for which the token is requested. Passing a different value than configured does not change the configured value</param> <param name="parent">Object containing a reference to the parent window/activity. REQUIRED for Xamarin.Android only.</param> <returns>Authentication result containing a token for the requested scopes and account</returns> </member> <member name="M:Microsoft.Identity.Client.IPublicClientApplication.AcquireTokenAsync(System.Collections.Generic.IEnumerable{System.String},Microsoft.Identity.Client.IAccount,Microsoft.Identity.Client.Prompt,System.String,System.Collections.Generic.IEnumerable{System.String},System.String,Microsoft.Identity.Client.UIParent)"> <summary> Interactive request to acquire token for a given account, with the possibility of controlling the user experience, passing extra query parameters, providing extra scopes that the user can pre-consent to, and overriding the authority pre-configured in the application </summary> <param name="scopes">Scopes requested to access a protected API</param> <param name="account">Account to use for the interactive token acquisition. See <see cref="T:Microsoft.Identity.Client.IAccount"/> for ways to get an account</param> <param name="prompt">Designed interactive experience for the user.</param> <param name="extraQueryParameters">This parameter will be appended as is to the query string in the HTTP authentication request to the authority. This is expected to be a string of segments of the form <c>key=value</c> separated by an ampersand character. The parameter can be null.</param> <param name="extraScopesToConsent">Scopes that you can request the end user to consent upfront, in addition to the scopes for the protected Web API for which you want to acquire a security token.</param> <param name="authority">Specific authority for which the token is requested. Passing a different value than configured does not change the configured value</param> <param name="parent">Object containing a reference to the parent window/activity. REQUIRED for Xamarin.Android only.</param> <returns>Authentication result containing a token for the requested scopes and account</returns> </member> <member name="M:Microsoft.Identity.Client.IPublicClientApplication.AcquireTokenByUsernamePasswordAsync(System.Collections.Generic.IEnumerable{System.String},System.String,System.Security.SecureString)"> <summary> Non-interactive request to acquire a security token from the authority, via Username/Password Authentication. See https://aka.ms/msal-net-up. </summary> <param name="scopes">Scopes requested to access a protected API</param> <param name="username">Identifier of the user application requests token on behalf. Generally in UserPrincipalName (UPN) format, e.g. john.doe@contoso.com</param> <param name="securePassword">User password.</param> <returns>Authentication result containing a token for the requested scopes and account</returns> </member> <member name="M:Microsoft.Identity.Client.IPublicClientApplication.AcquireTokenWithDeviceCodeAsync(System.Collections.Generic.IEnumerable{System.String},System.Func{Microsoft.Identity.Client.DeviceCodeResult,System.Threading.Tasks.Task})"> <summary> Acquires a security token on a device without a Web browser, by letting the user authenticate on another device. This is done in two steps: <list type="bullet"> <item><description>the method first acquires a device code from the authority and returns it to the caller via the <paramref name="deviceCodeResultCallback"/>. This callback takes care of interacting with the user to direct them to authenticate (to a specific URL, with a code)</description></item> <item><description>The method then proceeds to poll for the security token which is granted upon successful login by the user based on the device code information</description></item> </list> See https://aka.ms/msal-device-code-flow. </summary> <param name="scopes">Scopes requested to access a protected API</param> <param name="deviceCodeResultCallback">Callback containing information to show the user about how to authenticate and enter the device code.</param> <returns>Authentication result containing a token for the requested scopes and for the user who has authenticated on another device with the code</returns> </member> <member name="M:Microsoft.Identity.Client.IPublicClientApplication.AcquireTokenWithDeviceCodeAsync(System.Collections.Generic.IEnumerable{System.String},System.String,System.Func{Microsoft.Identity.Client.DeviceCodeResult,System.Threading.Tasks.Task})"> <summary> Acquires a security token on a device without a Web browser, by letting the user authenticate on another device, with possiblity of passing extra parameters. This is done in two steps: <list type="bullet"> <item><description>the method first acquires a device code from the authority and returns it to the caller via the <paramref name="deviceCodeResultCallback"/>. This callback takes care of interacting with the user to direct them to authenticate (to a specific URL, with a code)</description></item> <item><description>The method then proceeds to poll for the security token which is granted upon successful login by the user based on the device code information</description></item> </list> See https://aka.ms/msal-device-code-flow. </summary> <param name="scopes">Scopes requested to access a protected API</param> <param name="extraQueryParameters">This parameter will be appended as is to the query string in the HTTP authentication request to the authority. This is expected to be a string of segments of the form <c>key=value</c> separated by an ampersand character. The parameter can be null.</param> <param name="deviceCodeResultCallback">Callback containing information to show the user about how to authenticate and enter the device code.</param> <returns>Authentication result containing a token for the requested scopes and for the user who has authenticated on another device with the code</returns> </member> <member name="M:Microsoft.Identity.Client.IPublicClientApplication.AcquireTokenWithDeviceCodeAsync(System.Collections.Generic.IEnumerable{System.String},System.Func{Microsoft.Identity.Client.DeviceCodeResult,System.Threading.Tasks.Task},System.Threading.CancellationToken)"> <summary> Acquires a security token on a device without a Web browser, by letting the user authenticate on another device, with possiblity of cancelling the token acquisition before it times out. This is done in two steps: <list type="bullet"> <item><description>the method first acquires a device code from the authority and returns it to the caller via the <paramref name="deviceCodeResultCallback"/>. This callback takes care of interacting with the user to direct them to authenticate (to a specific URL, with a code)</description></item> <item><description>The method then proceeds to poll for the security token which is granted upon successful login by the user based on the device code information. This step is cancelable</description></item> </list> See https://aka.ms/msal-device-code-flow. </summary> <param name="scopes">Scopes requested to access a protected API</param> <param name="deviceCodeResultCallback">The callback containing information to show the user about how to authenticate and enter the device code.</param> <param name="cancellationToken">A CancellationToken which can be triggered to cancel the operation in progress.</param> <returns>Authentication result containing a token for the requested scopes and for the user who has authenticated on another device with the code</returns> </member> <member name="M:Microsoft.Identity.Client.IPublicClientApplication.AcquireTokenWithDeviceCodeAsync(System.Collections.Generic.IEnumerable{System.String},System.String,System.Func{Microsoft.Identity.Client.DeviceCodeResult,System.Threading.Tasks.Task},System.Threading.CancellationToken)"> <summary> Acquires a security token on a device without a Web browser, by letting the user authenticate on another device, with possiblity of passing extra query parameters and cancelling the token acquisition before it times out. This is done in two steps: <list type="bullet"> <item><description>the method first acquires a device code from the authority and returns it to the caller via the <paramref name="deviceCodeResultCallback"/>. This callback takes care of interacting with the user to direct them to authenticate (to a specific URL, with a code)</description></item> <item><description>The method then proceeds to poll for the security token which is granted upon successful login by the user based on the device code information. This step is cancelable</description></item> </list> See https://aka.ms/msal-device-code-flow. </summary> <param name="scopes">Scopes requested to access a protected API</param> <param name="extraQueryParameters">This parameter will be appended as is to the query string in the HTTP authentication request to the authority. This is expected to be a string of segments of the form <c>key=value</c> separated by an ampersand character. The parameter can be null.</param> <param name="deviceCodeResultCallback">The callback containing information to show the user about how to authenticate and enter the device code.</param> <param name="cancellationToken">A CancellationToken which can be triggered to cancel the operation in progress.</param> <returns>Authentication result containing a token for the requested scopes and for the user who has authenticated on another device with the code</returns> </member> <member name="M:Microsoft.Identity.Client.IPublicClientApplication.AcquireTokenByIntegratedWindowsAuthAsync(System.Collections.Generic.IEnumerable{System.String})"> <summary> Non-interactive request to acquire a security token for the signed-in user in Windows, via Integrated Windows Authentication. See https://aka.ms/msal-net-iwa. The account used in this overrides is pulled from the operating system as the current user principal name </summary> <remarks> On Windows Universal Platform, the following capabilities need to be provided: Enterprise Authentication, Private Networks (Client and Server), User Account Information </remarks> <param name="scopes">Scopes requested to access a protected API</param> <returns>Authentication result containing a token for the requested scopes and for the currently logged-in user in Windows</returns> </member> <member name="M:Microsoft.Identity.Client.IPublicClientApplication.AcquireTokenByIntegratedWindowsAuthAsync(System.Collections.Generic.IEnumerable{System.String},System.String)"> <summary> Non-interactive request to acquire a security token for the signed-in user in Windows, via Integrated Windows Authentication. See https://aka.ms/msal-net-iwa. The account used in this overrides is pulled from the operating system as the current user principal name </summary> <param name="scopes">Scopes requested to access a protected API</param> <param name="username">Identifier of the user account for which to acquire a token with Integrated Windows authentication. Generally in UserPrincipalName (UPN) format, e.g. john.doe@contoso.com</param> <returns>Authentication result containing a token for the requested scopes and for the currently logged-in user in Windows</returns> </member> <member name="T:Microsoft.Identity.Client.TokenCacheCallback"> <summary> Notification for certain token cache interactions during token acquisition. This delegate is used in particular to provide a custom token cache serialization. See https://aka.ms/aka.ms/msal-net-token-cache-serialization </summary> <param name="args">Arguments related to the cache item impacted</param> </member> <member name="T:Microsoft.Identity.Client.ITokenCache"> <summary> This is the interface that implements the public access to cache operations. With CacheV2, this should only be necessary if the caller is persisting the cache in their own store, since this will provide the serialize/deserialize and before/after notifications used in that scenario. See https://aka.ms/aka.ms/msal-net-token-cache-serialization </summary> </member> <member name="M:Microsoft.Identity.Client.ITokenCache.SetBeforeAccess(Microsoft.Identity.Client.TokenCacheCallback)"> <summary> Sets a delegate to be notified before any library method accesses the cache. This gives an option to the delegate to deserialize a cache entry for the application and accounts specified in the <see cref="T:Microsoft.Identity.Client.TokenCacheNotificationArgs"/>. See https://aka.ms/msal-net-token-cache-serialization. If you need async/task-based callbacks, please use SetBeforeAccessAsync instead. </summary> <param name="beforeAccess">Delegate set in order to handle the cache deserialization</param> <remarks>When the delegate is used to deserialize the cache, it might want to call <see cref="M:Microsoft.Identity.Client.ITokenCacheSerializer.DeserializeMsalV3(System.Byte[],System.Boolean)"/></remarks> </member> <member name="M:Microsoft.Identity.Client.ITokenCache.SetAfterAccess(Microsoft.Identity.Client.TokenCacheCallback)"> <summary> Sets a delegate to be notified after any library method accesses the cache. This gives an option to the delegate to serialize a cache entry for the application and accounts specified in the <see cref="T:Microsoft.Identity.Client.TokenCacheNotificationArgs"/>. See https://aka.ms/msal-net-token-cache-serialization. If you need async/task-based callbacks, please use SetAfterAccessAsync instead. </summary> <param name="afterAccess">Delegate set in order to handle the cache serialization in the case where the <see cref="P:Microsoft.Identity.Client.TokenCache.HasStateChanged"/> member of the cache is <c>true</c></param> <remarks>In the case where the delegate is used to serialize the cache entirely (not just a row), it might want to call <see cref="M:Microsoft.Identity.Client.ITokenCacheSerializer.SerializeMsalV3"/></remarks> </member> <member name="M:Microsoft.Identity.Client.ITokenCache.SetBeforeWrite(Microsoft.Identity.Client.TokenCacheCallback)"> <summary> Sets a delegate called before any library method writes to the cache. This gives an option to the delegate to reload the cache state from a row in database and lock that row. That database row can then be unlocked in the delegate registered with <see cref="M:Microsoft.Identity.Client.ITokenCache.SetAfterAccess(Microsoft.Identity.Client.TokenCacheCallback)"/> If you need async/task-based callbacks, please use SetBeforeWriteAsync instead. </summary> <param name="beforeWrite">Delegate set in order to prepare the cache serialization</param> </member> <member name="M:Microsoft.Identity.Client.ITokenCache.SetBeforeAccessAsync(System.Func{Microsoft.Identity.Client.TokenCacheNotificationArgs,System.Threading.Tasks.Task})"> <summary> Sets a delegate to be notified before any library method accesses the cache. This gives an option to the delegate to deserialize a cache entry for the application and accounts specified in the <see cref="T:Microsoft.Identity.Client.TokenCacheNotificationArgs"/>. See https://aka.ms/msal-net-token-cache-serialization. This provides the same functionality as SetBeforeAccess but it provides for an async/task-based callback. </summary> <param name="beforeAccess">Delegate set in order to handle the cache deserialization</param> <remarks>In the case where the delegate is used to deserialize the cache, it might want to call <see cref="M:Microsoft.Identity.Client.ITokenCacheSerializer.DeserializeMsalV3(System.Byte[],System.Boolean)"/></remarks> </member> <member name="M:Microsoft.Identity.Client.ITokenCache.SetAfterAccessAsync(System.Func{Microsoft.Identity.Client.TokenCacheNotificationArgs,System.Threading.Tasks.Task})"> <summary> Sets a delegate to be notified after any library method accesses the cache. This gives an option to the delegate to serialize a cache entry for the application and accounts specified in the <see cref="T:Microsoft.Identity.Client.TokenCacheNotificationArgs"/>. See https://aka.ms/msal-net-token-cache-serialization. This provides the same functionality as SetAfterAccess but it provides for an async/task-based callback. </summary> <param name="afterAccess">Delegate set in order to handle the cache serialization in the case where the <see cref="P:Microsoft.Identity.Client.TokenCache.HasStateChanged"/> member of the cache is <c>true</c></param> <remarks>In the case where the delegate is used to serialize the cache entirely (not just a row), it might want to call <see cref="M:Microsoft.Identity.Client.ITokenCacheSerializer.SerializeMsalV3"/></remarks> </member> <member name="M:Microsoft.Identity.Client.ITokenCache.SetBeforeWriteAsync(System.Func{Microsoft.Identity.Client.TokenCacheNotificationArgs,System.Threading.Tasks.Task})"> <summary> Sets a delegate called before any library method writes to the cache. This gives an option to the delegate to reload the cache state from a row in database and lock that row. That database row can then be unlocked in the delegate registered with <see cref="M:Microsoft.Identity.Client.ITokenCache.SetAfterAccess(Microsoft.Identity.Client.TokenCacheCallback)"/> This provides the same functionality as SetBeforeWrite but it provides for an async/task-based callback. </summary> <param name="beforeWrite">Delegate set in order to prepare the cache serialization</param> </member> <member name="M:Microsoft.Identity.Client.ITokenCache.SerializeMsalV3"> <summary> Functionality replaced by <see cref="M:Microsoft.Identity.Client.ITokenCacheSerializer.SerializeMsalV3"/> and is accessible in TokenCacheNotificationArgs. </summary> <returns>Byte stream representation of the cache</returns> <remarks> This is the recommended format for maintaining SSO state between applications. <see cref="M:Microsoft.Identity.Client.ITokenCache.SerializeMsalV3"/>/<see cref="M:Microsoft.Identity.Client.ITokenCache.DeserializeMsalV3(System.Byte[],System.Boolean)"/> is compatible with other MSAL libraries such as MSAL for Python and MSAL for Java. </remarks> </member> <member name="M:Microsoft.Identity.Client.ITokenCache.DeserializeMsalV3(System.Byte[],System.Boolean)"> <summary> Functionality replaced by <see cref="M:Microsoft.Identity.Client.ITokenCacheSerializer.DeserializeMsalV3(System.Byte[],System.Boolean)"/> and is accessible in TokenCacheNotificationArgs. </summary> <param name="msalV3State">Byte stream representation of the cache</param> <param name="shouldClearExistingCache"> Set to true to clear MSAL cache contents. Defaults to false. You would want to set this to true if you want the cache contents in memory to be exactly what's on disk. You would want to set this to false if you want to merge the contents of what's on disk with your current in memory state. </param> <remarks> This is the recommended format for maintaining SSO state between applications. <see cref="M:Microsoft.Identity.Client.ITokenCache.SerializeMsalV3"/>/<see cref="M:Microsoft.Identity.Client.ITokenCache.DeserializeMsalV3(System.Byte[],System.Boolean)"/> is compatible with other MSAL libraries such as MSAL for Python and MSAL for Java. </remarks> </member> <member name="M:Microsoft.Identity.Client.ITokenCache.SerializeMsalV2"> <summary> Functionality replaced by <see cref="M:Microsoft.Identity.Client.ITokenCacheSerializer.SerializeMsalV2"/> and is accessible in TokenCacheNotificationArgs. </summary> <returns>Byte stream representation of the cache</returns> <remarks> <see cref="M:Microsoft.Identity.Client.ITokenCache.SerializeMsalV3"/>/<see cref="M:Microsoft.Identity.Client.ITokenCache.DeserializeMsalV3(System.Byte[],System.Boolean)"/> is compatible with other MSAL libraries such as MSAL for Python and MSAL for Java. </remarks> </member> <member name="M:Microsoft.Identity.Client.ITokenCache.DeserializeMsalV2(System.Byte[])"> <summary> Functionality replaced by <see cref="M:Microsoft.Identity.Client.ITokenCacheSerializer.DeserializeMsalV2(System.Byte[])"/> and is accessible in TokenCacheNotificationArgs. </summary> <param name="msalV2State">Byte stream representation of the cache</param> <remarks> <see cref="M:Microsoft.Identity.Client.ITokenCache.SerializeMsalV3"/>/<see cref="M:Microsoft.Identity.Client.ITokenCache.DeserializeMsalV3(System.Byte[],System.Boolean)"/> is compatible with other MSAL libraries such as MSAL for Python and MSAL for Java. </remarks> </member> <member name="M:Microsoft.Identity.Client.ITokenCache.SerializeAdalV3"> <summary> Functionality replaced by <see cref="M:Microsoft.Identity.Client.ITokenCacheSerializer.SerializeAdalV3"/> and is accessible in TokenCacheNotificationArgs. </summary> <returns>Byte stream representation of the cache</returns> <remarks> <see cref="M:Microsoft.Identity.Client.ITokenCache.SerializeMsalV3"/>/<see cref="M:Microsoft.Identity.Client.ITokenCache.DeserializeMsalV3(System.Byte[],System.Boolean)"/> is compatible with other MSAL libraries such as MSAL for Python and MSAL for Java. </remarks> </member> <member name="M:Microsoft.Identity.Client.ITokenCache.DeserializeAdalV3(System.Byte[])"> <summary> Functionality replaced by <see cref="M:Microsoft.Identity.Client.ITokenCacheSerializer.DeserializeAdalV3(System.Byte[])"/> and is accessible in TokenCacheNotificationArgs. See https://aka.ms/msal-net-4x-cache-breaking-change </summary> <param name="adalV3State">Byte stream representation of the cache</param> <remarks> <see cref="M:Microsoft.Identity.Client.ITokenCache.SerializeMsalV3"/>/<see cref="M:Microsoft.Identity.Client.ITokenCache.DeserializeMsalV3(System.Byte[],System.Boolean)"/> is compatible with other MSAL libraries such as MSAL for Python and MSAL for Java. </remarks> </member> <member name="M:Microsoft.Identity.Client.ITokenCache.Serialize"> <summary> Functionality replaced by <see cref="M:Microsoft.Identity.Client.ITokenCacheSerializer.SerializeMsalV2"/>. See https://aka.ms/msal-net-4x-cache-breaking-change /// </summary> <returns></returns> </member> <member name="M:Microsoft.Identity.Client.ITokenCache.Deserialize(System.Byte[])"> <summary> Functionality replaced by <see cref="M:Microsoft.Identity.Client.ITokenCacheSerializer.DeserializeMsalV2(System.Byte[])"/>. See https://aka.ms/msal-net-4x-cache-breaking-change /// </summary> <param name="msalV2State"></param> </member> <member name="M:Microsoft.Identity.Client.ITokenCache.SerializeUnifiedAndAdalCache"> <summary> Functionality replaced by <see cref="M:Microsoft.Identity.Client.ITokenCacheSerializer.SerializeMsalV2"/> and <see cref="M:Microsoft.Identity.Client.ITokenCacheSerializer.SerializeAdalV3"/> See https://aka.ms/msal-net-4x-cache-breaking-change </summary> <returns></returns> </member> <member name="M:Microsoft.Identity.Client.ITokenCache.DeserializeUnifiedAndAdalCache(Microsoft.Identity.Client.Cache.CacheData)"> <summary> Functionality replaced by <see cref="M:Microsoft.Identity.Client.ITokenCacheSerializer.DeserializeMsalV2(System.Byte[])"/> and <see cref="M:Microsoft.Identity.Client.ITokenCacheSerializer.DeserializeAdalV3(System.Byte[])"/> See https://aka.ms/msal-net-4x-cache-breaking-change </summary> <param name="cacheData"></param> </member> <member name="M:Microsoft.Identity.Client.ITokenCacheInternal.SaveTokenResponseAsync(Microsoft.Identity.Client.Internal.Requests.AuthenticationRequestParameters,Microsoft.Identity.Client.OAuth2.MsalTokenResponse)"> <summary> Persists the AT and RT and updates app metadata (FOCI) </summary> <returns></returns> </member> <member name="M:Microsoft.Identity.Client.ITokenCacheInternal.FindRefreshTokenAsync(Microsoft.Identity.Client.Internal.Requests.AuthenticationRequestParameters,System.String)"> <summary> Returns a RT for the request. If familyId is specified, it tries to return the FRT. </summary> </member> <member name="M:Microsoft.Identity.Client.ITokenCacheInternal.IsFociMemberAsync(Microsoft.Identity.Client.Internal.Requests.AuthenticationRequestParameters,System.String)"> <summary> FOCI - check in the app metadata to see if the app is part of the family </summary> <returns>null if unkown, true or false if app metadata has details</returns> </member> <member name="T:Microsoft.Identity.Client.ITokenCacheSerializer"> <summary> This interface will be available in TokenCacheNOtifiactionArgs callback to enable serialization/deserialization of the cache. </summary> </member> <member name="M:Microsoft.Identity.Client.ITokenCacheSerializer.SerializeMsalV3"> <summary> Serializes the token cache to the MSAL.NET 3.x cache format, which is compatible with other MSAL desktop libraries, including MSAL.NET 4.x, MSAL for Python and MSAL for Java. If you need to maintain SSO between an application using ADAL 3.x and this application using MSAL 3.x or later, you might also want to serialize and deserialize with <see cref="M:Microsoft.Identity.Client.ITokenCacheSerializer.SerializeAdalV3"/>/<see cref="M:Microsoft.Identity.Client.ITokenCacheSerializer.DeserializeAdalV3(System.Byte[])"/>, otherwise just use <see cref="M:Microsoft.Identity.Client.ITokenCacheSerializer.SerializeMsalV3"/>/<see cref="M:Microsoft.Identity.Client.ITokenCacheSerializer.DeserializeMsalV3(System.Byte[],System.Boolean)"/>. </summary> <returns>Byte stream representation of the cache</returns> <remarks> This is the recommended format for maintaining SSO state between applications. <see cref="M:Microsoft.Identity.Client.ITokenCacheSerializer.SerializeMsalV3"/>/<see cref="M:Microsoft.Identity.Client.ITokenCacheSerializer.DeserializeMsalV3(System.Byte[],System.Boolean)"/> is compatible with other MSAL libraries such as MSAL for Python and MSAL for Java. </remarks> </member> <member name="M:Microsoft.Identity.Client.ITokenCacheSerializer.DeserializeMsalV3(System.Byte[],System.Boolean)"> <summary> Deserializes the token cache to the MSAL.NET 3.x cache format, which is compatible with other MSAL desktop libraries, including MSAL.NET 4.x, MSAL for Python and MSAL for Java. If you need to maintain SSO between an application using ADAL 3.x and this application using MSAL 3.x or later, you might also want to serialize and deserialize with <see cref="M:Microsoft.Identity.Client.ITokenCacheSerializer.SerializeAdalV3"/>/<see cref="M:Microsoft.Identity.Client.ITokenCacheSerializer.DeserializeAdalV3(System.Byte[])"/>, otherwise just use <see cref="M:Microsoft.Identity.Client.ITokenCacheSerializer.SerializeMsalV3"/>/<see cref="M:Microsoft.Identity.Client.ITokenCacheSerializer.DeserializeMsalV3(System.Byte[],System.Boolean)"/>. </summary> <param name="msalV3State">Byte stream representation of the cache</param> <param name="shouldClearExistingCache"> Set to true to clear MSAL cache contents. Defaults to false. You would want to set this to true if you want the cache contents in memory to be exactly what's on disk. You would want to set this to false if you want to merge the contents of what's on disk with your current in memory state. </param> <remarks> This is the recommended format for maintaining SSO state between applications. <see cref="M:Microsoft.Identity.Client.ITokenCacheSerializer.SerializeMsalV3"/>/<see cref="M:Microsoft.Identity.Client.ITokenCacheSerializer.DeserializeMsalV3(System.Byte[],System.Boolean)"/> is compatible with other MSAL libraries such as MSAL for Python and MSAL for Java. </remarks> </member> <member name="M:Microsoft.Identity.Client.ITokenCacheSerializer.SerializeAdalV3"> <summary> Serializes the token cache to the ADAL.NET 3.x cache format. If you need to maintain SSO between an application using ADAL 3.x and this application using MSAL 3.x or later, you might also want to serialize and deserialize with <see cref="M:Microsoft.Identity.Client.ITokenCacheSerializer.SerializeAdalV3"/>/<see cref="M:Microsoft.Identity.Client.ITokenCacheSerializer.DeserializeAdalV3(System.Byte[])"/>, otherwise just use <see cref="M:Microsoft.Identity.Client.ITokenCacheSerializer.SerializeMsalV3"/>/<see cref="M:Microsoft.Identity.Client.ITokenCacheSerializer.DeserializeMsalV3(System.Byte[],System.Boolean)"/>. </summary> <returns>Byte stream representation of the cache</returns> <remarks> <see cref="M:Microsoft.Identity.Client.ITokenCacheSerializer.SerializeMsalV3"/>/<see cref="M:Microsoft.Identity.Client.ITokenCacheSerializer.DeserializeMsalV3(System.Byte[],System.Boolean)"/> is compatible with other MSAL libraries such as MSAL for Python and MSAL for Java. </remarks> </member> <member name="M:Microsoft.Identity.Client.ITokenCacheSerializer.DeserializeAdalV3(System.Byte[])"> <summary> Deserializes the token cache to the ADAL.NET 3.x cache format. If you need to maintain SSO between an application using ADAL 3.x and this application using MSAL 3.x or later, you might also want to serialize and deserialize with <see cref="M:Microsoft.Identity.Client.ITokenCacheSerializer.SerializeAdalV3"/>/<see cref="M:Microsoft.Identity.Client.ITokenCacheSerializer.DeserializeAdalV3(System.Byte[])"/>, otherwise just use <see cref="M:Microsoft.Identity.Client.ITokenCacheSerializer.SerializeMsalV3"/>/<see cref="M:Microsoft.Identity.Client.ITokenCacheSerializer.DeserializeMsalV3(System.Byte[],System.Boolean)"/>. </summary> <param name="adalV3State">Byte stream representation of the cache</param> <remarks> <see cref="M:Microsoft.Identity.Client.ITokenCacheSerializer.SerializeMsalV3"/>/<see cref="M:Microsoft.Identity.Client.ITokenCacheSerializer.DeserializeMsalV3(System.Byte[],System.Boolean)"/> is compatible with other MSAL libraries such as MSAL for Python and MSAL for Java. </remarks> </member> <member name="M:Microsoft.Identity.Client.ITokenCacheSerializer.SerializeMsalV2"> <summary> Serializes the token cache to the MSAL.NET 2.x unified cache format, which is compatible with ADAL.NET v4 and other MSAL.NET v2 applications. If you need to maintain SSO between an application using ADAL 3.x or MSAL 2.x and this application using MSAL 3.x, you might also want to serialize and deserialize with <see cref="M:Microsoft.Identity.Client.ITokenCacheSerializer.SerializeAdalV3"/>/<see cref="M:Microsoft.Identity.Client.ITokenCacheSerializer.DeserializeAdalV3(System.Byte[])"/> or <see cref="M:Microsoft.Identity.Client.ITokenCacheSerializer.SerializeMsalV2"/>/<see cref="M:Microsoft.Identity.Client.ITokenCacheSerializer.DeserializeMsalV2(System.Byte[])"/>, otherwise just use <see cref="M:Microsoft.Identity.Client.ITokenCacheSerializer.SerializeMsalV3"/>/<see cref="M:Microsoft.Identity.Client.ITokenCacheSerializer.DeserializeMsalV3(System.Byte[],System.Boolean)"/>. </summary> <returns>Byte stream representation of the cache</returns> <remarks> <see cref="M:Microsoft.Identity.Client.ITokenCacheSerializer.SerializeMsalV3"/>/<see cref="M:Microsoft.Identity.Client.ITokenCacheSerializer.DeserializeMsalV3(System.Byte[],System.Boolean)"/> is compatible with other MSAL libraries such as MSAL for Python and MSAL for Java. </remarks> </member> <member name="M:Microsoft.Identity.Client.ITokenCacheSerializer.DeserializeMsalV2(System.Byte[])"> <summary> Deserializes the token cache to the MSAL.NET 2.x cache format, which is compatible with ADAL.NET v4 and other MSAL.NET v2 applications. If you need to maintain SSO between an application using ADAL 3.x or MSAL 2.x and this application using MSAL 3.x, you might also want to serialize and deserialize with <see cref="M:Microsoft.Identity.Client.ITokenCacheSerializer.SerializeAdalV3"/>/<see cref="M:Microsoft.Identity.Client.ITokenCacheSerializer.DeserializeAdalV3(System.Byte[])"/> or <see cref="M:Microsoft.Identity.Client.ITokenCacheSerializer.SerializeMsalV2"/>/<see cref="M:Microsoft.Identity.Client.ITokenCacheSerializer.DeserializeMsalV2(System.Byte[])"/>, otherwise just use <see cref="M:Microsoft.Identity.Client.ITokenCacheSerializer.SerializeMsalV3"/>/<see cref="M:Microsoft.Identity.Client.ITokenCacheSerializer.DeserializeMsalV3(System.Byte[],System.Boolean)"/>. </summary> <param name="msalV2State">Byte stream representation of the cache</param> <remarks> <see cref="M:Microsoft.Identity.Client.ITokenCacheSerializer.SerializeMsalV3"/>/<see cref="M:Microsoft.Identity.Client.ITokenCacheSerializer.DeserializeMsalV3(System.Byte[],System.Boolean)"/> is compatible with other MSAL libraries such as MSAL for Python and MSAL for Java. </remarks> </member> <member name="T:Microsoft.Identity.Client.LogCallback"> <summary> Callback delegate that allows application developers to consume logs, and handle them in a custom manner. This callback is set using <see cref="M:Microsoft.Identity.Client.AbstractApplicationBuilder`1.WithLogging(Microsoft.Identity.Client.LogCallback,System.Nullable{Microsoft.Identity.Client.LogLevel},System.Nullable{System.Boolean},System.Nullable{System.Boolean})"/>. If <c>PiiLoggingEnabled</c> is set to <c>true</c>, when registering the callback this method will receive the messages twice: once with the <c>containsPii</c> parameter equals <c>false</c> and the message without PII, and a second time with the <c>containsPii</c> parameter equals to <c>true</c> and the message might contain PII. In some cases (when the message does not contain PII), the message will be the same. For details see https://aka.ms/msal-net-logging </summary> <param name="level">Log level of the log message to process</param> <param name="message">Pre-formatted log message</param> <param name="containsPii">Indicates if the log message contains Organizational Identifiable Information (OII) or Personally Identifiable Information (PII) nor not. If <see cref="P:Microsoft.Identity.Client.Logger.PiiLoggingEnabled"/> is set to <c>false</c> then this value is always false. Otherwise it will be <c>true</c> when the message contains PII.</param> <seealso cref="T:Microsoft.Identity.Client.Logger"/> </member> <member name="T:Microsoft.Identity.Client.LogLevel"> <summary> Level of the log messages. For details see https://aka.ms/msal-net-logging </summary> </member> <member name="F:Microsoft.Identity.Client.LogLevel.Error"> <summary> Error Log level </summary> </member> <member name="F:Microsoft.Identity.Client.LogLevel.Warning"> <summary> Warning Log level </summary> </member> <member name="F:Microsoft.Identity.Client.LogLevel.Info"> <summary> Information Log level </summary> </member> <member name="F:Microsoft.Identity.Client.LogLevel.Verbose"> <summary> Verbose Log level </summary> </member> <member name="T:Microsoft.Identity.Client.IUser"> <summary> In MSAL.NET 1.x, was representing a User. From MSAL 2.x use <see cref="T:Microsoft.Identity.Client.IAccount"/> which represents an account (a user has several accounts). See https://aka.ms/msal-net-2-released for more details. </summary> </member> <member name="P:Microsoft.Identity.Client.IUser.DisplayableId"> <summary> In MSAL.NET 1.x was the displayable ID of a user. From MSAL 2.x use the <see cref="P:Microsoft.Identity.Client.IAccount.Username"/> of an account. See https://aka.ms/msal-net-2-released for more details </summary> </member> <member name="P:Microsoft.Identity.Client.IUser.Name"> <summary> In MSAL.NET 1.x was the name of the user (which was not very useful as the concatenation of some claims). From MSAL 2.x rather use <see cref="P:Microsoft.Identity.Client.IAccount.Username"/>. See https://aka.ms/msal-net-2-released for more details. </summary> </member> <member name="P:Microsoft.Identity.Client.IUser.IdentityProvider"> <summary> In MSAL.NET 1.x was the URL of the identity provider (e.g. https://login.microsoftonline.com/tenantId). From MSAL.NET 2.x use <see cref="P:Microsoft.Identity.Client.IAccount.Environment"/> which retrieves the host only (e.g. login.microsoftonline.com). See https://aka.ms/msal-net-2-released for more details. </summary> </member> <member name="P:Microsoft.Identity.Client.IUser.Identifier"> <summary> In MSAL.NET 1.x was an identifier for the user in the guest tenant. From MSAL.NET 2.x, use <see cref="P:Microsoft.Identity.Client.IAccount.HomeAccountId"/><see cref="P:Microsoft.Identity.Client.AccountId.Identifier"/> to get the user identifier (globally unique accross tenants). See https://aka.ms/msal-net-2-released for more details. </summary> </member> <member name="T:Microsoft.Identity.Client.TokenCacheNotificationArgs"> <summary> Contains parameters used by the MSAL call accessing the cache. See also <see cref="T:ITokenCacheSerializer"/> which contains methods to customize the cache serialization. For more details about the token cache see https://aka.ms/msal-net-web-token-cache </summary> </member> <member name="P:Microsoft.Identity.Client.TokenCacheNotificationArgs.User"> <summary> In MSAL.NET 1.x, returned the user who signed in to get the authentication result. From MSAL 2.x rather use <see cref="P:Microsoft.Identity.Client.TokenCacheNotificationArgs.Account"/> instead. See https://aka.ms/msal-net-2-released for more details. </summary> </member> <member name="P:Microsoft.Identity.Client.TokenCacheNotificationArgs.TokenCache"> <summary> Gets the <see cref="T:Microsoft.Identity.Client.ITokenCacheSerializer"/> involved in the transaction </summary> <remarks><see cref="P:Microsoft.Identity.Client.TokenCacheNotificationArgs.TokenCache" > objects</see> implement this interface.</remarks> </member> <member name="P:Microsoft.Identity.Client.TokenCacheNotificationArgs.ClientId"> <summary> Gets the ClientId (application ID) of the application involved in the cache transaction </summary> </member> <member name="P:Microsoft.Identity.Client.TokenCacheNotificationArgs.Account"> <summary> Gets the account involved in the cache transaction. </summary> </member> <member name="P:Microsoft.Identity.Client.TokenCacheNotificationArgs.HasStateChanged"> <summary> Indicates whether the state of the cache has changed, for example when tokens are being added or removed. Not all cache operations modify the state of the cache. </summary> </member> <member name="P:Microsoft.Identity.Client.TokenCacheNotificationArgs.IsApplicationCache"> <summary> Indicates whether the cache change occurred in the UserTokenCache or in the AppTokenCache. </summary> <remarks> The Application Cache is used in Client Credential grant, which is not available on all platforms. See https://aka.ms/msal-net-app-cache-serialization for details. </remarks> </member> <member name="T:Microsoft.Identity.Client.PublicClientApplication"> <Summary> Abstract class containing common API methods and properties. For details see https://aka.ms/msal-net-client-applications </Summary> <summary> Class to be used to acquire tokens in desktop or mobile applications (Desktop / UWP / Xamarin.iOS / Xamarin.Android). public client applications are not trusted to safely keep application secrets, and therefore they only access Web APIs in the name of the user only. For details see https://aka.ms/msal-net-client-applications </summary> <remarks> <list type="bullet"> <item><description>Contrary to <see cref="T:Microsoft.Identity.Client.ConfidentialClientApplication"/>, public clients are unable to hold configuration time secrets, and as a result have no client secret</description></item> <item><description>The redirect URL is pre-proposed by the library. It does not need to be passed in the constructor</description></item> <item><description>.NET Core does not support UI, and therefore this platform does not provide the interactive token acquisition methods</description></item> </list> </remarks> </member> <member name="M:Microsoft.Identity.Client.PublicClientApplication.AcquireTokenByUsernamePasswordAsync(System.Collections.Generic.IEnumerable{System.String},System.String,System.String)"> <summary> In ADAL.NET, acquires security token from the authority, using the username/password authentication, with the password sent in clear. In MSAL 2.x, only the method that accepts a SecureString parameter is supported. See https://aka.ms/msal-net-up for more details. </summary> <param name="scopes">Scopes requested to access a protected API</param> <param name="username">Identifier of the user application requests token on behalf.</param> <param name="password">User password.</param> <returns>Authentication result containing a token for the requested scopes and account</returns> </member> <member name="M:Microsoft.Identity.Client.PublicClientApplication.#ctor(System.String)"> <summary> Constructor of the application. It will use https://login.microsoftonline.com/common as the default authority. </summary> <param name="clientId">Client ID (also known as App ID) of the application as registered in the application registration portal (https://aka.ms/msal-net-register-app)/. REQUIRED</param> </member> <member name="M:Microsoft.Identity.Client.PublicClientApplication.#ctor(System.String,System.String)"> <summary> Constructor of the application. </summary> <param name="clientId">Client ID (also named Application ID) of the application as registered in the application registration portal (https://aka.ms/msal-net-register-app)/. REQUIRED</param> <param name="authority">Authority of the security token service (STS) from which MSAL.NET will acquire the tokens. Usual authorities are: <list type="bullet"> <item><description><c>https://login.microsoftonline.com/tenant/</c>, where <c>tenant</c> is the tenant ID of the Azure AD tenant or a domain associated with this Azure AD tenant, in order to sign-in user of a specific organization only</description></item> <item><description><c>https://login.microsoftonline.com/common/</c> to signing users with any work and school accounts or Microsoft personal account</description></item> <item><description><c>https://login.microsoftonline.com/organizations/</c> to signing users with any work and school accounts</description></item> <item><description><c>https://login.microsoftonline.com/consumers/</c> to signing users with only personal Microsoft account (live)</description></item> </list> Note that this setting needs to be consistent with what is declared in the application registration portal </param> </member> <member name="M:Microsoft.Identity.Client.PublicClientApplication.AcquireTokenAsync(System.Collections.Generic.IEnumerable{System.String})"> <summary> Interactive request to acquire token for the specified scopes. The user is required to select an account </summary> <param name="scopes">Scopes requested to access a protected API</param> <returns>Authentication result containing a token for the requested scopes and account</returns> <remarks>The user will be signed-in interactively if needed, and will consent to scopes and do multi-factor authentication if such a policy was enabled in the Azure AD tenant.</remarks> </member> <member name="M:Microsoft.Identity.Client.PublicClientApplication.AcquireTokenAsync(System.Collections.Generic.IEnumerable{System.String},System.String)"> <summary> Interactive request to acquire token for the specified scopes. The user will need to sign-in but an account will be proposed based on the <paramref name="loginHint"/> </summary> <param name="scopes">Scopes requested to access a protected API</param> <param name="loginHint">Identifier of the user. Generally in UserPrincipalName (UPN) format, e.g. <c>john.doe@contoso.com</c></param> <returns>Authentication result containing a token for the requested scopes and account</returns> </member> <member name="M:Microsoft.Identity.Client.PublicClientApplication.AcquireTokenAsync(System.Collections.Generic.IEnumerable{System.String},Microsoft.Identity.Client.IAccount)"> <summary> Interactive request to acquire token for the specified scopes. The user will need to sign-in but an account will be proposed based on the provided <paramref name="account"/> </summary> <param name="scopes">Scopes requested to access a protected API</param> <param name="account">Account to use for the interactive token acquisition. See <see cref="T:Microsoft.Identity.Client.IAccount"/> for ways to get an account</param> <returns>Authentication result containing a token for the requested scopes and account</returns> </member> <member name="M:Microsoft.Identity.Client.PublicClientApplication.AcquireTokenAsync(System.Collections.Generic.IEnumerable{System.String},System.String,Microsoft.Identity.Client.Prompt,System.String)"> <summary> Interactive request to acquire token for a login with control of the UI prompt and possibility of passing extra query parameters like additional claims </summary> <param name="scopes">Scopes requested to access a protected API</param> <param name="loginHint">Identifier of the user. Generally in UserPrincipalName (UPN) format, e.g. <c>john.doe@contoso.com</c></param> <param name="prompt">Designed interactive experience for the user.</param> <param name="extraQueryParameters">This parameter will be appended as is to the query string in the HTTP authentication request to the authority. This is expected to be a string of segments of the form <c>key=value</c> separated by an ampersand character. The parameter can be null.</param> <returns>Authentication result containing a token for the requested scopes and account</returns> </member> <member name="M:Microsoft.Identity.Client.PublicClientApplication.AcquireTokenAsync(System.Collections.Generic.IEnumerable{System.String},Microsoft.Identity.Client.IAccount,Microsoft.Identity.Client.Prompt,System.String)"> <summary> Interactive request to acquire token for an account with control of the UI prompt and possibility of passing extra query parameters like additional claims </summary> <param name="scopes">Scopes requested to access a protected API</param> <param name="account">Account to use for the interactive token acquisition. See <see cref="T:Microsoft.Identity.Client.IAccount"/> for ways to get an account</param> <param name="prompt">Designed interactive experience for the user.</param> <param name="extraQueryParameters">This parameter will be appended as is to the query string in the HTTP authentication request to the authority. This is expected to be a string of segments of the form <c>key=value</c> separated by an ampersand character. The parameter can be null.</param> <returns>Authentication result containing a token for the requested scopes and account</returns> </member> <member name="M:Microsoft.Identity.Client.PublicClientApplication.AcquireTokenAsync(System.Collections.Generic.IEnumerable{System.String},System.String,Microsoft.Identity.Client.Prompt,System.String,System.Collections.Generic.IEnumerable{System.String},System.String)"> <summary> Interactive request to acquire token for a given login, with the possibility of controlling the user experience, passing extra query parameters, providing extra scopes that the user can pre-consent to, and overriding the authority pre-configured in the application </summary> <param name="scopes">Scopes requested to access a protected API</param> <param name="loginHint">Identifier of the user. Generally in UserPrincipalName (UPN) format, e.g. <c>john.doe@contoso.com</c></param> <param name="prompt">Designed interactive experience for the user.</param> <param name="extraQueryParameters">This parameter will be appended as is to the query string in the HTTP authentication request to the authority. This is expected to be a string of segments of the form <c>key=value</c> separated by an ampersand character. The parameter can be null.</param> <param name="extraScopesToConsent">Scopes that you can request the end user to consent upfront, in addition to the scopes for the protected Web API for which you want to acquire a security token.</param> <param name="authority">Specific authority for which the token is requested. Passing a different value than configured does not change the configured value</param> <returns>Authentication result containing a token for the requested scopes and account</returns> </member> <member name="M:Microsoft.Identity.Client.PublicClientApplication.AcquireTokenAsync(System.Collections.Generic.IEnumerable{System.String},Microsoft.Identity.Client.IAccount,Microsoft.Identity.Client.Prompt,System.String,System.Collections.Generic.IEnumerable{System.String},System.String)"> <summary> Interactive request to acquire token for a given account, with the possibility of controlling the user experience, passing extra query parameters, providing extra scopes that the user can pre-consent to, and overriding the authority pre-configured in the application </summary> <param name="scopes">Scopes requested to access a protected API</param> <param name="account">Account to use for the interactive token acquisition. See <see cref="T:Microsoft.Identity.Client.IAccount"/> for ways to get an account</param> <param name="prompt">Designed interactive experience for the user.</param> <param name="extraQueryParameters">This parameter will be appended as is to the query string in the HTTP authentication request to the authority. This is expected to be a string of segments of the form <c>key=value</c> separated by an ampersand character. The parameter can be null.</param> <param name="extraScopesToConsent">Scopes that you can request the end user to consent upfront, in addition to the scopes for the protected Web API for which you want to acquire a security token.</param> <param name="authority">Specific authority for which the token is requested. Passing a different value than configured does not change the configured value</param> <returns>Authentication result containing a token for the requested scopes and account</returns> </member> <member name="M:Microsoft.Identity.Client.PublicClientApplication.AcquireTokenAsync(System.Collections.Generic.IEnumerable{System.String},Microsoft.Identity.Client.UIParent)"> <summary> Interactive request to acquire token for the specified scopes. The interactive window will be parented to the specified window. The user will be required to select an account </summary> <param name="scopes">Scopes requested to access a protected API</param> <param name="parent">Object containing a reference to the parent window/activity. REQUIRED for Xamarin.Android only.</param> <returns>Authentication result containing a token for the requested scopes and account</returns> <remarks>The user will be signed-in interactively if needed, and will consent to scopes and do multi-factor authentication if such a policy was enabled in the Azure AD tenant.</remarks> </member> <member name="M:Microsoft.Identity.Client.PublicClientApplication.AcquireTokenAsync(System.Collections.Generic.IEnumerable{System.String},System.String,Microsoft.Identity.Client.UIParent)"> <summary> Interactive request to acquire token for the specified scopes. The interactive window will be parented to the specified window. The user will need to sign-in but an account will be proposed based on the <paramref name="loginHint"/> </summary> <param name="scopes">Scopes requested to access a protected API</param> <param name="loginHint">Identifier of the user. Generally in UserPrincipalName (UPN) format, e.g. <c>john.doe@contoso.com</c></param> <param name="parent">Object containing a reference to the parent window/activity. REQUIRED for Xamarin.Android only.</param> <returns>Authentication result containing a token for the requested scopes and login</returns> </member> <member name="M:Microsoft.Identity.Client.PublicClientApplication.AcquireTokenAsync(System.Collections.Generic.IEnumerable{System.String},Microsoft.Identity.Client.IAccount,Microsoft.Identity.Client.UIParent)"> <summary> Interactive request to acquire token for the specified scopes. The user will need to sign-in but an account will be proposed based on the provided <paramref name="account"/> </summary> <param name="scopes">Scopes requested to access a protected API</param> <param name="account">Account to use for the interactive token acquisition. See <see cref="T:Microsoft.Identity.Client.IAccount"/> for ways to get an account</param> <param name="parent">Object containing a reference to the parent window/activity. REQUIRED for Xamarin.Android only.</param> <returns>Authentication result containing a token for the requested scopes and account</returns> </member> <member name="M:Microsoft.Identity.Client.PublicClientApplication.AcquireTokenAsync(System.Collections.Generic.IEnumerable{System.String},System.String,Microsoft.Identity.Client.Prompt,System.String,Microsoft.Identity.Client.UIParent)"> <summary> Interactive request to acquire token for a login with control of the UI prompt and possiblity of passing extra query parameters like additional claims </summary> <param name="scopes">Scopes requested to access a protected API</param> <param name="loginHint">Identifier of the user. Generally in UserPrincipalName (UPN) format, e.g. <c>john.doe@contoso.com</c></param> <param name="prompt">Designed interactive experience for the user.</param> <param name="extraQueryParameters">This parameter will be appended as is to the query string in the HTTP authentication request to the authority. This is expected to be a string of segments of the form <c>key=value</c> separated by an ampersand character. The parameter can be null.</param> <param name="parent">Object containing a reference to the parent window/activity. REQUIRED for Xamarin.Android only.</param> <returns>Authentication result containing a token for the requested scopes and account</returns> </member> <member name="M:Microsoft.Identity.Client.PublicClientApplication.AcquireTokenAsync(System.Collections.Generic.IEnumerable{System.String},Microsoft.Identity.Client.IAccount,Microsoft.Identity.Client.Prompt,System.String,Microsoft.Identity.Client.UIParent)"> <summary> Interactive request to acquire token for an account with control of the UI prompt and possiblity of passing extra query parameters like additional claims </summary> <param name="scopes">Scopes requested to access a protected API</param> <param name="account">Account to use for the interactive token acquisition. See <see cref="T:Microsoft.Identity.Client.IAccount"/> for ways to get an account</param> <param name="prompt">Designed interactive experience for the user.</param> <param name="extraQueryParameters">This parameter will be appended as is to the query string in the HTTP authentication request to the authority. This is expected to be a string of segments of the form <c>key=value</c> separated by an ampersand character. The parameter can be null.</param> <param name="parent">Object containing a reference to the parent window/activity. REQUIRED for Xamarin.Android only.</param> <returns>Authentication result containing a token for the requested scopes and account</returns> </member> <member name="M:Microsoft.Identity.Client.PublicClientApplication.AcquireTokenAsync(System.Collections.Generic.IEnumerable{System.String},System.String,Microsoft.Identity.Client.Prompt,System.String,System.Collections.Generic.IEnumerable{System.String},System.String,Microsoft.Identity.Client.UIParent)"> <summary> Interactive request to acquire token for a given login, with the possibility of controlling the user experience, passing extra query parameters, providing extra scopes that the user can pre-consent to, and overriding the authority pre-configured in the application </summary> <param name="scopes">Scopes requested to access a protected API</param> <param name="loginHint">Identifier of the user. Generally in UserPrincipalName (UPN) format, e.g. <c>john.doe@contoso.com</c></param> <param name="prompt">Designed interactive experience for the user.</param> <param name="extraQueryParameters">This parameter will be appended as is to the query string in the HTTP authentication request to the authority. This is expected to be a string of segments of the form <c>key=value</c> separated by an ampersand character. The parameter can be null.</param> <param name="extraScopesToConsent">scopes that you can request the end user to consent upfront, in addition to the scopes for the protected Web API for which you want to acquire a security token.</param> <param name="authority">Specific authority for which the token is requested. Passing a different value than configured does not change the configured value</param> <param name="parent">Object containing a reference to the parent window/activity. REQUIRED for Xamarin.Android only.</param> <returns>Authentication result containing a token for the requested scopes and account</returns> </member> <member name="M:Microsoft.Identity.Client.PublicClientApplication.AcquireTokenAsync(System.Collections.Generic.IEnumerable{System.String},Microsoft.Identity.Client.IAccount,Microsoft.Identity.Client.Prompt,System.String,System.Collections.Generic.IEnumerable{System.String},System.String,Microsoft.Identity.Client.UIParent)"> <summary> Interactive request to acquire token for a given account, with the possibility of controlling the user experience, passing extra query parameters, providing extra scopes that the user can pre-consent to, and overriding the authority pre-configured in the application </summary> <param name="scopes">Scopes requested to access a protected API</param> <param name="account">Account to use for the interactive token acquisition. See <see cref="T:Microsoft.Identity.Client.IAccount"/> for ways to get an account</param> <param name="prompt">Designed interactive experience for the user.</param> <param name="extraQueryParameters">This parameter will be appended as is to the query string in the HTTP authentication request to the authority. This is expected to be a string of segments of the form <c>key=value</c> separated by an ampersand character. The parameter can be null.</param> <param name="extraScopesToConsent">scopes that you can request the end user to consent upfront, in addition to the scopes for the protected Web API for which you want to acquire a security token.</param> <param name="authority">Specific authority for which the token is requested. Passing a different value than configured does not change the configured value</param> <param name="parent">Object containing a reference to the parent window/activity. REQUIRED for Xamarin.Android only.</param> <returns>Authentication result containing a token for the requested scopes and account</returns> </member> <member name="M:Microsoft.Identity.Client.PublicClientApplication.AcquireTokenByUsernamePasswordAsync(System.Collections.Generic.IEnumerable{System.String},System.String,System.Security.SecureString)"> <summary> Non-interactive request to acquire a security token from the authority, via Username/Password Authentication. Available only on .net desktop and .net core. See https://aka.ms/msal-net-up for details. </summary> <param name="scopes">Scopes requested to access a protected API</param> <param name="username">Identifier of the user application requests token on behalf. Generally in UserPrincipalName (UPN) format, e.g. john.doe@contoso.com</param> <param name="securePassword">User password.</param> <returns>Authentication result containing a token for the requested scopes and account</returns> </member> <member name="M:Microsoft.Identity.Client.PublicClientApplication.AcquireTokenWithDeviceCodeAsync(System.Collections.Generic.IEnumerable{System.String},System.Func{Microsoft.Identity.Client.DeviceCodeResult,System.Threading.Tasks.Task})"> <summary> Acquires a security token on a device without a Web browser, by letting the user authenticate on another device. This is done in two steps: <list type="bullet"> <item><description>the method first acquires a device code from the authority and returns it to the caller via the <paramref name="deviceCodeResultCallback"/>. This callback takes care of interacting with the user to direct them to authenticate (to a specific URL, with a code)</description></item> <item><description>The method then proceeds to poll for the security token which is granted upon successful login by the user based on the device code information</description></item> </list> See https://aka.ms/msal-device-code-flow. </summary> <param name="scopes">Scopes requested to access a protected API</param> <param name="deviceCodeResultCallback">Callback containing information to show the user about how to authenticate and enter the device code.</param> <returns>Authentication result containing a token for the requested scopes and for the user who has authenticated on another device with the code</returns> </member> <member name="M:Microsoft.Identity.Client.PublicClientApplication.AcquireTokenWithDeviceCodeAsync(System.Collections.Generic.IEnumerable{System.String},System.String,System.Func{Microsoft.Identity.Client.DeviceCodeResult,System.Threading.Tasks.Task})"> <summary> Acquires a security token on a device without a Web browser, by letting the user authenticate on another device, with possiblity of passing extra parameters. This is done in two steps: <list type="bullet"> <item><description>the method first acquires a device code from the authority and returns it to the caller via the <paramref name="deviceCodeResultCallback"/>. This callback takes care of interacting with the user to direct them to authenticate (to a specific URL, with a code)</description></item> <item><description>The method then proceeds to poll for the security token which is granted upon successful login by the user based on the device code information</description></item> </list> See https://aka.ms/msal-device-code-flow. </summary> <param name="scopes">Scopes requested to access a protected API</param> <param name="extraQueryParameters">This parameter will be appended as is to the query string in the HTTP authentication request to the authority. This is expected to be a string of segments of the form <c>key=value</c> separated by an ampersand character. The parameter can be null.</param> <param name="deviceCodeResultCallback">Callback containing information to show the user about how to authenticate and enter the device code.</param> <returns>Authentication result containing a token for the requested scopes and for the user who has authenticated on another device with the code</returns> </member> <member name="M:Microsoft.Identity.Client.PublicClientApplication.AcquireTokenWithDeviceCodeAsync(System.Collections.Generic.IEnumerable{System.String},System.Func{Microsoft.Identity.Client.DeviceCodeResult,System.Threading.Tasks.Task},System.Threading.CancellationToken)"> <summary> Acquires a security token on a device without a Web browser, by letting the user authenticate on another device, with possiblity of cancelling the token acquisition before it times out. This is done in two steps: <list type="bullet"> <item><description>the method first acquires a device code from the authority and returns it to the caller via the <paramref name="deviceCodeResultCallback"/>. This callback takes care of interacting with the user to direct them to authenticate (to a specific URL, with a code)</description></item> <item><description>The method then proceeds to poll for the security token which is granted upon successful login by the user based on the device code information. This step is cancelable</description></item> </list> See https://aka.ms/msal-device-code-flow. </summary> <param name="scopes">Scopes requested to access a protected API</param> <param name="deviceCodeResultCallback">The callback containing information to show the user about how to authenticate and enter the device code.</param> <param name="cancellationToken">A CancellationToken which can be triggered to cancel the operation in progress.</param> <returns>Authentication result containing a token for the requested scopes and for the user who has authenticated on another device with the code</returns> </member> <member name="M:Microsoft.Identity.Client.PublicClientApplication.AcquireTokenWithDeviceCodeAsync(System.Collections.Generic.IEnumerable{System.String},System.String,System.Func{Microsoft.Identity.Client.DeviceCodeResult,System.Threading.Tasks.Task},System.Threading.CancellationToken)"> <summary> Acquires a security token on a device without a Web browser, by letting the user authenticate on another device, with possiblity of passing extra query parameters and cancelling the token acquisition before it times out. This is done in two steps: <list type="bullet"> <item><description>the method first acquires a device code from the authority and returns it to the caller via the <paramref name="deviceCodeResultCallback"/>. This callback takes care of interacting with the user to direct them to authenticate (to a specific URL, with a code)</description></item> <item><description>The method then proceeds to poll for the security token which is granted upon successful login by the user based on the device code information. This step is cancelable</description></item> </list> See https://aka.ms/msal-device-code-flow. </summary> <param name="scopes">Scopes requested to access a protected API</param> <param name="extraQueryParameters">This parameter will be appended as is to the query string in the HTTP authentication request to the authority. This is expected to be a string of segments of the form <c>key=value</c> separated by an ampersand character. The parameter can be null.</param> <param name="deviceCodeResultCallback">The callback containing information to show the user about how to authenticate and enter the device code.</param> <param name="cancellationToken">A CancellationToken which can be triggered to cancel the operation in progress.</param> <returns>Authentication result containing a token for the requested scopes and for the user who has authenticated on another device with the code</returns> </member> <member name="M:Microsoft.Identity.Client.PublicClientApplication.Microsoft#Identity#Client#IByRefreshToken#AcquireTokenByRefreshTokenAsync(System.Collections.Generic.IEnumerable{System.String},System.String)"> <summary> Acquires an access token from an existing refresh token and stores it and the refresh token into the application user token cache, where it will be available for further AcquireTokenSilentAsync calls. This method can be used in migration to MSAL from ADAL v2 and in various integration scenarios where you have a RefreshToken available. (see https://aka.ms/msal-net-migration-adal2-msal2) </summary> <param name="scopes">Scope to request from the token endpoint. Setting this to null or empty will request an access token, refresh token and ID token with default scopes</param> <param name="refreshToken">The refresh token (for example previously obtained from ADAL 2.x)</param> </member> <member name="M:Microsoft.Identity.Client.PublicClientApplication.AcquireTokenByIntegratedWindowsAuthAsync(System.Collections.Generic.IEnumerable{System.String})"> <summary> Non-interactive request to acquire a security token for the signed-in user in Windows, via Integrated Windows Authentication. See https://aka.ms/msal-net-iwa. The account used in this overrides is pulled from the operating system as the current user principal name </summary> <remarks> On Windows Universal Platform, the following capabilities need to be provided: Enterprise Authentication, Private Networks (Client and Server), User Account Information Supported on .net desktop and UWP </remarks> <param name="scopes">Scopes requested to access a protected API</param> <returns>Authentication result containing a token for the requested scopes and for the currently logged-in user in Windows</returns> </member> <member name="M:Microsoft.Identity.Client.PublicClientApplication.AcquireTokenByIntegratedWindowsAuthAsync(System.Collections.Generic.IEnumerable{System.String},System.String)"> <summary> Non-interactive request to acquire a security token for the signed-in user in Windows, via Integrated Windows Authentication. See https://aka.ms/msal-net-iwa. The account used in this overrides is pulled from the operating system as the current user principal name </summary> <param name="scopes">Scopes requested to access a protected API</param> <param name="username">Identifier of the user account for which to acquire a token with Integrated Windows authentication. Generally in UserPrincipalName (UPN) format, e.g. john.doe@contoso.com</param> <returns>Authentication result containing a token for the requested scopes and for the currently logged-in user in Windows</returns> </member> <member name="M:Microsoft.Identity.Client.PublicClientApplication.#ctor(System.String,System.String,Microsoft.Identity.Client.TokenCache)"> <summary> Constructor to create application instance. This constructor is only available for Desktop and NetCore apps </summary> <param name="clientId">Client id of the application</param> <param name="authority">Default authority to be used for the application</param> <param name="userTokenCache">Instance of TokenCache.</param> </member> <member name="P:Microsoft.Identity.Client.PublicClientApplication.IsSystemWebViewAvailable"> <summary> </summary> </member> <member name="M:Microsoft.Identity.Client.PublicClientApplication.AcquireTokenInteractive(System.Collections.Generic.IEnumerable{System.String})"> <summary> Interactive request to acquire a token for the specified scopes. The interactive window will be parented to the specified window. The user will be required to select an account </summary> <param name="scopes">Scopes requested to access a protected API</param> <returns>A builder enabling you to add optional parameters before executing the token request</returns> <remarks>The user will be signed-in interactively if needed, and will consent to scopes and do multi-factor authentication if such a policy was enabled in the Azure AD tenant. You can also pass optional parameters by calling: <see cref="M:Microsoft.Identity.Client.AcquireTokenInteractiveParameterBuilder.WithPrompt(Microsoft.Identity.Client.Prompt)"/> to specify the user experience when signing-in, <see cref="M:Microsoft.Identity.Client.AcquireTokenInteractiveParameterBuilder.WithUseEmbeddedWebView(System.Boolean)"/> to specify if you want to use the embedded web browser or the system default browser, <see cref="M:Microsoft.Identity.Client.AcquireTokenInteractiveParameterBuilder.WithSystemWebViewOptions(Microsoft.Identity.Client.SystemWebViewOptions)"/> to configure the user experience when using the Default browser, <see cref="M:Microsoft.Identity.Client.AcquireTokenInteractiveParameterBuilder.WithAccount(Microsoft.Identity.Client.IAccount)"/> or <see cref="M:Microsoft.Identity.Client.AcquireTokenInteractiveParameterBuilder.WithLoginHint(System.String)"/> to prevent the select account dialog from appearing in the case you want to sign-in a specific account, <see cref="M:Microsoft.Identity.Client.AcquireTokenInteractiveParameterBuilder.WithExtraScopesToConsent(System.Collections.Generic.IEnumerable{System.String})"/> if you want to let the user pre-consent to additional scopes (which won't be returned in the access token), <see cref="M:Microsoft.Identity.Client.AbstractAcquireTokenParameterBuilder`1.WithExtraQueryParameters(System.Collections.Generic.Dictionary{System.String,System.String})"/> to pass additional query parameters to the STS, and one of the overrides of <see cref="M:Microsoft.Identity.Client.AbstractAcquireTokenParameterBuilder`1.WithAuthority(System.String,System.Boolean)"/> in order to override the default authority set at the application construction. Note that the overriding authority needs to be part of the known authorities added to the application construction. </remarks> </member> <member name="M:Microsoft.Identity.Client.PublicClientApplication.AcquireTokenWithDeviceCode(System.Collections.Generic.IEnumerable{System.String},System.Func{Microsoft.Identity.Client.DeviceCodeResult,System.Threading.Tasks.Task})"> <summary> Acquires a security token on a device without a Web browser, by letting the user authenticate on another device. This is done in two steps: <list type="bullet"> <item><description>The method first acquires a device code from the authority and returns it to the caller via the <paramref name="deviceCodeResultCallback"/>. This callback takes care of interacting with the user to direct them to authenticate (to a specific URL, with a code)</description></item> <item><description>The method then proceeds to poll for the security token which is granted upon successful login by the user based on the device code information</description></item> </list> See https://aka.ms/msal-device-code-flow. </summary> <param name="scopes">Scopes requested to access a protected API</param> <param name="deviceCodeResultCallback">Callback containing information to show the user about how to authenticate and enter the device code.</param> <returns>A builder enabling you to add optional parameters before executing the token request</returns> <remarks> You can also pass optional parameters by calling: <see cref="M:Microsoft.Identity.Client.AbstractAcquireTokenParameterBuilder`1.WithExtraQueryParameters(System.Collections.Generic.Dictionary{System.String,System.String})"/> to pass additional query parameters to the STS, and one of the overrides of <see cref="M:Microsoft.Identity.Client.AbstractAcquireTokenParameterBuilder`1.WithAuthority(System.String,System.Boolean)"/> in order to override the default authority set at the application construction. Note that the overriding authority needs to be part of the known authorities added to the application construction. </remarks> </member> <member name="M:Microsoft.Identity.Client.PublicClientApplication.AcquireTokenByIntegratedWindowsAuth(System.Collections.Generic.IEnumerable{System.String})"> <summary> Non-interactive request to acquire a security token for the signed-in user in Windows, via Integrated Windows Authentication. See https://aka.ms/msal-net-iwa. The account used in this overrides is pulled from the operating system as the current user principal name. </summary> <param name="scopes">Scopes requested to access a protected API</param> <returns>A builder enabling you to add optional parameters before executing the token request</returns> <remarks> You can also pass optional parameters by calling: <see cref="M:Microsoft.Identity.Client.AcquireTokenByIntegratedWindowsAuthParameterBuilder.WithUsername(System.String)"/> to pass the identifier of the user account for which to acquire a token with Integrated Windows authentication. This is generally in UserPrincipalName (UPN) format, e.g. john.doe@contoso.com. This is normally not needed, but some Windows administrators set policies preventing applications from looking-up the signed-in user in Windows, and in that case the username needs to be passed. You can also chain with <see cref="M:Microsoft.Identity.Client.AbstractAcquireTokenParameterBuilder`1.WithExtraQueryParameters(System.Collections.Generic.Dictionary{System.String,System.String})"/> to pass additional query parameters to the STS, and one of the overrides of <see cref="M:Microsoft.Identity.Client.AbstractAcquireTokenParameterBuilder`1.WithAuthority(System.String,System.Boolean)"/> in order to override the default authority set at the application construction. Note that the overriding authority needs to be part of the known authorities added to the application construction. </remarks> </member> <member name="M:Microsoft.Identity.Client.PublicClientApplication.AcquireTokenByUsernamePassword(System.Collections.Generic.IEnumerable{System.String},System.String,System.Security.SecureString)"> <summary> Non-interactive request to acquire a security token from the authority, via Username/Password Authentication. See https://aka.ms/msal-net-up for details. </summary> <param name="scopes">Scopes requested to access a protected API</param> <param name="username">Identifier of the user application requests token on behalf. Generally in UserPrincipalName (UPN) format, e.g. <c>john.doe@contoso.com</c></param> <param name="password">User password as a secure string.</param> <returns>A builder enabling you to add optional parameters before executing the token request</returns> <remarks>You can also pass optional parameters by chaining the builder with: <see cref="M:Microsoft.Identity.Client.AbstractAcquireTokenParameterBuilder`1.WithExtraQueryParameters(System.Collections.Generic.Dictionary{System.String,System.String})"/> to pass additional query parameters to the STS, and one of the overrides of <see cref="M:Microsoft.Identity.Client.AbstractAcquireTokenParameterBuilder`1.WithAuthority(System.String,System.Boolean)"/> in order to override the default authority set at the application construction. Note that the overriding authority needs to be part of the known authorities added to the application construction. </remarks> </member> <member name="T:Microsoft.Identity.Client.IConfidentialClientApplicationWithCertificate"> <summary> Component to be used with confidential client applications like Web Apps/API. This component supports Subject Name + Issuer authentication in order to help, in the future, Azure AD certificates rollover </summary> </member> <member name="M:Microsoft.Identity.Client.IConfidentialClientApplicationWithCertificate.AcquireTokenForClientWithCertificateAsync(System.Collections.Generic.IEnumerable{System.String})"> <summary> [V2 API] Acquires token from the service for the confidential client using the client credentials flow. (See https://aka.ms/msal-net-client-credentials) This method enables application developers to achieve easy certificates roll-over in Azure AD: this method will send the public certificate to Azure AD along with the token request, so that Azure AD can use it to validate the subject name based on a trusted issuer policy. This saves the application admin from the need to explicitly manage the certificate rollover (either via portal or powershell/CLI operation) </summary> <param name="scopes">Array of scopes requested for resource</param> <returns>Authentication result containing application token for the requested scopes</returns> </member> <member name="M:Microsoft.Identity.Client.IConfidentialClientApplicationWithCertificate.AcquireTokenForClientWithCertificateAsync(System.Collections.Generic.IEnumerable{System.String},System.Boolean)"> <summary> [V2 API] Acquires token from the service for the confidential client using the client credentials flow. (See https://aka.ms/msal-net-client-credentials) This method attempts to look up valid access token in the cache unless<paramref name="forceRefresh"/> is true This method enables application developers to achieve easy certificates roll-over in Azure AD: this method will send the public certificate to Azure AD along with the token request, so that Azure AD can use it to validate the subject name based on a trusted issuer policy. This saves the application admin from the need to explicitly manage the certificate rollover (either via portal or powershell/CLI operation) </summary> <param name="scopes">Array of scopes requested for resource</param> <param name="forceRefresh">If TRUE, API will ignore the access token in the cache and attempt to acquire new access token using client credentials</param> <returns>Authentication result containing application token for the requested scopes</returns> </member> <member name="M:Microsoft.Identity.Client.IConfidentialClientApplicationWithCertificate.AcquireTokenOnBehalfOfWithCertificateAsync(System.Collections.Generic.IEnumerable{System.String},Microsoft.Identity.Client.UserAssertion)"> <summary> [V2 API] Acquires token using On-Behalf-Of flow. (See https://aka.ms/msal-net-on-behalf-of) </summary> <param name="scopes">Array of scopes requested for resource</param> <param name="userAssertion">Instance of UserAssertion containing user's token.</param> <returns>Authentication result containing token of the user for the requested scopes</returns> </member> <member name="M:Microsoft.Identity.Client.IConfidentialClientApplicationWithCertificate.AcquireTokenOnBehalfOfWithCertificateAsync(System.Collections.Generic.IEnumerable{System.String},Microsoft.Identity.Client.UserAssertion,System.String)"> <summary> [V2 API] Acquires token using On-Behalf-Of flow. (See https://aka.ms/msal-net-on-behalf-of) </summary> <param name="scopes">Array of scopes requested for resource</param> <param name="userAssertion">Instance of UserAssertion containing user's token.</param> <param name="authority">Specific authority for which the token is requested. Passing a different value than configured does not change the configured value</param> <returns>Authentication result containing token of the user for the requested scopes</returns> </member> <member name="T:Microsoft.Identity.Client.UIBehavior"> <summary> Structure containing static members that you can use to specify how the interactive overrides of AcquireTokenAsync in <see cref="T:Microsoft.Identity.Client.PublicClientApplication"/> should prompt the user. </summary> </member> <member name="T:Microsoft.Identity.Client.Logger"> <summary> </summary> </member> <member name="P:Microsoft.Identity.Client.Logger.LogCallback"> <summary> </summary> </member> <member name="P:Microsoft.Identity.Client.Logger.Level"> <summary> </summary> </member> <member name="P:Microsoft.Identity.Client.Logger.PiiLoggingEnabled"> <summary> </summary> </member> <member name="P:Microsoft.Identity.Client.Logger.DefaultLoggingEnabled"> <summary> </summary> </member> <member name="T:Microsoft.Identity.Client.Telemetry"> <summary> </summary> </member> <member name="T:Microsoft.Identity.Client.Telemetry.Receiver"> <summary> </summary> </member> <member name="M:Microsoft.Identity.Client.Telemetry.GetInstance"> <summary> </summary> </member> <member name="P:Microsoft.Identity.Client.Telemetry.TelemetryOnFailureOnly"> <summary> </summary> </member> <member name="M:Microsoft.Identity.Client.Telemetry.RegisterReceiver(Microsoft.Identity.Client.Telemetry.Receiver)"> <summary> </summary> </member> <member name="M:Microsoft.Identity.Client.Telemetry.HasRegisteredReceiver"> <summary> </summary> </member> <member name="M:Microsoft.Identity.Client.Telemetry.Microsoft#Identity#Client#TelemetryCore#ITelemetryReceiver#HandleTelemetryEvents(System.Collections.Generic.List{System.Collections.Generic.Dictionary{System.String,System.String}})"> <summary> </summary> </member> <member name="T:Microsoft.Identity.Client.ClientAssertionCertificate"> <summary> Certificate for a client assertion. This class is used in one of the constructors of <see cref="T:Microsoft.Identity.Client.ClientCredential"/>. ClientCredential is itself used in the constructor of <see cref="T:Microsoft.Identity.Client.ConfidentialClientApplication"/> to pass to Azure AD a shared secret (registered in the Azure AD application) </summary> <seealso cref="T:Microsoft.Identity.Client.ClientCredential"/> for the constructor of <seealso cref="T:Microsoft.Identity.Client.ClientCredential"/> with a certificate, and <seealso cref="T:Microsoft.Identity.Client.ConfidentialClientApplication"/> <remarks>To understand the difference between public client applications and confidential client applications, see https://aka.ms/msal-net-client-applications</remarks> </member> <member name="M:Microsoft.Identity.Client.ClientAssertionCertificate.#ctor(System.Security.Cryptography.X509Certificates.X509Certificate2)"> <summary> Constructor to create certificate information used in <see cref="T:Microsoft.Identity.Client.ClientCredential"/> to instantiate a <see cref="T:Microsoft.Identity.Client.ClientCredential"/> used in the constructors of <see cref="T:Microsoft.Identity.Client.ConfidentialClientApplication"/> </summary> <param name="certificate">The X509 certificate used as credentials to prove the identity of the application to Azure AD.</param> </member> <member name="P:Microsoft.Identity.Client.ClientAssertionCertificate.MinKeySizeInBits"> <summary> Gets minimum X509 certificate key size in bits </summary> </member> <member name="P:Microsoft.Identity.Client.ClientAssertionCertificate.Certificate"> <summary> Gets the X509 certificate used as credentials to prove the identity of the application to Azure AD. </summary> </member> <member name="T:Microsoft.Identity.Client.ClientCredential"> <summary> Meant to be used in confidential client applications, an instance of <c>ClientCredential</c> is passed to the constructors of (<see cref="T:Microsoft.Identity.Client.ConfidentialClientApplication"/>) as credentials proving that the application (the client) is what it claims it is. These credentials can be either a client secret (an application password) or a certificate. This class has one constructor for each case. These credentials are added in the application registration portal (in the secret section). </summary> </member> <member name="M:Microsoft.Identity.Client.ClientCredential.#ctor(Microsoft.Identity.Client.ClientAssertionCertificate)"> <summary> Constructor of client (application) credentials from a <see cref="T:Microsoft.Identity.Client.ClientAssertionCertificate"/> </summary> <param name="certificate">contains information about the certificate previously shared with AAD at application registration to prove the identity of the application (the client) requesting the tokens.</param> </member> <member name="M:Microsoft.Identity.Client.ClientCredential.#ctor(System.String)"> <summary> Constructor of client (application) credentials from a client secret, also known as the application password. </summary> <param name="secret">Secret string previously shared with AAD at application registration to prove the identity of the application (the client) requesting the tokens.</param> </member> <member name="T:Microsoft.Identity.Client.UIParent"> <summary> </summary> </member> <member name="M:Microsoft.Identity.Client.UIParent.#ctor"> <summary> </summary> </member> <member name="M:Microsoft.Identity.Client.UIParent.#ctor(System.Object,System.Boolean)"> <summary> </summary> </member> <member name="M:Microsoft.Identity.Client.UIParent.IsSystemWebviewAvailable"> <summary> Checks Android device for chrome packages. Returns true if chrome package for launching system webview is enabled on device. Returns false if chrome package is not found. </summary> <example> The following code decides, in a Xamarin.Forms app, which browser to use based on the presence of the required packages. <code> bool useSystemBrowser = UIParent.IsSystemWebviewAvailable(); App.UIParent = new UIParent(Xamarin.Forms.Forms.Context as Activity, !useSystemBrowser); </code> </example> </member> <member name="T:Microsoft.Identity.Client.TokenCache"> <summary> Token cache storing access and refresh tokens for accounts This class is used in the constructors of <see cref="T:Microsoft.Identity.Client.PublicClientApplication"/> and <see cref="T:Microsoft.Identity.Client.ConfidentialClientApplication"/>. In the case of ConfidentialClientApplication, two instances are used, one for the user token cache, and one for the application token cache (in the case of applications using the client credential flows). </summary> </member> <member name="P:Microsoft.Identity.Client.TokenCache.HasStateChanged"> <summary> Gets or sets the flag indicating whether the state of the cache has changed. MSAL methods set this flag after any change. Caller applications should reset the flag after serializing and persisting the state of the cache. </summary> </member> <member name="M:Microsoft.Identity.Client.TokenCache.SerializeUnifiedAndAdalCache"> <summary> Serializes the entire token cache in both the ADAL V3 and unified cache formats. </summary> <returns>Serialized token cache <see cref="T:Microsoft.Identity.Client.Cache.CacheData"/></returns> <remarks> <see cref="M:Microsoft.Identity.Client.ITokenCacheSerializer.SerializeMsalV3"/>/<see cref="M:Microsoft.Identity.Client.ITokenCacheSerializer.DeserializeMsalV3(System.Byte[],System.Boolean)"/> is compatible with other MSAL libraries such as MSAL for Python and MSAL for Java. </remarks> </member> <member name="M:Microsoft.Identity.Client.TokenCache.DeserializeUnifiedAndAdalCache(Microsoft.Identity.Client.Cache.CacheData)"> <summary> Deserializes the token cache from a serialization blob in both format (ADAL V3 format, and unified cache format) </summary> <param name="cacheData">Array of bytes containing serialize cache data</param> <remarks> <see cref="M:Microsoft.Identity.Client.ITokenCacheSerializer.SerializeMsalV3"/>/<see cref="M:Microsoft.Identity.Client.ITokenCacheSerializer.DeserializeMsalV3(System.Byte[],System.Boolean)"/> is compatible with other MSAL libraries such as MSAL for Python and MSAL for Java. </remarks> </member> <member name="M:Microsoft.Identity.Client.TokenCache.Serialize"> <summary> Serializes using the <see cref="M:Microsoft.Identity.Client.ITokenCacheSerializer.SerializeMsalV2"/> serializer. Obsolete: Please use specialized Serialization methods. <see cref="M:Microsoft.Identity.Client.ITokenCacheSerializer.SerializeMsalV2"/> replaces <see cref="M:Microsoft.Identity.Client.TokenCache.Serialize"/>. <see cref="M:Microsoft.Identity.Client.ITokenCacheSerializer.SerializeMsalV3"/>/<see cref="M:Microsoft.Identity.Client.ITokenCacheSerializer.DeserializeMsalV3(System.Byte[],System.Boolean)"/> Is our recommended way of serializing/deserializing. <see cref="M:Microsoft.Identity.Client.ITokenCacheSerializer.SerializeAdalV3"/> For interoperability with ADAL.NET v3. </summary> <returns>array of bytes, <see cref="M:Microsoft.Identity.Client.ITokenCacheSerializer.SerializeMsalV2"/></returns> <remarks> <see cref="M:Microsoft.Identity.Client.ITokenCacheSerializer.SerializeMsalV3"/>/<see cref="M:Microsoft.Identity.Client.ITokenCacheSerializer.DeserializeMsalV3(System.Byte[],System.Boolean)"/> is compatible with other MSAL libraries such as MSAL for Python and MSAL for Java. </remarks> </member> <member name="M:Microsoft.Identity.Client.TokenCache.Deserialize(System.Byte[])"> <summary> Deserializes the token cache from a serialization blob in the unified cache format Obsolete: Please use specialized Deserialization methods. <see cref="M:Microsoft.Identity.Client.ITokenCacheSerializer.DeserializeMsalV2(System.Byte[])"/> replaces <see cref="M:Microsoft.Identity.Client.TokenCache.Deserialize(System.Byte[])"/> <see cref="M:Microsoft.Identity.Client.ITokenCacheSerializer.SerializeMsalV3"/>/<see cref="M:Microsoft.Identity.Client.ITokenCacheSerializer.DeserializeMsalV3(System.Byte[],System.Boolean)"/> Is our recommended way of serializing/deserializing. <see cref="M:Microsoft.Identity.Client.ITokenCacheSerializer.DeserializeAdalV3(System.Byte[])"/> For interoperability with ADAL.NET v3 </summary> <param name="msalV2State">Array of bytes containing serialized MSAL.NET V2 cache data</param> <remarks> <see cref="M:Microsoft.Identity.Client.ITokenCacheSerializer.SerializeMsalV3"/>/<see cref="M:Microsoft.Identity.Client.ITokenCacheSerializer.DeserializeMsalV3(System.Byte[],System.Boolean)"/> is compatible with other MSAL libraries such as MSAL for Python and MSAL for Java. <paramref name="msalV2State"/>Is a Json blob containing access tokens, refresh tokens, id tokens and accounts information. </remarks> </member> <member name="T:Microsoft.Identity.Client.TokenCache.TokenCacheNotification"> <summary> Notification for certain token cache interactions during token acquisition. This delegate is used in particular to provide a custom token cache serialization </summary> <param name="args">Arguments related to the cache item impacted</param> </member> <member name="M:Microsoft.Identity.Client.TokenCache.SerializeAdalV3"> <summary> This is removed in MSAL.NET v4. Read more: https://aka.ms/msal-net-4x-cache-breaking-change </summary> </member> <member name="M:Microsoft.Identity.Client.TokenCache.DeserializeAdalV3(System.Byte[])"> <summary> This is removed in MSAL.NET v4. Read more: https://aka.ms/msal-net-4x-cache-breaking-change </summary> </member> <member name="M:Microsoft.Identity.Client.TokenCache.SerializeMsalV2"> <summary> This is removed in MSAL.NET v4. Read more: https://aka.ms/msal-net-4x-cache-breaking-change </summary> </member> <member name="M:Microsoft.Identity.Client.TokenCache.DeserializeMsalV2(System.Byte[])"> <summary> This is removed in MSAL.NET v4. Read more: https://aka.ms/msal-net-4x-cache-breaking-change </summary> </member> <member name="M:Microsoft.Identity.Client.TokenCache.SerializeMsalV3"> <summary> This is removed in MSAL.NET v4. Read more: https://aka.ms/msal-net-4x-cache-breaking-change </summary> </member> <member name="M:Microsoft.Identity.Client.TokenCache.DeserializeMsalV3(System.Byte[],System.Boolean)"> <summary> This is removed in MSAL.NET v4. Read more: https://aka.ms/msal-net-4x-cache-breaking-change </summary> </member> <member name="M:Microsoft.Identity.Client.TokenCache.#ctor"> <summary> Constructor of a token cache. This constructor is left for compatibility with MSAL 2.x. The recommended way to get a cache is by using <see cref="P:Microsoft.Identity.Client.IClientApplicationBase.UserTokenCache"/> and <c>IConfidentialClientApplication.AppTokenCache</c> once the app is created. </summary> </member> <member name="M:Microsoft.Identity.Client.TokenCache.#ctor(Microsoft.Identity.Client.Core.IServiceBundle,Microsoft.Identity.Client.Cache.ILegacyCachePersistence,System.Boolean)"> <summary> This method is so we can inject test ILegacyCachePersistence... </summary> </member> <member name="M:Microsoft.Identity.Client.TokenCache.SetIosKeychainSecurityGroup(System.String)"> <inheritdoc /> </member> <member name="M:Microsoft.Identity.Client.TokenCache.Microsoft#Identity#Client#ITokenCacheInternal#GetAccountsAsync(System.String,Microsoft.Identity.Client.Core.RequestContext)"> <remarks> Get accounts should not make a network call, if possible. This can be achieved if all the environments in the token cache are known to MSAL, as MSAL keeps a list of known environments in <see cref="T:Microsoft.Identity.Client.Instance.Discovery.KnownMetadataProvider"/> </remarks> </member> <member name="P:Microsoft.Identity.Client.TokenCache.BeforeAccess"> <summary> Notification method called before any library method accesses the cache. </summary> </member> <member name="P:Microsoft.Identity.Client.TokenCache.BeforeWrite"> <summary> Notification method called before any library method writes to the cache. This notification can be used to reload the cache state from a row in database and lock that row. That database row can then be unlocked in the <see cref="P:Microsoft.Identity.Client.TokenCache.AfterAccess"/>notification. </summary> </member> <member name="P:Microsoft.Identity.Client.TokenCache.AfterAccess"> <summary> Notification method called after any library method accesses the cache. </summary> </member> <member name="M:Microsoft.Identity.Client.TokenCache.SetBeforeAccess(Microsoft.Identity.Client.TokenCacheCallback)"> <summary> Sets a delegate to be notified before any library method accesses the cache. This gives an option to the delegate to deserialize a cache entry for the application and accounts specified in the <see cref="T:Microsoft.Identity.Client.TokenCacheNotificationArgs"/>. See https://aka.ms/msal-net-token-cache-serialization </summary> <param name="beforeAccess">Delegate set in order to handle the cache deserialiation</param> <remarks>In the case where the delegate is used to deserialize the cache, it might want to call <see cref="M:Microsoft.Identity.Client.TokenCache.Deserialize(System.Byte[])"/></remarks> </member> <member name="M:Microsoft.Identity.Client.TokenCache.SetAfterAccess(Microsoft.Identity.Client.TokenCacheCallback)"> <summary> Sets a delegate to be notified after any library method accesses the cache. This gives an option to the delegate to serialize a cache entry for the application and accounts specified in the <see cref="T:Microsoft.Identity.Client.TokenCacheNotificationArgs"/>. See https://aka.ms/msal-net-token-cache-serialization </summary> <param name="afterAccess">Delegate set in order to handle the cache serialization in the case where the <see cref="P:Microsoft.Identity.Client.TokenCache.HasStateChanged"/> member of the cache is <c>true</c></param> <remarks>In the case where the delegate is used to serialize the cache entierely (not just a row), it might want to call <see cref="M:Microsoft.Identity.Client.TokenCache.Serialize"/></remarks> </member> <member name="M:Microsoft.Identity.Client.TokenCache.SetBeforeWrite(Microsoft.Identity.Client.TokenCacheCallback)"> <summary> Sets a delegate called before any library method writes to the cache. This gives an option to the delegate to reload the cache state from a row in database and lock that row. That database row can then be unlocked in the delegate registered with <see cref="M:Microsoft.Identity.Client.TokenCache.SetAfterAccess(Microsoft.Identity.Client.TokenCacheCallback)"/> </summary> <param name="beforeWrite">Delegate set in order to prepare the cache serialization</param> </member> <member name="M:Microsoft.Identity.Client.TokenCache.SetBeforeAccessAsync(System.Func{Microsoft.Identity.Client.TokenCacheNotificationArgs,System.Threading.Tasks.Task})"> <summary> </summary> <param name="beforeAccess"></param> </member> <member name="M:Microsoft.Identity.Client.TokenCache.SetAfterAccessAsync(System.Func{Microsoft.Identity.Client.TokenCacheNotificationArgs,System.Threading.Tasks.Task})"> <summary> </summary> <param name="afterAccess"></param> </member> <member name="M:Microsoft.Identity.Client.TokenCache.SetBeforeWriteAsync(System.Func{Microsoft.Identity.Client.TokenCacheNotificationArgs,System.Threading.Tasks.Task})"> <summary> </summary> <param name="beforeWrite"></param> </member> <member name="T:Microsoft.Identity.Client.MsalClientException"> <summary> This exception class represents errors that are local to the library or the device. Contrary to <see cref="T:Microsoft.Identity.Client.MsalServiceException"/> which represent errors happening from the Azure AD service or the network. For more details, see https://aka.ms/msal-net-exceptions </summary> </member> <member name="M:Microsoft.Identity.Client.MsalClientException.#ctor(System.String)"> <summary> Initializes a new instance of the exception class with a specified error code. </summary> <param name="errorCode"> The error code returned by the service or generated by client. This is the code you can rely on for exception handling.</param> </member> <member name="M:Microsoft.Identity.Client.MsalClientException.#ctor(System.String,System.String)"> <summary> Initializes a new instance of the exception class with a specified error code and error message. </summary> <param name="errorCode"> The error code returned by the service or generated by client. This is the code you can rely on for exception handling. </param> <param name="errorMessage">The error message that explains the reason for the exception.</param> </member> <member name="M:Microsoft.Identity.Client.MsalClientException.#ctor(System.String,System.String,System.Exception)"> <summary> Initializes a new instance of the exception class with a specified error code, error message and inner exception. </summary> <param name="errorCode"> The error code returned by the service or generated by client. This is the code you can rely on for exception handling. </param> <param name="errorMessage">The error message that explains the reason for the exception.</param> <param name="innerException"></param> </member> <member name="T:Microsoft.Identity.Client.MsalError"> <summary> Error code returned as a property in MsalException </summary> </member> <member name="F:Microsoft.Identity.Client.MsalError.InvalidGrantError"> <summary> Standard OAuth2 protocol error code. It indicates that the application needs to expose the UI to the user so that the user does an interactive action in order to get a new token. <para>Mitigation:</para> If your application is a <see cref="T:IPublicClientApplication"/> call <c>AcquireTokenInteractive</c> perform an interactive authentication. If your application is a <see cref="T:ConfidentialClientApplication"/> chances are that the Claims member of the exception is not empty. See <see cref="P:MsalServiceException.Claims"/> for the right mitigation </summary> </member> <member name="F:Microsoft.Identity.Client.MsalError.NoTokensFoundError"> <summary> No token was found in the token cache. <para>Mitigation:</para> If your application is a <see cref="T:Microsoft.Identity.Client.IPublicClientApplication"/> call <c>AcquireTokenInteractive</c> so that the user of your application signs-in and accepts consent. If your application is a <see cref="T:ConfidentialClientApplication"/>.: <list type="bullet"> <item> If it's a Web App you should have previously called <see cref="M:Microsoft.Identity.Client.IConfidentialClientApplication.AcquireTokenByAuthorizationCode(System.Collections.Generic.IEnumerable{System.String},System.String)"/> as described in https://aka.ms/msal-net-authorization-code. You need to make sure that you have requested the right scopes. For details See https://github.com/Azure-Samples/ms-identity-aspnetcore-webapp-tutorial </item> <item>This error should not happen in Web APIs</item> </list> </summary> </member> <member name="F:Microsoft.Identity.Client.MsalError.UserNullError"> <summary> This error code comes back from <see cref="M:Microsoft.Identity.Client.IClientApplicationBase.AcquireTokenSilent(System.Collections.Generic.IEnumerable{System.String},Microsoft.Identity.Client.IAccount)"/> calls when a null user is passed as the <c>account</c> parameter. This can be because you have called AcquireTokenSilent with an <c>account</c> parameter set to <c>accounts.FirstOrDefault()</c> but <c>accounts</c> is empty. <para>Mitigation</para> Pass a different account, or otherwise call <see cref="M:Microsoft.Identity.Client.IPublicClientApplication.AcquireTokenInteractive(System.Collections.Generic.IEnumerable{System.String})"/> </summary> </member> <member name="F:Microsoft.Identity.Client.MsalError.NoAccountForLoginHint"> <summary> This error code denotes that no account was found having the given login hint. <para>What happens?</para> <see cref="M:Microsoft.Identity.Client.IClientApplicationBase.AcquireTokenSilent(System.Collections.Generic.IEnumerable{System.String},System.String)"/> or <see cref="M:Microsoft.Identity.Client.AcquireTokenInteractiveParameterBuilder.WithLoginHint(System.String)"/> was called with a <c>loginHint</c> parameter which does not match any account in <see cref="M:Microsoft.Identity.Client.IClientApplicationBase.GetAccountsAsync"/> <para>Mitigation</para> If you are certain about the loginHint, call <see cref="M:Microsoft.Identity.Client.IPublicClientApplication.AcquireTokenInteractive(System.Collections.Generic.IEnumerable{System.String})"/> </summary> </member> <member name="F:Microsoft.Identity.Client.MsalError.MultipleAccountsForLoginHint"> <summary> This error code denotes that multiple accounts were found having the same login hint and MSAL cannot choose one. Please use <see cref="M:Microsoft.Identity.Client.AcquireTokenInteractiveParameterBuilder.WithAccount(Microsoft.Identity.Client.IAccount)"/> to specify the account </summary> </member> <member name="F:Microsoft.Identity.Client.MsalError.TokenCacheNullError"> <summary> This error code comes back from <see cref="M:Microsoft.Identity.Client.ClientApplicationBase.AcquireTokenSilent(System.Collections.Generic.IEnumerable{System.String},Microsoft.Identity.Client.IAccount)"/> calls when the user cache had not been set in the application constructor. This should never happen in MSAL.NET 3.x as the cache is created by the application </summary> </member> <member name="F:Microsoft.Identity.Client.MsalError.NoPromptFailedError"> <summary> One of two conditions was encountered: <list type="bullet"> <item><description>The <c>Prompt.NoPrompt</c> was passed in an interactive token call, but the constraint could not be honored because user interaction is required, for instance because the user needs to re-sign-in, give consent for more scopes, or perform multiple factor authentication. </description></item> <item><description> An error occurred during a silent web authentication that prevented the authentication flow from completing in a short enough time frame. </description></item> </list> <para>Remediation:</para>call <c>AcquireTokenInteractive</c> so that the user of your application signs-in and accepts consent. </summary> </member> <member name="F:Microsoft.Identity.Client.MsalError.ServiceNotAvailable"> <summary> Service is unavailable and returned HTTP error code within the range of 500-599 <para>Mitigation</para> you can retry after a delay. </summary> </member> <member name="F:Microsoft.Identity.Client.MsalError.RequestTimeout"> <summary> The Http Request to the STS timed out. <para>Mitigation</para> you can retry after a delay. </summary> </member> <member name="F:Microsoft.Identity.Client.MsalError.UpnRequired"> <summary> loginHint should be a Upn <para>What happens?</para> An override of a token acquisition operation was called in <see cref="T:IPublicClientApplication"/> which takes a <c>loginHint</c> as a parameters, but this login hint was not using the UserPrincipalName (UPN) format, e.g. <c>john.doe@contoso.com</c> expected by the service <para>Remediation</para> Make sure in your code that you enforce <c>loginHint</c> to be a UPN </summary> </member> <member name="F:Microsoft.Identity.Client.MsalError.MissingPassiveAuthEndpoint"> <summary> No passive auth endpoint was found in the OIDC configuration of the authority <para>What happens?</para> When the libraries go to the authority and get its open id connect configuration it expects to find a Passive Auth Endpoint entry, and could not find it. <para>remediation</para> Check that the authority configured for the application, or passed on some overrides of token acquisition tokens supporting authority override is correct </summary> </member> <member name="F:Microsoft.Identity.Client.MsalError.InvalidAuthority"> <summary> Invalid authority <para>What happens</para> When the library attempts to discover the authority and get the endpoints it needs to acquire a token, it got an un-authorize HTTP code or an unexpected response <para>remediation</para> Check that the authority configured for the application, or passed on some overrides of token acquisition tokens supporting authority override is correct </summary> </member> <member name="F:Microsoft.Identity.Client.MsalError.InvalidAuthorityType"> <summary> Invalid authority type. MSAL.NET does not know how to interact with the authority specified when the application was built. <para>Mitigation</para> Use a different authority </summary> </member> <member name="F:Microsoft.Identity.Client.MsalError.UnknownError"> <summary> Unknown Error occured. <para>Mitigation</para> None. You might want to inform the end user. </summary> </member> <member name="F:Microsoft.Identity.Client.MsalError.AuthenticationFailed"> <summary> Authentication failed. <para>What happens?</para> The authentication failed. For instance the user did not enter the right password <para>Mitigation</para> Inform the user to retry. </summary> </member> <member name="F:Microsoft.Identity.Client.MsalError.AuthorityValidationFailed"> <summary> Authority validation failed. <para>What happens?</para> The validation of the authority failed. This might be because the authority is not compliant with the OIDC standard, or there might be a security issue <para>Mitigation</para> Use a different authority. If you are absolutely sure that you can trust the authority you can use the <see cref="M:Microsoft.Identity.Client.AbstractApplicationBuilder`1.WithAuthority(Microsoft.Identity.Client.AadAuthorityAudience,System.Boolean)"/> passing the <c>validateAuthority</c> parameter to <c>false</c> (not recommended) </summary> </member> <member name="F:Microsoft.Identity.Client.MsalError.InvalidOwnerWindowType"> <summary> Invalid owner window type. <para>What happens?</para> You used <c>"AcquireTokenInteractiveParameterBuilder.WithParentActivityOrWindow(object)</c> but the parameter you passed is invalid. <para>Remediation</para> On .NET Standard, the expected object is an <c>Activity</c> on Android, a <c>UIViewController</c> on iOS, a <c>NSWindow</c> on MAC, and a <c>IWin32Window</c> or <c>IntPr</c> on Windows. If you are in a WPF application, you can use <c>WindowInteropHelper(wpfControl).Handle</c> to get the window handle associated with a WPF control </summary> </member> <member name="F:Microsoft.Identity.Client.MsalError.InvalidServiceUrl"> <summary> Invalid service URL. </summary> </member> <member name="F:Microsoft.Identity.Client.MsalError.EncodedTokenTooLong"> <summary> Encoded token too long. <para>What happens</para> In a confidential client application call, the client assertion built by MSAL is longer than the max possible length for a JWT token. </summary> </member> <member name="F:Microsoft.Identity.Client.MsalError.NoDataFromSts"> <summary> No data from STS. </summary> </member> <member name="F:Microsoft.Identity.Client.MsalError.UserMismatch"> <summary> User Mismatch. </summary> </member> <member name="F:Microsoft.Identity.Client.MsalError.FailedToRefreshToken"> <summary> Failed to refresh token. <para>What happens?</para> The token could not be refreshed. This can be because the user has not used the application for a long time. and therefore the refresh token maintained in the token cache has expired <para>Mitigation</para> If you are in a public client application, that supports interactivity, send an interactive request <see cref="M:Microsoft.Identity.Client.IPublicClientApplication.AcquireTokenInteractive(System.Collections.Generic.IEnumerable{System.String})"/>. Otherwise, use a different method to acquire tokens. </summary> </member> <member name="F:Microsoft.Identity.Client.MsalError.FailedToAcquireTokenSilentlyFromBroker"> <summary> Failed to acquire token silently. Used in broker scenarios. <para>What happens</para> you called <see cref="M:Microsoft.Identity.Client.IClientApplicationBase.AcquireTokenSilent(System.Collections.Generic.IEnumerable{System.String},Microsoft.Identity.Client.IAccount)"/> or <see cref="M:Microsoft.Identity.Client.IClientApplicationBase.AcquireTokenSilent(System.Collections.Generic.IEnumerable{System.String},System.String)"/> and your mobile (Xamarin) application leverages the broker (Microsoft Authenticator or Microsoft Company Portal), but the broker was not able to acquire the token silently. <para>Mitigation</para> Call <see cref="M:Microsoft.Identity.Client.IPublicClientApplication.AcquireTokenInteractive(System.Collections.Generic.IEnumerable{System.String})"/> </summary> </member> <member name="F:Microsoft.Identity.Client.MsalError.RedirectUriValidationFailed"> <summary> RedirectUri validation failed. <para>What happens?</para> The redirect URI / reply URI is invalid <para>How to fix</para> Pass a valid redirect URI. </summary> </member> <member name="F:Microsoft.Identity.Client.MsalError.AuthenticationUiFailed"> <summary> The request could not be preformed because of an unknown failure in the UI flow.* <para>Mitigation</para> Inform the user. </summary> </member> <member name="F:Microsoft.Identity.Client.MsalError.InternalError"> <summary> Internal error </summary> </member> <member name="F:Microsoft.Identity.Client.MsalError.AccessingWsMetadataExchangeFailed"> <summary> Accessing WS Metadata Exchange Failed. <para>What happens?</para> You tried to use <see cref="M:Microsoft.Identity.Client.IPublicClientApplication.AcquireTokenByUsernamePassword(System.Collections.Generic.IEnumerable{System.String},System.String,System.Security.SecureString)"/> and the account is a federated account. <para>Mitigation</para> None. The WS metadata was not found or does not correspond to what was expected. </summary> </member> <member name="F:Microsoft.Identity.Client.MsalError.FederatedServiceReturnedError"> <summary> Federated service returned error. <para>Mitigation</para> None. The federated service returned an error. You can try to look at the Body of the exception for a better understanding of the error and choose the mitigation </summary> </member> <member name="F:Microsoft.Identity.Client.MsalError.UserRealmDiscoveryFailed"> <summary> User Realm Discovery Failed. </summary> </member> <member name="F:Microsoft.Identity.Client.MsalError.MissingFederationMetadataUrl"> <summary> Federation Metadata Url is missing for federated user. </summary> </member> <member name="F:Microsoft.Identity.Client.MsalError.ParsingWsMetadataExchangeFailed"> <summary> Parsing WS Metadata Exchange Failed. </summary> </member> <member name="F:Microsoft.Identity.Client.MsalError.WsTrustEndpointNotFoundInMetadataDocument"> <summary> WS-Trust Endpoint Not Found in Metadata Document. </summary> </member> <member name="F:Microsoft.Identity.Client.MsalError.ParsingWsTrustResponseFailed"> <summary> You can get this error when using <see cref="M:Microsoft.Identity.Client.IPublicClientApplication.AcquireTokenByUsernamePassword(System.Collections.Generic.IEnumerable{System.String},System.String,System.Security.SecureString)"/> In the case of a Federated user (that is owned by a federated IdP, as opposed to a managed user owned in an Azure AD tenant) ID3242: The security token could not be authenticated or authorized. The user does not exist or has entered the wrong password </summary> </member> <member name="F:Microsoft.Identity.Client.MsalError.UnknownUserType"> <summary> <para>What happens</para> You can get this error when using <see cref="M:Microsoft.Identity.Client.IPublicClientApplication.AcquireTokenByUsernamePassword(System.Collections.Generic.IEnumerable{System.String},System.String,System.Security.SecureString)"/> The user is not recognized as a managed user, or a federated user. Azure AD was not able to identify the IdP that needs to process the user <para>Mitigation</para> Inform the user. the login that the user provided might be incorrect. </summary> </member> <member name="F:Microsoft.Identity.Client.MsalError.UnknownUser"> <summary> <para>What happens</para> You can get this error when using <see cref="M:Microsoft.Identity.Client.IPublicClientApplication.AcquireTokenByUsernamePassword(System.Collections.Generic.IEnumerable{System.String},System.String,System.Security.SecureString)"/> The user is not known by the IdP <para>Mitigation</para> Inform the user. The login that the user provided might be incorrect (for instance empty) </summary> </member> <member name="F:Microsoft.Identity.Client.MsalError.GetUserNameFailed"> <summary> Failed to get user name. </summary> </member> <member name="F:Microsoft.Identity.Client.MsalError.PasswordRequiredForManagedUserError"> <summary> Password is required for managed user. <para>What happens?</para> If can got this error when using <see cref="M:Microsoft.Identity.Client.IPublicClientApplication.AcquireTokenByUsernamePassword(System.Collections.Generic.IEnumerable{System.String},System.String,System.Security.SecureString)"/> and you (or the user) did not provide a password. </summary> </member> <member name="F:Microsoft.Identity.Client.MsalError.InvalidRequest"> <summary> Request is invalid. <para>What happens?</para> This can happen because you are using a token acquisition method which is not compatible with the authority. For instance: you called <see cref="M:Microsoft.Identity.Client.IPublicClientApplication.AcquireTokenByUsernamePassword(System.Collections.Generic.IEnumerable{System.String},System.String,System.Security.SecureString)"/> but you used an authority ending with '/common' or '/consumers' as this requires a tenanted authority or '/organizations'. <para>Mitigation</para> Adjust the authority to the AcquireTokenXX method you use (don't use 'common' or 'consumers' with <see cref="M:Microsoft.Identity.Client.IPublicClientApplication.AcquireTokenByUsernamePassword(System.Collections.Generic.IEnumerable{System.String},System.String,System.Security.SecureString)"/> <see cref="M:Microsoft.Identity.Client.IPublicClientApplication.AcquireTokenByIntegratedWindowsAuth(System.Collections.Generic.IEnumerable{System.String})"/> </summary> </member> <member name="F:Microsoft.Identity.Client.MsalError.UapCannotFindDomainUser"> <summary> Cannot access the user from the OS (UWP) <para>What happens</para> You called <see cref="M:Microsoft.Identity.Client.IPublicClientApplication.AcquireTokenByIntegratedWindowsAuth(System.Collections.Generic.IEnumerable{System.String})"/>, but the domain user name could not be found. <para>Mitigation</para> This might be because you need to add more capabilities to your UWP application in the Package.appxmanifest. See https://aka.ms/msal-net-uwp </summary> </member> <member name="F:Microsoft.Identity.Client.MsalError.UapCannotFindUpn"> <summary> Cannot get the user from the OS (UWP) <para>What happens</para> You called <see cref="M:Microsoft.Identity.Client.IPublicClientApplication.AcquireTokenByIntegratedWindowsAuth(System.Collections.Generic.IEnumerable{System.String})"/>, but the domain user name could not be found. <para>Mitigation</para> This might be because you need to add more capabilities to your UWP application in the Package.appxmanifest. See https://aka.ms/msal-net-uwp </summary> </member> <member name="F:Microsoft.Identity.Client.MsalError.NonParsableOAuthError"> <summary> An error response was returned by the OAuth2 server and it could not be parsed </summary> </member> <member name="F:Microsoft.Identity.Client.MsalError.CodeExpired"> <summary> <para>What happens?</para> In the context of Device code flow (See https://aka.ms/msal-net-device-code-flow), this error happens when the device code expired before the user signed-in on another device (this is usually after 15 mins). <para>Mitigation</para> None. Inform the user that they took too long to sign-in at the provided URL and enter the provided code. </summary> </member> <member name="F:Microsoft.Identity.Client.MsalError.IntegratedWindowsAuthNotSupportedForManagedUser"> <summary> Integrated Windows Auth is only supported for "federated" users </summary> </member> <member name="F:Microsoft.Identity.Client.MsalError.ActivityRequired"> <summary> TODO: UPDATE DOCUMENTATION! On Android, you need to call <c>AcquireTokenInteractiveParameterBuilder.WithParentActivityOrWindow(object)</c> passing the activity. See https://aka.ms/msal-interactive-android </summary> </member> <member name="F:Microsoft.Identity.Client.MsalError.BrokerResponseHashMismatch"> <summary> Broker response hash did not match </summary> </member> <member name="F:Microsoft.Identity.Client.MsalError.BrokerResponseReturnedError"> <summary> Broker response returned an error </summary> </member> <member name="F:Microsoft.Identity.Client.MsalError.BrokerNonceMismatch"> <summary> Broker response nonce does not match the request nonce sent by MSAL.NET for iOS broker >= v6.3.19 </summary> </member> <member name="F:Microsoft.Identity.Client.MsalError.CannotInvokeBroker"> <summary> MSAL is not able to invoke the broker. Possible reasons are the broker is not installed on the user's device, or there were issues with the UiParent or CallerViewController being null. See https://aka.ms/msal-brokers </summary> </member> <member name="F:Microsoft.Identity.Client.MsalError.HttpStatusNotFound"> <summary> Error code used when the HTTP response returns HttpStatusCode.NotFound </summary> </member> <member name="F:Microsoft.Identity.Client.MsalError.HttpStatusCodeNotOk"> <summary> ErrorCode used when the HTTP response returns something different from 200 (OK) </summary> <remarks> HttpStatusCode.NotFound have a specific error code. <see cref="F:Microsoft.Identity.Client.MsalError.HttpStatusNotFound"/> </remarks> </member> <member name="F:Microsoft.Identity.Client.MsalError.CustomWebUiReturnedInvalidUri"> <summary> Error code used when the <see cref="T:Microsoft.Identity.Client.Extensibility.ICustomWebUi"/> has returned an uri, but it is invalid - it is either null or has no code. Consider throwing an exception if you are unable to intercept the uri containing the code. </summary> </member> <member name="F:Microsoft.Identity.Client.MsalError.CustomWebUiRedirectUriMismatch"> <summary> Error code used when the CustomWebUI has returned an uri, but it does not match the Authority and AbsolutePath of the configured redirect uri. </summary> </member> <member name="F:Microsoft.Identity.Client.MsalError.AccessDenied"> <summary> Access denied. </summary> </member> <member name="F:Microsoft.Identity.Client.MsalError.CannotAccessUserInformationOrUserNotDomainJoined"> <summary> Cannot Access User Information or the user is not a user domain. <para>What happens?</para> You tried to use <see cref="M:Microsoft.Identity.Client.IPublicClientApplication.AcquireTokenByIntegratedWindowsAuth(System.Collections.Generic.IEnumerable{System.String})"/> but the user is not a domain user (the machine is not domain or AAD joined) </summary> </member> <member name="F:Microsoft.Identity.Client.MsalError.DefaultRedirectUriIsInvalid"> <summary> RedirectUri validation failed. </summary> </member> <member name="F:Microsoft.Identity.Client.MsalError.NoRedirectUri"> <summary> No Redirect URI. <para>What happens?</para> You need to provide a Reply URI / Redirect URI, but have not called <see cref="M:Microsoft.Identity.Client.AbstractApplicationBuilder`1.WithRedirectUri(System.String)"/> </summary> </member> <member name="F:Microsoft.Identity.Client.MsalError.MultipleTokensMatchedError"> <summary> Multiple Tokens were matched. <para>What happens?</para>This exception happens in the case of applications managing several identities, when calling <see cref="M:Microsoft.Identity.Client.ClientApplicationBase.AcquireTokenSilent(System.Collections.Generic.IEnumerable{System.String},Microsoft.Identity.Client.IAccount)"/> or one of its overrides and the user token cache contains multiple tokens for this client application and the specified Account, but from different authorities. <para>Mitigation [App Development]</para>specify the authority to use in the acquire token operation </summary> </member> <member name="F:Microsoft.Identity.Client.MsalError.NonHttpsRedirectNotSupported"> <summary> Non HTTPS redirects are not supported <para>What happens?</para>This error happens when you have registered a non-HTTPS redirect URI for the public client application other than <c>urn:ietf:wg:oauth:2.0:oob</c> <para>Mitigation [App registration and development]</para>Register in the application a Reply URL starting with "https://" </summary> </member> <member name="F:Microsoft.Identity.Client.MsalError.NetworkNotAvailableError"> <summary> The request could not be preformed because the network is down. <para>Mitigation [App development]</para> In the application you could either inform the user that there are network issues or retry later </summary> </member> <member name="F:Microsoft.Identity.Client.MsalError.B2CAuthorityHostMismatch"> <summary> The B2C authority host is not the same as the one used when creating the client application. </summary> </member> <member name="F:Microsoft.Identity.Client.MsalError.DuplicateQueryParameterError"> <summary> Duplicate query parameter was found in extraQueryParameters. <para>What happens?</para> You have used <c>extraQueryParameter</c> of overrides of token acquisition operations in public client and confidential client application and are passing a parameter which is already present in the URL (either because you had it in another way, or the library added it). <para>Mitigation [App Development]</para> RemoveAccount the duplicate parameter from the token acquisition override. </summary> <seealso cref="M:Microsoft.Identity.Client.ConfidentialClientApplication.GetAuthorizationRequestUrlAsync(System.Collections.Generic.IEnumerable{System.String},System.String,System.String,System.String,System.Collections.Generic.IEnumerable{System.String},System.String)"/> </member> <member name="F:Microsoft.Identity.Client.MsalError.AuthenticationUiFailedError"> <summary> The request could not be performed because of a failure in the UI flow. <para>What happens?</para>The library failed to invoke the Web View required to perform interactive authentication. The exception might include the reason <para>Mitigation</para>If the exception includes the reason, you could inform the user. This might be, for instance, a browser implementing chrome tabs is missing on the Android phone (that's only an example: this exception can apply to other platforms as well) </summary> </member> <member name="F:Microsoft.Identity.Client.MsalError.AuthenticationCanceledError"> <summary> Authentication canceled. <para>What happens?</para>The user had canceled the authentication, for instance by closing the authentication dialog <para>Mitigation</para>None, you cannot get a token to call the protected API. You might want to inform the user </summary> </member> <member name="F:Microsoft.Identity.Client.MsalError.JsonParseError"> <summary> JSON parsing failed. <para>What happens?</para>A JSON blob read from the token cache or received from the STS was not parseable. This can happen when reading the token cache, or receiving an IDToken from the STS. <para>Mitigation</para>Make sure that the token cache was not tampered </summary> </member> <member name="F:Microsoft.Identity.Client.MsalError.InvalidJwtError"> <summary> JWT was invalid. <para>What happens?</para>The library expected a JWT (for instance a token from the cache, or received from the STS), but the format is invalid <para>Mitigation</para>Make sure that the token cache was not tampered </summary> </member> <member name="F:Microsoft.Identity.Client.MsalError.StateMismatchError"> <summary> State returned from the STS was different from the one sent by the library <para>What happens?</para>The library sends to the STS a state associated to a request, and expects the reply to be consistent. This errors indicates that the reply is not associated with the request. This could indicate an attempt to replay a response <para>Mitigation</para> None </summary> </member> <member name="F:Microsoft.Identity.Client.MsalError.TenantDiscoveryFailedError"> <summary> Tenant discovery failed. <para>What happens?</para>While reading the OpenId configuration associated with the authority, the Authorize endpoint, or Token endpoint, or the Issuer was not found <para>Mitigation</para>This indicates and authority which is not Open ID Connect compliant. Specify a different authority in the constructor of the application, or the token acquisition override /// </summary> </member> <member name="F:Microsoft.Identity.Client.MsalError.PlatformNotSupported"> <summary> The library is loaded on a platform which is not supported. </summary> </member> <member name="F:Microsoft.Identity.Client.MsalError.InvalidAuthorizationUri"> <summary> An authorization Uri has been intercepted, but it cannot be parsed. See the log for more details. </summary> </member> <member name="F:Microsoft.Identity.Client.MsalError.LoopbackRedirectUri"> <summary> <para>What happens?</para>The current redirect Url is not a loopback Url. <para>Mitigation</para> To use the OS browser, a loopback url, with or without a port, must be configured both during app registration and when initializing the IPublicClientApplication object. See https://aka.ms/msal-net-os-browser for details. </summary> </member> <member name="F:Microsoft.Identity.Client.MsalError.LoopbackResponseUriMismatch"> <summary> <para>What happens?</para>MSAL has intercepted a Uri possibly containing an authorization code, but it does not match the configured redirect url. <para>Mitigation</para>If you are using an ICustomWebUi implementation, make sure the redirect url matches the url containing the auth code. If you are not using an ICustomWebUI, this could be a man-in-the middle attack. </summary> </member> <member name="F:Microsoft.Identity.Client.MsalError.LinuxXdgOpen"> <summary> <para>What happens?</para>MSAL tried to open the browser on Linux using the xdg-open tool, but failed. <para>Mitigation</para>Make sure you can open a page using xdg-open tool. See https://aka.ms/msal-net-os-browser for details. </summary> </member> <member name="F:Microsoft.Identity.Client.MsalError.WebviewUnavailable"> <summary> The selected webview is not available on this platform. You can switch to a different webview using <see cref="M:Microsoft.Identity.Client.AcquireTokenInteractiveParameterBuilder.WithUseEmbeddedWebView(System.Boolean)"/>. See https://aka.ms/msal-net-os-browser for details </summary> </member> <member name="F:Microsoft.Identity.Client.MsalError.SystemWebviewOptionsNotApplicable"> <summary> <para>What happens?</para>You configured MSAL interactive authentication to use an embedded webview and you also configured <see cref="T:Microsoft.Identity.Client.SystemWebViewOptions"/>. These are mutually exclusive. <para>Mitigation</para>Either set <see cref="M:Microsoft.Identity.Client.AcquireTokenInteractiveParameterBuilder.WithUseEmbeddedWebView(System.Boolean)"/> to true or do not use <see cref="M:Microsoft.Identity.Client.AcquireTokenInteractiveParameterBuilder.WithSystemWebViewOptions(Microsoft.Identity.Client.SystemWebViewOptions)"/> </summary> </member> <member name="F:Microsoft.Identity.Client.MsalError.ClientCredentialAuthenticationTypesAreMutuallyExclusive"> <summary> <para>What happens?</para>You configured MSAL confidential client authentication with more than one authentication type (Certificate, Secret, Client Assertion) </summary> </member> <member name="F:Microsoft.Identity.Client.MsalError.BasicAction"> <summary> Issue can be resolved by user interaction during the interactive authentication flow. See https://aka.ms/msal-net-UiRequiredException for details </summary> </member> <member name="F:Microsoft.Identity.Client.MsalError.AdditionalAction"> <summary> Issue can be resolved by additional remedial interaction with the system, outside of the interactive authentication flow. Interactive authentication is still required to inform the user of what is needed. Calling application may choose to hide flows that require additional_action if the user is unlikely to complete the remedial action. Example: </summary> </member> <member name="F:Microsoft.Identity.Client.MsalError.MessageOnly"> <summary> Issue cannot be resolved at this time. Launching interactive authentication flow will show a message explaining the condition. </summary> </member> <member name="F:Microsoft.Identity.Client.MsalError.UserPasswordExpired"> <summary> User's password has expired. </summary> </member> <member name="F:Microsoft.Identity.Client.MsalError.ConsentRequired"> <summary> User consent is missing, or has been revoked. </summary> </member> <member name="F:Microsoft.Identity.Client.MsalError.BadToken"> <summary> Internal to MSALs. Indicates that no further silent calls should be made with this refresh token. </summary> </member> <member name="F:Microsoft.Identity.Client.MsalError.TokenExpired"> <summary> Internal to MSALs. Indicates that no further silent calls should be made with this refresh token. </summary> </member> <member name="F:Microsoft.Identity.Client.MsalError.ProtectionPolicyRequired"> <summary> Internal to MSALs. Needed in ios/android to complete the end-to-end true MAM flow. This suberror code is re-mapped to a different top level error code (IntuneAppProtectionPoliciesRequired), and not InteractionRequired </summary> </member> <member name="F:Microsoft.Identity.Client.MsalError.ClientMismatch"> <summary> Internal to MSALs. Used in scenarios where an application is using family refresh token even though it is not part of FOCI (or vice versa). Needed to handle cases where app changes FOCI membership after being shipped. This is handled internally and doesn't need to be exposed to the calling app. Please see FOCI design document for more details. </summary> </member> <member name="F:Microsoft.Identity.Client.MsalError.DeviceAuthenticationFailed"> <summary> Internal to MSALs. Indicates that device should be re-registered. </summary> </member> <member name="F:Microsoft.Identity.Client.MsalError.InvalidInstance"> <summary> AAD service error indicating that the configured authority does not exist </summary> </member> <member name="F:Microsoft.Identity.Client.MsalError.InvalidUserInstanceMetadata"> <summary> <para>What happens?</para>You have configured your own instance metadata, but the json provided seems to be invalid. <para>Mitigation</para>See https://aka.ms/msal-net-custom-instance-metadata for an example of a valid json that can be used. </summary> </member> <member name="F:Microsoft.Identity.Client.MsalError.ValidateAuthorityOrCustomMetadata"> <summary> <para>What happens?</para>You have configured your own instance metadata, and have also configured custom metadata. These are mutually exclusive. <para>Mitigation</para>Set the validate authority flag to false. See https://aka.ms/msal-net-custom-instance-metadata for more details. </summary> </member> <member name="F:Microsoft.Identity.Client.MsalError.NoClientId"> <summary> <para>What happens?</para>You haven't set a client ID. <para>Mitigation</para>Use the application ID (a Guid) from the application portal as client ID in this SDK </summary> </member> <member name="F:Microsoft.Identity.Client.MsalError.ClientIdMustBeAGuid"> <summary> <para>What happens?</para>You've specified a client ID that is not a <see cref="T:System.Guid"/> <para>Mitigation</para>Use the application ID (a Guid) from the application portal as client ID in this SDK </summary> </member> <member name="F:Microsoft.Identity.Client.MsalError.TelemetryConfigOrTelemetryCallback"> <summary> <para>What happens?</para>You have configured both a telememtry callback and a telemetry config. <para>Mitigation</para>Only one telememtry mechanism can be configured. </summary> </member> <member name="F:Microsoft.Identity.Client.MsalError.InvalidClient"> <summary> AAD service error indicating that the configured client is not valid <para>Migigation</para>In the AAD app registration portal, make sure the correct client (Public or Confidential) is selected for the respective authentication flow. See https://aka.ms/msal-net-invalid-client for details. </summary> </member> <member name="F:Microsoft.Identity.Client.MsalError.SSHCertUsedAsHttpHeader"> <summary> <para>What happens?</para>You have configured MSAL to request SSH certificates from AAD, and you are trying to format an HTTP authentication header. <para>Mitigation</para>SSH certificates should not used as Bearer tokens. Developers are responsible for sending the certificates to the target machines. </summary> </member> <member name="F:Microsoft.Identity.Client.MsalError.WABError"> <summary> <para>What happens?</para>Windows Authentication Broker, which handles the interaction between the user and AAD, has failed. <para>Mitigation</para>See the error message for more details. </summary> </member> <member name="T:Microsoft.Identity.Client.MsalErrorMessage"> <summary> The active directory authentication error message. </summary> </member> <member name="T:Microsoft.Identity.Client.MsalException"> <summary> Base exception type thrown when an error occurs during token acquisition. For more details, see https://aka.ms/msal-net-exceptions </summary> <remarks>Avoid throwing this exception. Instead throw the more specialized <see cref="T:Microsoft.Identity.Client.MsalClientException"/> or <see cref="T:Microsoft.Identity.Client.MsalServiceException"/> </remarks> </member> <member name="M:Microsoft.Identity.Client.MsalException.#ctor"> <summary> Initializes a new instance of the exception class. </summary> </member> <member name="M:Microsoft.Identity.Client.MsalException.#ctor(System.String)"> <summary> Initializes a new instance of the exception class with a specified error code. </summary> <param name="errorCode"> The error code returned by the service or generated by the client. This is the code you can rely on for exception handling. </param> </member> <member name="M:Microsoft.Identity.Client.MsalException.#ctor(System.String,System.String)"> <summary> Initializes a new instance of the exception class with a specified error code and error message. </summary> <param name="errorCode"> The error code returned by the service or generated by the client. This is the code you can rely on for exception handling. </param> <param name="errorMessage">The error message that explains the reason for the exception.</param> </member> <member name="M:Microsoft.Identity.Client.MsalException.#ctor(System.String,System.String,System.Exception)"> <summary> Initializes a new instance of the exception class with a specified error code and a reference to the inner exception that is the cause of this exception. </summary> <param name="errorCode"> The error code returned by the service or generated by the client. This is the code you can rely on for exception handling. </param> <param name="errorMessage">The error message that explains the reason for the exception.</param> <param name="innerException"> The exception that is the cause of the current exception, or a null reference if no inner exception is specified. </param> </member> <member name="P:Microsoft.Identity.Client.MsalException.ErrorCode"> <summary> Gets the protocol error code returned by the service or generated by the client. This is the code you can rely on for exception handling. Values for this code are typically provided in constant strings in the derived exceptions types with explanations of mitigation. </summary> </member> <member name="M:Microsoft.Identity.Client.MsalException.ToString"> <summary> Creates and returns a string representation of the current exception. </summary> <returns>A string representation of the current exception.</returns> </member> <member name="M:Microsoft.Identity.Client.MsalException.ToJsonString"> <summary> Allows serialization of most values of the exception into JSON. </summary> <returns></returns> </member> <member name="M:Microsoft.Identity.Client.MsalException.FromJsonString(System.String)"> <summary> Allows re-hydration of the MsalException (or one of its derived types) from JSON generated by ToJsonString(). </summary> <param name="json"></param> <returns></returns> </member> <member name="T:Microsoft.Identity.Client.MsalServiceException"> <summary> Exception type thrown when service returns an error response or other networking errors occur. For more details, see https://aka.ms/msal-net-exceptions </summary> </member> <member name="M:Microsoft.Identity.Client.MsalServiceException.#ctor(System.String,System.String)"> <summary> Initializes a new instance of the exception class with a specified error code, error message and a reference to the inner exception that is the cause of this exception. </summary> <param name="errorCode"> The protocol error code returned by the service or generated by client. This is the code you can rely on for exception handling. </param> <param name="errorMessage">The error message that explains the reason for the exception.</param> </member> <member name="M:Microsoft.Identity.Client.MsalServiceException.#ctor(System.String,System.String,System.Int32)"> <summary> Initializes a new instance of the exception class with a specified error code, error message and a reference to the inner exception that is the cause of this exception. </summary> <param name="errorCode"> The protocol error code returned by the service or generated by the client. This is the code you can rely on for exception handling. </param> <param name="errorMessage">The error message that explains the reason for the exception.</param> <param name="statusCode">Status code of the resposne received from the service.</param> </member> <member name="M:Microsoft.Identity.Client.MsalServiceException.#ctor(System.String,System.String,System.Exception)"> <summary> Initializes a new instance of the exception class with a specified error code, error message and a reference to the inner exception that is the cause of this exception. </summary> <param name="errorCode"> The protocol error code returned by the service or generated by the client. This is the code you can rely on for exception handling. </param> <param name="errorMessage">The error message that explains the reason for the exception.</param> <param name="innerException"> The exception that is the cause of the current exception, or a null reference if no inner exception is specified. </param> </member> <member name="M:Microsoft.Identity.Client.MsalServiceException.#ctor(System.String,System.String,System.Int32,System.Exception)"> <summary> Initializes a new instance of the exception class with a specified error code, error message and a reference to the inner exception that is the cause of this exception. </summary> <param name="errorCode"> The protocol error code returned by the service or generated by the client. This is the code you can rely on for exception handling. </param> <param name="errorMessage">The error message that explains the reason for the exception.</param> <param name="statusCode">HTTP status code of the resposne received from the service.</param> <param name="innerException"> The exception that is the cause of the current exception, or a null reference if no inner exception is specified. </param> </member> <member name="M:Microsoft.Identity.Client.MsalServiceException.#ctor(System.String,System.String,System.Int32,System.String,System.Exception)"> <summary> Initializes a new instance of the exception class with a specified error code, error message and a reference to the inner exception that is the cause of this exception. </summary> <param name="errorCode"> The protocol error code returned by the service or generated by the client. This is the code you can rely on for exception handling. </param> <param name="errorMessage">The error message that explains the reason for the exception.</param> <param name="statusCode">The status code of the request.</param> <param name="claims">The claims challenge returned back from the service.</param> <param name="innerException"> The exception that is the cause of the current exception, or a null reference if no inner exception is specified. </param> </member> <member name="P:Microsoft.Identity.Client.MsalServiceException.StatusCode"> <summary> Gets the status code returned from http layer. This status code is either the <c>HttpStatusCode</c> in the inner <see cref="T:System.Net.Http.HttpRequestException"/> response or the the NavigateError Event Status Code in a browser based flow (See http://msdn.microsoft.com/en-us/library/bb268233(v=vs.85).aspx). You can use this code for purposes such as implementing retry logic or error investigation. </summary> </member> <member name="P:Microsoft.Identity.Client.MsalServiceException.Claims"> <summary> Additional claims requested by the service. When this property is not null or empty, this means that the service requires the user to provide additional claims, such as doing two factor authentication. The are two cases: <list type="bullent"> <item><description> If your application is a <see cref="T:Microsoft.Identity.Client.IPublicClientApplication"/>, you should just call <see cref="M:Microsoft.Identity.Client.IPublicClientApplication.AcquireTokenInteractive(System.Collections.Generic.IEnumerable{System.String})"/> and add the <see cref="M:Microsoft.Identity.Client.AbstractAcquireTokenParameterBuilder`1.WithClaims(System.String)"/> modifier. </description></item> <item>><description>If your application is a <see cref="T:Microsoft.Identity.Client.IConfidentialClientApplication"/>, (therefore doing the On-Behalf-Of flow), you should throw an Http unauthorize exception with a message containing the claims</description></item> </list> For more details see https://aka.ms/msal-net-claim-challenge </summary> </member> <member name="P:Microsoft.Identity.Client.MsalServiceException.ResponseBody"> <summary> Raw response body received from the server. </summary> </member> <member name="P:Microsoft.Identity.Client.MsalServiceException.SubError"> <remarks> The suberror should not be exposed for public consumption yet, as STS needs to do some work first. </remarks> </member> <member name="P:Microsoft.Identity.Client.MsalServiceException.Headers"> <summary> Contains the http headers from the server response that indicated an error. </summary> <remarks> When the server returns a 429 Too Many Requests error, a Retry-After should be set. It is important to read and respect the time specified in the Retry-After header to avoid a retry storm. </remarks> </member> <member name="P:Microsoft.Identity.Client.MsalServiceException.CorrelationId"> <summary> An ID that can used to piece up a single authentication flow. </summary> </member> <member name="M:Microsoft.Identity.Client.MsalServiceException.ToString"> <summary> Creates and returns a string representation of the current exception. </summary> <returns>A string representation of the current exception.</returns> </member> <member name="M:Microsoft.Identity.Client.MsalServiceException.IsAadUnavailable"> <summary> As per discussion with Evo, AAD </summary> </member> <member name="T:Microsoft.Identity.Client.MsalUiRequiredException"> <summary> This exception class is to inform developers that UI interaction is required for authentication to succeed. It's thrown when calling <see cref="M:Microsoft.Identity.Client.ClientApplicationBase.AcquireTokenSilent(System.Collections.Generic.IEnumerable{System.String},Microsoft.Identity.Client.IAccount)"/> or one of its overrides, and when the token does not exists in the cache, or the user needs to provide more content, or perform multiple factor authentication based on Azure AD policies, etc.. For more details, see https://aka.ms/msal-net-exceptions </summary> </member> <member name="M:Microsoft.Identity.Client.MsalUiRequiredException.#ctor(System.String,System.String)"> <summary> Initializes a new instance of the exception class with a specified error code and error message. </summary> <param name="errorCode"> The error code returned by the service or generated by the client. This is the code you can rely on for exception handling. </param> <param name="errorMessage">The error message that explains the reason for the exception.</param> </member> <member name="M:Microsoft.Identity.Client.MsalUiRequiredException.#ctor(System.String,System.String,System.Exception)"> <summary> Initializes a new instance of the exception class with a specified error code, error message and inner exception indicating the root cause. </summary> <param name="errorCode"> The error code returned by the service or generated by the client. This is the code you can rely on for exception handling. </param> <param name="errorMessage">The error message that explains the reason for the exception.</param> <param name="innerException">Represents the root cause of the exception.</param> </member> <member name="M:Microsoft.Identity.Client.MsalUiRequiredException.#ctor(System.String,System.String,System.Exception,Microsoft.Identity.Client.UiRequiredExceptionClassification)"> <summary> Initializes a new instance of the exception class with a specified error code, error message and inner exception indicating the root cause. </summary> <param name="errorCode"> The error code returned by the service or generated by the client. This is the code you can rely on for exception handling. </param> <param name="errorMessage">The error message that explains the reason for the exception.</param> <param name="innerException">Represents the root cause of the exception.</param> <param name="classification">A higher level description for this exception, that allows handling code to understand what type of action it needs to take to resolve the issue. </param> </member> <member name="P:Microsoft.Identity.Client.MsalUiRequiredException.Classification"> <summary> Classification of the conditional access error, enabling you to do more actions or inform the user depending on your scenario. See https://aka.ms/msal-net-UiRequiredException for more details. </summary> </member> <member name="P:Microsoft.Identity.Client.OAuth2.MsalTokenResponse.FamilyId"> <summary> Optional field, FOCI support. </summary> </member> <member name="P:Microsoft.Identity.Client.OAuth2.OAuth2ResponseBase.ErrorCodes"> <summary> Do not expose these in the MsalException because Evo does not guarantee that the error codes remain the same. </summary> </member> <member name="T:Microsoft.Identity.Client.OAuth2.OAuth2Error"> <summary> OAuth2 errors that are only used internally. All error codes used when propagating exceptions should be made public. </summary> </member> <member name="T:Microsoft.Identity.Client.PlatformsCommon.Factories.PlatformProxyFactory"> <summary> Returns the platform / os specific implementation of a PlatformProxy. </summary> </member> <member name="M:Microsoft.Identity.Client.PlatformsCommon.Factories.PlatformProxyFactory.CreatePlatformProxy(Microsoft.Identity.Client.Core.ICoreLogger)"> <summary> Gets the platform proxy, which can be used to perform platform specific operations </summary> </member> <member name="T:Microsoft.Identity.Client.PlatformsCommon.Interfaces.IPlatformProxy"> <summary> Common operations for extracting platform / operating system specifics </summary> </member> <member name="M:Microsoft.Identity.Client.PlatformsCommon.Interfaces.IPlatformProxy.GetDeviceModel"> <summary> Gets the device model. On some TFMs this is not returned for security reasonons. </summary> <returns>device model or null</returns> </member> <member name="M:Microsoft.Identity.Client.PlatformsCommon.Interfaces.IPlatformProxy.GetUserPrincipalNameAsync"> <summary> Gets the upn of the user currently logged into the OS </summary> <returns></returns> </member> <member name="M:Microsoft.Identity.Client.PlatformsCommon.Interfaces.IPlatformProxy.IsDomainJoined"> <summary> Returns true if the current OS logged in user is AD or AAD joined. </summary> <returns></returns> </member> <member name="M:Microsoft.Identity.Client.PlatformsCommon.Interfaces.IPlatformProxy.GetCallingApplicationName"> <summary> Returns the name of the calling assembly </summary> <returns></returns> </member> <member name="M:Microsoft.Identity.Client.PlatformsCommon.Interfaces.IPlatformProxy.GetCallingApplicationVersion"> <summary> Returns the version of the calling assembly </summary> <returns></returns> </member> <member name="M:Microsoft.Identity.Client.PlatformsCommon.Interfaces.IPlatformProxy.GetDeviceId"> <summary> Returns a device identifier. Varies by platform. </summary> <returns></returns> </member> <member name="M:Microsoft.Identity.Client.PlatformsCommon.Interfaces.IPlatformProxy.GetBrokerOrRedirectUri(System.Uri)"> <summary> Get the redirect Uri as string, or the a broker specified value </summary> </member> <member name="M:Microsoft.Identity.Client.PlatformsCommon.Interfaces.IPlatformProxy.GetDefaultRedirectUri(System.String,System.Boolean)"> <summary> Gets the default redirect uri for the platform, which sometimes includes the clientId </summary> </member> <member name="M:Microsoft.Identity.Client.PlatformsCommon.Interfaces.IPlatformProxy.StartDefaultOsBrowserAsync(System.String)"> <summary> Go to a Url using the OS default browser. </summary> </member> <member name="T:Microsoft.Identity.Client.PlatformsCommon.Interfaces.ITokenCacheBlobStorage"> <summary> Provides a high level token cache serialization solution that is similar to the one offered to MSAL customers. Platforms should try to implement <see cref="T:Microsoft.Identity.Client.Cache.ITokenCacheAccessor"/> if possible, as it provides more granular access. </summary> </member> <member name="M:Microsoft.Identity.Client.PlatformsCommon.Shared.AbstractPlatformProxy.GetWebUiFactory"> <inheritdoc /> </member> <member name="M:Microsoft.Identity.Client.PlatformsCommon.Shared.AbstractPlatformProxy.SetWebUiFactory(Microsoft.Identity.Client.UI.IWebUIFactory)"> <inheritdoc /> </member> <member name="M:Microsoft.Identity.Client.PlatformsCommon.Shared.AbstractPlatformProxy.GetDeviceModel"> <inheritdoc /> </member> <member name="M:Microsoft.Identity.Client.PlatformsCommon.Shared.AbstractPlatformProxy.GetEnvironmentVariable(System.String)"> <inheritdoc /> </member> <member name="M:Microsoft.Identity.Client.PlatformsCommon.Shared.AbstractPlatformProxy.GetOperatingSystem"> <inheritdoc /> </member> <member name="M:Microsoft.Identity.Client.PlatformsCommon.Shared.AbstractPlatformProxy.GetProcessorArchitecture"> <inheritdoc /> </member> <member name="M:Microsoft.Identity.Client.PlatformsCommon.Shared.AbstractPlatformProxy.GetUserPrincipalNameAsync"> <inheritdoc /> </member> <member name="M:Microsoft.Identity.Client.PlatformsCommon.Shared.AbstractPlatformProxy.IsDomainJoined"> <inheritdoc /> </member> <member name="M:Microsoft.Identity.Client.PlatformsCommon.Shared.AbstractPlatformProxy.IsUserLocalAsync(Microsoft.Identity.Client.Core.RequestContext)"> <inheritdoc /> </member> <member name="M:Microsoft.Identity.Client.PlatformsCommon.Shared.AbstractPlatformProxy.GetCallingApplicationName"> <inheritdoc /> </member> <member name="M:Microsoft.Identity.Client.PlatformsCommon.Shared.AbstractPlatformProxy.GetCallingApplicationVersion"> <inheritdoc /> </member> <member name="M:Microsoft.Identity.Client.PlatformsCommon.Shared.AbstractPlatformProxy.GetDeviceId"> <inheritdoc /> </member> <member name="M:Microsoft.Identity.Client.PlatformsCommon.Shared.AbstractPlatformProxy.GetBrokerOrRedirectUri(System.Uri)"> <inheritdoc /> </member> <member name="M:Microsoft.Identity.Client.PlatformsCommon.Shared.AbstractPlatformProxy.GetDefaultRedirectUri(System.String,System.Boolean)"> <inheritdoc /> </member> <member name="M:Microsoft.Identity.Client.PlatformsCommon.Shared.AbstractPlatformProxy.GetProductName"> <inheritdoc /> </member> <member name="M:Microsoft.Identity.Client.PlatformsCommon.Shared.AbstractPlatformProxy.CreateLegacyCachePersistence"> <inheritdoc /> </member> <member name="M:Microsoft.Identity.Client.PlatformsCommon.Shared.AbstractPlatformProxy.CreateTokenCacheAccessor"> <inheritdoc /> </member> <member name="P:Microsoft.Identity.Client.PlatformsCommon.Shared.AbstractPlatformProxy.CryptographyManager"> <inheritdoc /> </member> <member name="P:Microsoft.Identity.Client.PlatformsCommon.Shared.AbstractPlatformProxy.PlatformLogger"> <inheritdoc /> </member> <member name="T:Microsoft.Identity.Client.PlatformsCommon.Shared.InMemoryTokenCacheAccessor"> <summary> Keeps the 4 token cache dictionaries in memory. Token Cache extensions are responsible for persistance. </summary> </member> <member name="T:Microsoft.Identity.Client.Prompt"> <summary> Structure containing static members that you can use to specify how the interactive overrides of AcquireTokenAsync in <see cref="T:Microsoft.Identity.Client.IPublicClientApplication" /> should prompt the user. </summary> </member> <member name="F:Microsoft.Identity.Client.Prompt.SelectAccount"> <summary> AcquireToken will send <c>prompt=select_account</c> to Azure AD's authorize endpoint which would present to the user a list of accounts from which one can be selected for authentication. </summary> </member> <member name="F:Microsoft.Identity.Client.Prompt.ForceLogin"> <summary> The user will be prompted for credentials by the service. It is achieved by sending <c>prompt=login</c> to the Azure AD service. </summary> </member> <member name="F:Microsoft.Identity.Client.Prompt.Consent"> <summary> The user will be prompted to consent, even if consent was granted before. It is achieved by sending <c>prompt=consent</c> to Azure AD. </summary> </member> <member name="F:Microsoft.Identity.Client.Prompt.NoPrompt"> <summary> Does not request any specific UI to the service, which therefore decides based on the number of signed-in identities. This Prompt is, for the moment, recommended for Azure AD B2C scenarios where the developer does not want the user to re-select the account (for instance when applying policies like EditProfile, or ResetPassword, which should apply to the currently signed-in account. It's not recommended to use this Prompt in Azure AD scenarios at the moment). </summary> </member> <member name="M:Microsoft.Identity.Client.Prompt.Equals(System.Object)"> <summary> Equals method override to compare Prompt structs </summary> <param name="obj">object to compare against</param> <returns>true if object are equal.</returns> </member> <member name="M:Microsoft.Identity.Client.Prompt.GetHashCode"> <summary> Override to compute hashcode </summary> <returns>hash code of the PromptValue</returns> </member> <member name="M:Microsoft.Identity.Client.Prompt.op_Equality(Microsoft.Identity.Client.Prompt,Microsoft.Identity.Client.Prompt)"> <summary> operator overload to equality check </summary> <param name="x">first value</param> <param name="y">second value</param> <returns>true if the objects are equal</returns> </member> <member name="M:Microsoft.Identity.Client.Prompt.op_Inequality(Microsoft.Identity.Client.Prompt,Microsoft.Identity.Client.Prompt)"> <summary> operator overload to equality check </summary> <param name="x">first value</param> <param name="y">second value</param> <returns>true if the objects are not equal</returns> </member> <member name="T:Microsoft.Identity.Client.SSHCertificates.SSHExtensions"> <summary> Extensions that add support for SSH certificates </summary> </member> <member name="M:Microsoft.Identity.Client.SSHCertificates.SSHExtensions.WithSSHCertificateAuthenticationScheme(Microsoft.Identity.Client.AcquireTokenInteractiveParameterBuilder,System.String,System.String)"> <summary> Instructs AAD to return an SSH certificate instead of a Bearer token. The SSH certificate (not the same as public / private key pair used by SSH), can be used to securely deploy a public SSH key to a machine. See https://aka.ms/msal-net-ssh for details. </summary> <param name="builder">Interactive authentication builder</param> <param name="publicKeyJwk">The public SSH key in JWK format (https://tools.ietf.org/html/rfc7517). Currently only RSA is supported, and the JWK should contain only the RSA modulus and exponent</param> <param name="keyId">A key identifier, it can be in any format. Used to distinguish between different keys when fetching an SSH certificate from the token cache.</param> </member> <member name="M:Microsoft.Identity.Client.SSHCertificates.SSHExtensions.WithSSHCertificateAuthenticationScheme(Microsoft.Identity.Client.AcquireTokenSilentParameterBuilder,System.String,System.String)"> <summary> Instructs AAD to return an SSH certificate instead of a Bearer token. Attempts to retrive the certificate from the token cache, and if one is not found, attempts to acquire one silently, using the refresh token. See https://aka.ms/msal-net-ssh for details. </summary> <remarks> The same keyID must be used to distinguish between various </remarks> <param name="builder">Silent authentication builder</param> <param name="publicKeyJwk">The public SSH key in JWK format (https://tools.ietf.org/html/rfc7517). Currently only RSA is supported, and the JWK should contain only the RSA modulus and exponent</param> <param name="keyId"></param> <returns></returns> </member> <member name="T:Microsoft.Identity.Client.TelemetryCallback"> <summary> This callback is for the raw telemetry events (app, http, cache) that we want to aggregate using MATS. </summary> <param name="events"></param> </member> <member name="M:Microsoft.Identity.Client.TelemetryCore.Internal.ActionComparer.IsEquivalentClass(Microsoft.Identity.Client.TelemetryCore.Internal.ActionPropertyBag,Microsoft.Identity.Client.TelemetryCore.Internal.ActionPropertyBag)"> <summary> Returns true if the actions are the same, either are ready for upload, and either is not aggregable. This is used to determine whether or not we should aggregate this particular property bag of event data. </summary> <param name="action1"></param> <param name="action2"></param> <returns></returns> </member> <member name="P:Microsoft.Identity.Client.TelemetryCore.Internal.Events.HttpEvent.RequestIdHeader"> <summary> GUID included in request header </summary> </member> <member name="P:Microsoft.Identity.Client.TelemetryCore.Internal.Events.HttpEvent.TokenAge"> <summary> Floating-point value with a unit of milliseconds indicating the refresh token age </summary> </member> <member name="P:Microsoft.Identity.Client.TelemetryCore.Internal.Events.HttpEvent.SpeInfo"> <summary> Indicates whether the request was executed on a ring serving SPE traffic. An empty string indicates this occurred on an outer ring, and the string "I" indicates the request occurred on the inner ring </summary> </member> <member name="P:Microsoft.Identity.Client.TelemetryCore.Internal.Events.HttpEvent.ServerErrorCode"> <summary> Error code sent by ESTS </summary> </member> <member name="P:Microsoft.Identity.Client.TelemetryCore.Internal.Events.HttpEvent.ServerSubErrorCode"> <summary> Error code which gives more detailed information about server error code </summary> </member> <member name="M:Microsoft.Identity.Client.TelemetryCore.TelemetryManager.EventKey.Equals(Microsoft.Identity.Client.TelemetryCore.TelemetryManager.EventKey)"> <inheritdoc /> </member> <member name="M:Microsoft.Identity.Client.TelemetryCore.TelemetryManager.EventKey.GetHashCode"> <inheritdoc /> </member> <member name="M:Microsoft.Identity.Client.TelemetryCore.TelemetryManager.EventKey.Equals(System.Object)"> <inheritdoc /> </member> <member name="P:Microsoft.Identity.Client.TelemetryCore.XmsCliTelemInfo.Version"> <summary> Monotonically increasing integer specifying x-ms-cliteleminfo header version </summary> </member> <member name="P:Microsoft.Identity.Client.TelemetryCore.XmsCliTelemInfo.ServerErrorCode"> <summary> Bundle id for server error. </summary> </member> <member name="P:Microsoft.Identity.Client.TelemetryCore.XmsCliTelemInfo.ServerSubErrorCode"> <summary> Bundle id for server suberror. </summary> </member> <member name="P:Microsoft.Identity.Client.TelemetryCore.XmsCliTelemInfo.TokenAge"> <summary> Bundle id for refresh token age. Floating-point value with a unit of milliseconds </summary> </member> <member name="P:Microsoft.Identity.Client.TelemetryCore.XmsCliTelemInfo.SpeInfo"> <summary> Bundle id for spe_ring info. Indicates whether the request was executed on a ring serving SPE traffic. An empty string indicates this occurred on an outer ring, and the string "I" indicates the request occurred on the inner ring </summary> </member> <member name="T:Microsoft.Identity.Client.UiRequiredExceptionClassification"> <summary> Details about the cause of an <see cref="T:Microsoft.Identity.Client.MsalUiRequiredException"/>, giving a hint about what the user can expect when they go through interactive authentication. See https://aka.ms/msal-net-UiRequiredException for details. </summary> </member> <member name="F:Microsoft.Identity.Client.UiRequiredExceptionClassification.None"> <summary> No further details are provided. It is possible that the user will be able to resolve the issue by launching interactive authentication. See https://aka.ms/msal-net-UiRequiredException for details </summary> <remarks>This is also the classification when no account or valid login hint is passed to AcquireTokenSilent</remarks> </member> <member name="F:Microsoft.Identity.Client.UiRequiredExceptionClassification.MessageOnly"> <summary> Issue cannot be resolved at this time. Launching interactive authentication flow will show a message explaining the condition. See https://aka.ms/msal-net-UiRequiredException for details </summary> </member> <member name="F:Microsoft.Identity.Client.UiRequiredExceptionClassification.BasicAction"> <summary> Issue can be resolved by user interaction during the interactive authentication flow. See https://aka.ms/msal-net-UiRequiredException for details </summary> </member> <member name="F:Microsoft.Identity.Client.UiRequiredExceptionClassification.AdditionalAction"> <summary> Issue can be resolved by additional remedial interaction with the system, outside of the interactive authentication flow. Starting an interactive authentication flow will show the user what they need to do, but it is possible that the user is unable to complete the action. See https://aka.ms/msal-net-UiRequiredException for details </summary> </member> <member name="F:Microsoft.Identity.Client.UiRequiredExceptionClassification.ConsentRequired"> <summary> User consent is missing, or has been revoked. Issue can be resolved by user consenting during the interactive authentication flow. See https://aka.ms/msal-net-UiRequiredException for details </summary> </member> <member name="F:Microsoft.Identity.Client.UiRequiredExceptionClassification.UserPasswordExpired"> <summary> User's password has expired. Issue can be resolved by user during the interactive authentication flow. See https://aka.ms/msal-net-UiRequiredException for details. </summary> </member> <member name="F:Microsoft.Identity.Client.UiRequiredExceptionClassification.PromptNeverFailed"> <summary> <see cref="M:Microsoft.Identity.Client.AcquireTokenInteractiveParameterBuilder.WithPrompt(Microsoft.Identity.Client.Prompt)"/> was used with Prompt.Never value, however this could not be honored by the server. Please use a different prompt behavior, such as <see cref="F:Microsoft.Identity.Client.Prompt.SelectAccount"/> See https://aka.ms/msal-net-UiRequiredException for details. </summary> </member> <member name="F:Microsoft.Identity.Client.UiRequiredExceptionClassification.AcquireTokenSilentFailed"> <summary> An AcquireTokenSilent call failed. This is ussually part of the pattern of calling AcquireTokenSilent for getting a token from the cache, followed by an a different AcquireToken call for getting a token from AAD. See the error message for details. See https://aka.ms/msal-net-UiRequiredException for details. </summary> </member> <member name="P:Microsoft.Identity.Client.UI.AuthorizationResult.State"> <summary> A string that is added to each Authorization Request and is expected to be sent back along with the authorization code. MSAL is responsible for validating that the state sent is identical to the state received. </summary> <remarks> This is in addition to PKCE, which is validated by the server to ensure that the system redeeming the auth code is the same as the system who asked for it. It protects against XSRF https://openid.net/specs/openid-connect-core-1_0.html </remarks> </member> <member name="M:Microsoft.Identity.Client.UI.CustomWebUiHandler.AcquireAuthorizationAsync(System.Uri,System.Uri,Microsoft.Identity.Client.Core.RequestContext,System.Threading.CancellationToken)"> <inheritdoc /> </member> <member name="M:Microsoft.Identity.Client.UI.CustomWebUiHandler.UpdateRedirectUri(System.Uri)"> <inheritdoc /> </member> <member name="M:Microsoft.Identity.Client.UI.IWebUI.UpdateRedirectUri(System.Uri)"> <summary> Extra validations on the redirect uri, for example system web views cannot work with the urn:oob... uri because there is no way of knowing which app to get back to. WebUIs can update the uri, for example use http://localhost:1234 instead of http://localhost Throws if uri is invalid </summary> </member> <member name="T:Microsoft.Identity.Client.UserAssertion"> <seealso cref="M:Microsoft.Identity.Client.IConfidentialClientApplication.AcquireTokenOnBehalfOf(System.Collections.Generic.IEnumerable{System.String},Microsoft.Identity.Client.UserAssertion)"/> </member> <member name="M:Microsoft.Identity.Client.UserAssertion.#ctor(System.String)"> <summary> Constructor from a JWT assertion. For other assertion types (SAML), use the other constructor <see cref="M:Microsoft.Identity.Client.UserAssertion.#ctor(System.String,System.String)"/> </summary> <param name="jwtBearerToken">JWT bearer token used to access the Web application itself</param> </member> <member name="M:Microsoft.Identity.Client.UserAssertion.#ctor(System.String,System.String)"> <summary> Constructor of a UserAssertion specifying the assertionType in addition to the assertion </summary> <param name="assertion">Assertion representing the user.</param> <param name="assertionType">Type of the assertion representing the user. Accepted types are currently: <list type="bullet"> <item>urn:ietf:params:oauth:grant-type:jwt-bearer<term></term><description>JWT bearer token. Passing this is equivalent to using the other (simpler) constructor</description></item> <item>urn:ietf:params:oauth:grant-type:saml1_1-bearer<term></term><description>SAML 1.1 bearer token</description></item> <item>urn:ietf:params:oauth:grant-type:jwt-bearer<term></term><description>SAML 2 bearer token</description></item> </list></param> </member> <member name="P:Microsoft.Identity.Client.UserAssertion.Assertion"> <summary> Gets the assertion. </summary> </member> <member name="P:Microsoft.Identity.Client.UserAssertion.AssertionType"> <summary> Gets the assertion type. </summary> </member> <member name="T:Microsoft.Identity.Client.Utils.RetryOperationHelper"> <summary> Provides functionality to automatically try the given piece of logic some number of times before re-throwing the exception. This is useful for any piece of code which may experience transient failures. Be cautious of passing code with two distinct actions given that if the second or subsequent piece of logic fails, the first will also be retried upon each retry. </summary> <remarks> Copied from https://github.com/microsoft/RetryOperationHelper/blob/master/RetryOperationHelper/RetryOperationHelper.cs </remarks> </member> <member name="M:Microsoft.Identity.Client.Utils.RetryOperationHelper.ExecuteWithRetryAsync``1(System.Func{System.Threading.Tasks.Task{``0}},System.Int32,System.Nullable{System.TimeSpan},System.Action{System.Int32,System.Exception},System.Collections.Generic.ISet{System.Type})"> <summary>Executes asynchronous function with retry logic.</summary> <param name="func">The asynchronous function to be executed.</param> <param name="maxAttempts">The maximum number of attempts.</param> <param name="retryInterval">Timespan to wait between attempts of the operation</param> <param name="onAttemptFailed">The callback executed when an attempt is failed.</param> <param name="allowedExceptions">Allowed exceptions</param> <typeparam name="T">The result type.</typeparam> <returns>The <see cref="T:System.Threading.Tasks.Task"/> producing the result.</returns> </member> <member name="M:Microsoft.Identity.Client.Utils.RetryOperationHelper.ExecuteWithRetryAsync(System.Func{System.Threading.Tasks.Task},System.Int32,System.Nullable{System.TimeSpan},System.Action{System.Int32,System.Exception},System.Collections.Generic.ISet{System.Type})"> <summary>Executes asynchronous function with retry logic.</summary> <param name="func">The asynchronous function to be executed.</param> <param name="maxAttempts">The maximum number of attempts.</param> <param name="retryInterval">Timespan to wait between attempts of the operation</param> <param name="onAttemptFailed">The retry handler.</param> <param name="allowedExceptions"></param> <returns>The <see cref="T:System.Threading.Tasks.Task"/> producing the result.</returns> </member> <member name="M:Microsoft.Identity.Client.Utils.StringExtensions.ToByteArray(System.String)"> <summary> Create an array of bytes representing the UTF-8 encoding of the given string. </summary> <param name="stringInput">String to get UTF-8 bytes for</param> <returns>Array of UTF-8 character bytes</returns> </member> <member name="M:Microsoft.Identity.Client.Utils.StringExtensions.Replace(System.String,System.String,System.String,System.StringComparison)"> <summary> Culture aware String.Replace </summary> </member> <member name="M:Microsoft.Identity.Client.WsTrust.CommonNonInteractiveHandler.GetPlatformUserAsync"> <summary> Gets the currently logged in user. Works for Windows when user is AD or AAD joined. Throws otherwise if cannot be found. </summary> </member> <member name="T:Microsoft.Identity.Client.WsTrust.IWsTrustWebRequestManager"> <summary> </summary> </member> <member name="M:Microsoft.Identity.Client.WsTrust.IWsTrustWebRequestManager.GetMexDocumentAsync(System.String,Microsoft.Identity.Client.Core.RequestContext)"> <summary> </summary> <param name="federationMetadataUrl"></param> <param name="requestContext"></param> <returns></returns> </member> <member name="M:Microsoft.Identity.Client.WsTrust.IWsTrustWebRequestManager.GetWsTrustResponseAsync(Microsoft.Identity.Client.WsTrust.WsTrustEndpoint,System.String,Microsoft.Identity.Client.Core.RequestContext)"> <summary> </summary> <param name="wsTrustEndpoint"></param> <param name="wsTrustRequest"></param> <param name="requestContext"></param> <returns></returns> </member> <member name="M:Microsoft.Identity.Client.WsTrust.IWsTrustWebRequestManager.GetUserRealmAsync(System.String,System.String,Microsoft.Identity.Client.Core.RequestContext)"> <summary> </summary> <param name="userRealmUriPrefix"></param> <param name="userName"></param> <param name="requestContext"></param> <returns></returns> </member> <member name="M:Microsoft.Identity.Client.WsTrust.WsTrustWebRequestManager.GetMexDocumentAsync(System.String,Microsoft.Identity.Client.Core.RequestContext)"> <inheritdoc/> </member> <member name="M:Microsoft.Identity.Client.WsTrust.WsTrustWebRequestManager.GetWsTrustResponseAsync(Microsoft.Identity.Client.WsTrust.WsTrustEndpoint,System.String,Microsoft.Identity.Client.Core.RequestContext)"> <inheritdoc/> </member> <member name="M:Microsoft.Identity.Client.Platforms.netcore.NetCoreCryptographyManager.SignWithCertificate(System.String,System.Security.Cryptography.X509Certificates.X509Certificate2)"> <inheritdoc /> </member> <member name="T:Microsoft.Identity.Client.Platforms.netcore.NetCorePlatformProxy"> <summary> Platform / OS specific logic. No library (ADAL / MSAL) specific code should go in here. </summary> </member> <member name="M:Microsoft.Identity.Client.Platforms.netcore.NetCorePlatformProxy.GetUserPrincipalNameAsync"> <summary> Get the user logged in </summary> </member> <member name="M:Microsoft.Identity.Client.Platforms.netcore.NetCorePlatformProxy.GetBrokerOrRedirectUri(System.Uri)"> <inheritdoc /> </member> <member name="M:Microsoft.Identity.Client.Platforms.netcore.NetCorePlatformProxy.GetDefaultRedirectUri(System.String,System.Boolean)"> <inheritdoc /> </member> <member name="M:Microsoft.Identity.Client.Platforms.netcore.NetCorePlatformProxy.InternalGetCallingApplicationName"> <summary> Considered PII, ensure that it is hashed. </summary> <returns>Name of the calling application</returns> </member> <member name="M:Microsoft.Identity.Client.Platforms.netcore.NetCorePlatformProxy.InternalGetCallingApplicationVersion"> <summary> Considered PII, ensure that it is hashed. </summary> <returns>Version of the calling application</returns> </member> <member name="M:Microsoft.Identity.Client.Platforms.netcore.NetCorePlatformProxy.InternalGetDeviceId"> <summary> Considered PII. Please ensure that it is hashed. </summary> <returns>Device identifier</returns> </member> <member name="M:Microsoft.Identity.Client.Platforms.Shared.NetStdCore.NetStandardCryptographyManager.SignWithCertificate(System.String,System.Security.Cryptography.X509Certificates.X509Certificate2)"> <inheritdoc /> </member> <member name="T:Microsoft.Identity.Client.Platforms.Shared.Desktop.OsBrowser.IUriInterceptor"> <summary> An abstraction over objects that are able to listen to localhost url (e.g. http://localhost:1234) and to retrieve the whole url, includiong query params (e.g. http://localhost:1234?code=auth_code_from_aad) </summary> </member> <member name="M:Microsoft.Identity.Client.Platforms.Shared.Desktop.OsBrowser.IUriInterceptor.ListenToSingleRequestAndRespondAsync(System.Int32,System.Func{System.Uri,Microsoft.Identity.Client.Platforms.Shared.Desktop.OsBrowser.MessageAndHttpCode},System.Threading.CancellationToken)"> <summary> Listens to http://localhost:{port} and retrieve the entire url, including query params. Then push back a response such as a display message or a redirect. </summary> <remarks>Cancellation is very important as this is typically a long running unmonitored operation</remarks> <param name="port">the port to listen to</param> <param name="responseProducer">The message to be displayed, or url to be redirected to will be created by this callback</param> <param name="cancellationToken">Cancellation token</param> <returns>Full redirect uri</returns> </member> <member name="T:Microsoft.Identity.Json.Bson.BsonObjectId"> <summary> Represents a BSON Oid (object id). </summary> </member> <member name="P:Microsoft.Identity.Json.Bson.BsonObjectId.Value"> <summary> Gets or sets the value of the Oid. </summary> <value>The value of the Oid.</value> </member> <member name="M:Microsoft.Identity.Json.Bson.BsonObjectId.#ctor(System.Byte[])"> <summary> Initializes a new instance of the <see cref="T:Microsoft.Identity.Json.Bson.BsonObjectId"/> class. </summary> <param name="value">The Oid value.</param> </member> <member name="T:Microsoft.Identity.Json.Bson.BsonReader"> <summary> Represents a reader that provides fast, non-cached, forward-only access to serialized BSON data. </summary> </member> <member name="P:Microsoft.Identity.Json.Bson.BsonReader.JsonNet35BinaryCompatibility"> <summary> Gets or sets a value indicating whether binary data reading should be compatible with incorrect Json.NET 3.5 written binary. </summary> <value> <c>true</c> if binary data reading will be compatible with incorrect Json.NET 3.5 written binary; otherwise, <c>false</c>. </value> </member> <member name="P:Microsoft.Identity.Json.Bson.BsonReader.ReadRootValueAsArray"> <summary> Gets or sets a value indicating whether the root object will be read as a JSON array. </summary> <value> <c>true</c> if the root object will be read as a JSON array; otherwise, <c>false</c>. </value> </member> <member name="P:Microsoft.Identity.Json.Bson.BsonReader.DateTimeKindHandling"> <summary> Gets or sets the <see cref="T:System.DateTimeKind" /> used when reading <see cref="T:System.DateTime"/> values from BSON. </summary> <value>The <see cref="T:System.DateTimeKind" /> used when reading <see cref="T:System.DateTime"/> values from BSON.</value> </member> <member name="M:Microsoft.Identity.Json.Bson.BsonReader.#ctor(System.IO.Stream)"> <summary> Initializes a new instance of the <see cref="T:Microsoft.Identity.Json.Bson.BsonReader"/> class. </summary> <param name="stream">The <see cref="T:System.IO.Stream"/> containing the BSON data to read.</param> </member> <member name="M:Microsoft.Identity.Json.Bson.BsonReader.#ctor(System.IO.BinaryReader)"> <summary> Initializes a new instance of the <see cref="T:Microsoft.Identity.Json.Bson.BsonReader"/> class. </summary> <param name="reader">The <see cref="T:System.IO.BinaryReader"/> containing the BSON data to read.</param> </member> <member name="M:Microsoft.Identity.Json.Bson.BsonReader.#ctor(System.IO.Stream,System.Boolean,System.DateTimeKind)"> <summary> Initializes a new instance of the <see cref="T:Microsoft.Identity.Json.Bson.BsonReader"/> class. </summary> <param name="stream">The <see cref="T:System.IO.Stream"/> containing the BSON data to read.</param> <param name="readRootValueAsArray">if set to <c>true</c> the root object will be read as a JSON array.</param> <param name="dateTimeKindHandling">The <see cref="T:System.DateTimeKind" /> used when reading <see cref="T:System.DateTime"/> values from BSON.</param> </member> <member name="M:Microsoft.Identity.Json.Bson.BsonReader.#ctor(System.IO.BinaryReader,System.Boolean,System.DateTimeKind)"> <summary> Initializes a new instance of the <see cref="T:Microsoft.Identity.Json.Bson.BsonReader"/> class. </summary> <param name="reader">The <see cref="T:System.IO.BinaryReader"/> containing the BSON data to read.</param> <param name="readRootValueAsArray">if set to <c>true</c> the root object will be read as a JSON array.</param> <param name="dateTimeKindHandling">The <see cref="T:System.DateTimeKind" /> used when reading <see cref="T:System.DateTime"/> values from BSON.</param> </member> <member name="M:Microsoft.Identity.Json.Bson.BsonReader.Read"> <summary> Reads the next JSON token from the underlying <see cref="T:System.IO.Stream"/>. </summary> <returns> <c>true</c> if the next token was read successfully; <c>false</c> if there are no more tokens to read. </returns> </member> <member name="M:Microsoft.Identity.Json.Bson.BsonReader.Close"> <summary> Changes the reader's state to <see cref="F:Microsoft.Identity.Json.JsonReader.State.Closed"/>. If <see cref="P:Microsoft.Identity.Json.JsonReader.CloseInput"/> is set to <c>true</c>, the underlying <see cref="T:System.IO.Stream"/> is also closed. </summary> </member> <member name="T:Microsoft.Identity.Json.Bson.BsonWriter"> <summary> Represents a writer that provides a fast, non-cached, forward-only way of generating BSON data. </summary> </member> <member name="P:Microsoft.Identity.Json.Bson.BsonWriter.DateTimeKindHandling"> <summary> Gets or sets the <see cref="T:System.DateTimeKind" /> used when writing <see cref="T:System.DateTime"/> values to BSON. When set to <see cref="F:System.DateTimeKind.Unspecified" /> no conversion will occur. </summary> <value>The <see cref="T:System.DateTimeKind" /> used when writing <see cref="T:System.DateTime"/> values to BSON.</value> </member> <member name="M:Microsoft.Identity.Json.Bson.BsonWriter.#ctor(System.IO.Stream)"> <summary> Initializes a new instance of the <see cref="T:Microsoft.Identity.Json.Bson.BsonWriter"/> class. </summary> <param name="stream">The <see cref="T:System.IO.Stream"/> to write to.</param> </member> <member name="M:Microsoft.Identity.Json.Bson.BsonWriter.#ctor(System.IO.BinaryWriter)"> <summary> Initializes a new instance of the <see cref="T:Microsoft.Identity.Json.Bson.BsonWriter"/> class. </summary> <param name="writer">The <see cref="T:System.IO.BinaryWriter"/> to write to.</param> </member> <member name="M:Microsoft.Identity.Json.Bson.BsonWriter.Flush"> <summary> Flushes whatever is in the buffer to the underlying <see cref="T:System.IO.Stream"/> and also flushes the underlying stream. </summary> </member> <member name="M:Microsoft.Identity.Json.Bson.BsonWriter.WriteEnd(Microsoft.Identity.Json.JsonToken)"> <summary> Writes the end. </summary> <param name="token">The token.</param> </member> <member name="M:Microsoft.Identity.Json.Bson.BsonWriter.WriteComment(System.String)"> <summary> Writes a comment <c>/*...*/</c> containing the specified text. </summary> <param name="text">Text to place inside the comment.</param> </member> <member name="M:Microsoft.Identity.Json.Bson.BsonWriter.WriteStartConstructor(System.String)"> <summary> Writes the start of a constructor with the given name. </summary> <param name="name">The name of the constructor.</param> </member> <member name="M:Microsoft.Identity.Json.Bson.BsonWriter.WriteRaw(System.String)"> <summary> Writes raw JSON. </summary> <param name="json">The raw JSON to write.</param> </member> <member name="M:Microsoft.Identity.Json.Bson.BsonWriter.WriteRawValue(System.String)"> <summary> Writes raw JSON where a value is expected and updates the writer's state. </summary> <param name="json">The raw JSON to write.</param> </member> <member name="M:Microsoft.Identity.Json.Bson.BsonWriter.WriteStartArray"> <summary> Writes the beginning of a JSON array. </summary> </member> <member name="M:Microsoft.Identity.Json.Bson.BsonWriter.WriteStartObject"> <summary> Writes the beginning of a JSON object. </summary> </member> <member name="M:Microsoft.Identity.Json.Bson.BsonWriter.WritePropertyName(System.String)"> <summary> Writes the property name of a name/value pair on a JSON object. </summary> <param name="name">The name of the property.</param> </member> <member name="M:Microsoft.Identity.Json.Bson.BsonWriter.Close"> <summary> Closes this writer. If <see cref="P:Microsoft.Identity.Json.JsonWriter.CloseOutput"/> is set to <c>true</c>, the underlying <see cref="T:System.IO.Stream"/> is also closed. If <see cref="P:Microsoft.Identity.Json.JsonWriter.AutoCompleteOnClose"/> is set to <c>true</c>, the JSON is auto-completed. </summary> </member> <member name="M:Microsoft.Identity.Json.Bson.BsonWriter.WriteValue(System.Object)"> <summary> Writes a <see cref="T:System.Object"/> value. An error will raised if the value cannot be written as a single JSON token. </summary> <param name="value">The <see cref="T:System.Object"/> value to write.</param> </member> <member name="M:Microsoft.Identity.Json.Bson.BsonWriter.WriteNull"> <summary> Writes a null value. </summary> </member> <member name="M:Microsoft.Identity.Json.Bson.BsonWriter.WriteUndefined"> <summary> Writes an undefined value. </summary> </member> <member name="M:Microsoft.Identity.Json.Bson.BsonWriter.WriteValue(System.String)"> <summary> Writes a <see cref="T:System.String"/> value. </summary> <param name="value">The <see cref="T:System.String"/> value to write.</param> </member> <member name="M:Microsoft.Identity.Json.Bson.BsonWriter.WriteValue(System.Int32)"> <summary> Writes a <see cref="T:System.Int32"/> value. </summary> <param name="value">The <see cref="T:System.Int32"/> value to write.</param> </member> <member name="M:Microsoft.Identity.Json.Bson.BsonWriter.WriteValue(System.UInt32)"> <summary> Writes a <see cref="T:System.UInt32"/> value. </summary> <param name="value">The <see cref="T:System.UInt32"/> value to write.</param> </member> <member name="M:Microsoft.Identity.Json.Bson.BsonWriter.WriteValue(System.Int64)"> <summary> Writes a <see cref="T:System.Int64"/> value. </summary> <param name="value">The <see cref="T:System.Int64"/> value to write.</param> </member> <member name="M:Microsoft.Identity.Json.Bson.BsonWriter.WriteValue(System.UInt64)"> <summary> Writes a <see cref="T:System.UInt64"/> value. </summary> <param name="value">The <see cref="T:System.UInt64"/> value to write.</param> </member> <member name="M:Microsoft.Identity.Json.Bson.BsonWriter.WriteValue(System.Single)"> <summary> Writes a <see cref="T:System.Single"/> value. </summary> <param name="value">The <see cref="T:System.Single"/> value to write.</param> </member> <member name="M:Microsoft.Identity.Json.Bson.BsonWriter.WriteValue(System.Double)"> <summary> Writes a <see cref="T:System.Double"/> value. </summary> <param name="value">The <see cref="T:System.Double"/> value to write.</param> </member> <member name="M:Microsoft.Identity.Json.Bson.BsonWriter.WriteValue(System.Boolean)"> <summary> Writes a <see cref="T:System.Boolean"/> value. </summary> <param name="value">The <see cref="T:System.Boolean"/> value to write.</param> </member> <member name="M:Microsoft.Identity.Json.Bson.BsonWriter.WriteValue(System.Int16)"> <summary> Writes a <see cref="T:System.Int16"/> value. </summary> <param name="value">The <see cref="T:System.Int16"/> value to write.</param> </member> <member name="M:Microsoft.Identity.Json.Bson.BsonWriter.WriteValue(System.UInt16)"> <summary> Writes a <see cref="T:System.UInt16"/> value. </summary> <param name="value">The <see cref="T:System.UInt16"/> value to write.</param> </member> <member name="M:Microsoft.Identity.Json.Bson.BsonWriter.WriteValue(System.Char)"> <summary> Writes a <see cref="T:System.Char"/> value. </summary> <param name="value">The <see cref="T:System.Char"/> value to write.</param> </member> <member name="M:Microsoft.Identity.Json.Bson.BsonWriter.WriteValue(System.Byte)"> <summary> Writes a <see cref="T:System.Byte"/> value. </summary> <param name="value">The <see cref="T:System.Byte"/> value to write.</param> </member> <member name="M:Microsoft.Identity.Json.Bson.BsonWriter.WriteValue(System.SByte)"> <summary> Writes a <see cref="T:System.SByte"/> value. </summary> <param name="value">The <see cref="T:System.SByte"/> value to write.</param> </member> <member name="M:Microsoft.Identity.Json.Bson.BsonWriter.WriteValue(System.Decimal)"> <summary> Writes a <see cref="T:System.Decimal"/> value. </summary> <param name="value">The <see cref="T:System.Decimal"/> value to write.</param> </member> <member name="M:Microsoft.Identity.Json.Bson.BsonWriter.WriteValue(System.DateTime)"> <summary> Writes a <see cref="T:System.DateTime"/> value. </summary> <param name="value">The <see cref="T:System.DateTime"/> value to write.</param> </member> <member name="M:Microsoft.Identity.Json.Bson.BsonWriter.WriteValue(System.DateTimeOffset)"> <summary> Writes a <see cref="T:System.DateTimeOffset"/> value. </summary> <param name="value">The <see cref="T:System.DateTimeOffset"/> value to write.</param> </member> <member name="M:Microsoft.Identity.Json.Bson.BsonWriter.WriteValue(System.Byte[])"> <summary> Writes a <see cref="T:System.Byte"/>[] value. </summary> <param name="value">The <see cref="T:System.Byte"/>[] value to write.</param> </member> <member name="M:Microsoft.Identity.Json.Bson.BsonWriter.WriteValue(System.Guid)"> <summary> Writes a <see cref="T:System.Guid"/> value. </summary> <param name="value">The <see cref="T:System.Guid"/> value to write.</param> </member> <member name="M:Microsoft.Identity.Json.Bson.BsonWriter.WriteValue(System.TimeSpan)"> <summary> Writes a <see cref="T:System.TimeSpan"/> value. </summary> <param name="value">The <see cref="T:System.TimeSpan"/> value to write.</param> </member> <member name="M:Microsoft.Identity.Json.Bson.BsonWriter.WriteValue(System.Uri)"> <summary> Writes a <see cref="T:System.Uri"/> value. </summary> <param name="value">The <see cref="T:System.Uri"/> value to write.</param> </member> <member name="M:Microsoft.Identity.Json.Bson.BsonWriter.WriteObjectId(System.Byte[])"> <summary> Writes a <see cref="T:System.Byte"/>[] value that represents a BSON object id. </summary> <param name="value">The Object ID value to write.</param> </member> <member name="M:Microsoft.Identity.Json.Bson.BsonWriter.WriteRegex(System.String,System.String)"> <summary> Writes a BSON regex. </summary> <param name="pattern">The regex pattern.</param> <param name="options">The regex options.</param> </member> <member name="T:Microsoft.Identity.Json.ConstructorHandling"> <summary> Specifies how constructors are used when initializing objects during deserialization by the <see cref="T:Microsoft.Identity.Json.JsonSerializer"/>. </summary> </member> <member name="F:Microsoft.Identity.Json.ConstructorHandling.Default"> <summary> First attempt to use the public default constructor, then fall back to a single parameterized constructor, then to the non-public default constructor. </summary> </member> <member name="F:Microsoft.Identity.Json.ConstructorHandling.AllowNonPublicDefaultConstructor"> <summary> Json.NET will use a non-public default constructor before falling back to a parameterized constructor. </summary> </member> <member name="T:Microsoft.Identity.Json.Converters.BinaryConverter"> <summary> Converts a binary value to and from a base 64 string value. </summary> </member> <member name="M:Microsoft.Identity.Json.Converters.BinaryConverter.WriteJson(Microsoft.Identity.Json.JsonWriter,System.Object,Microsoft.Identity.Json.JsonSerializer)"> <summary> Writes the JSON representation of the object. </summary> <param name="writer">The <see cref="T:Microsoft.Identity.Json.JsonWriter"/> to write to.</param> <param name="value">The value.</param> <param name="serializer">The calling serializer.</param> </member> <member name="M:Microsoft.Identity.Json.Converters.BinaryConverter.ReadJson(Microsoft.Identity.Json.JsonReader,System.Type,System.Object,Microsoft.Identity.Json.JsonSerializer)"> <summary> Reads the JSON representation of the object. </summary> <param name="reader">The <see cref="T:Microsoft.Identity.Json.JsonReader"/> to read from.</param> <param name="objectType">Type of the object.</param> <param name="existingValue">The existing value of object being read.</param> <param name="serializer">The calling serializer.</param> <returns>The object value.</returns> </member> <member name="M:Microsoft.Identity.Json.Converters.BinaryConverter.CanConvert(System.Type)"> <summary> Determines whether this instance can convert the specified object type. </summary> <param name="objectType">Type of the object.</param> <returns> <c>true</c> if this instance can convert the specified object type; otherwise, <c>false</c>. </returns> </member> <member name="T:Microsoft.Identity.Json.Converters.BsonObjectIdConverter"> <summary> Converts a <see cref="T:Microsoft.Identity.Json.Bson.BsonObjectId"/> to and from JSON and BSON. </summary> </member> <member name="M:Microsoft.Identity.Json.Converters.BsonObjectIdConverter.WriteJson(Microsoft.Identity.Json.JsonWriter,System.Object,Microsoft.Identity.Json.JsonSerializer)"> <summary> Writes the JSON representation of the object. </summary> <param name="writer">The <see cref="T:Microsoft.Identity.Json.JsonWriter"/> to write to.</param> <param name="value">The value.</param> <param name="serializer">The calling serializer.</param> </member> <member name="M:Microsoft.Identity.Json.Converters.BsonObjectIdConverter.ReadJson(Microsoft.Identity.Json.JsonReader,System.Type,System.Object,Microsoft.Identity.Json.JsonSerializer)"> <summary> Reads the JSON representation of the object. </summary> <param name="reader">The <see cref="T:Microsoft.Identity.Json.JsonReader"/> to read from.</param> <param name="objectType">Type of the object.</param> <param name="existingValue">The existing value of object being read.</param> <param name="serializer">The calling serializer.</param> <returns>The object value.</returns> </member> <member name="M:Microsoft.Identity.Json.Converters.BsonObjectIdConverter.CanConvert(System.Type)"> <summary> Determines whether this instance can convert the specified object type. </summary> <param name="objectType">Type of the object.</param> <returns> <c>true</c> if this instance can convert the specified object type; otherwise, <c>false</c>. </returns> </member> <member name="T:Microsoft.Identity.Json.Converters.CustomCreationConverter`1"> <summary> Creates a custom object. </summary> <typeparam name="T">The object type to convert.</typeparam> </member> <member name="M:Microsoft.Identity.Json.Converters.CustomCreationConverter`1.WriteJson(Microsoft.Identity.Json.JsonWriter,System.Object,Microsoft.Identity.Json.JsonSerializer)"> <summary> Writes the JSON representation of the object. </summary> <param name="writer">The <see cref="T:Microsoft.Identity.Json.JsonWriter"/> to write to.</param> <param name="value">The value.</param> <param name="serializer">The calling serializer.</param> </member> <member name="M:Microsoft.Identity.Json.Converters.CustomCreationConverter`1.ReadJson(Microsoft.Identity.Json.JsonReader,System.Type,System.Object,Microsoft.Identity.Json.JsonSerializer)"> <summary> Reads the JSON representation of the object. </summary> <param name="reader">The <see cref="T:Microsoft.Identity.Json.JsonReader"/> to read from.</param> <param name="objectType">Type of the object.</param> <param name="existingValue">The existing value of object being read.</param> <param name="serializer">The calling serializer.</param> <returns>The object value.</returns> </member> <member name="M:Microsoft.Identity.Json.Converters.CustomCreationConverter`1.Create(System.Type)"> <summary> Creates an object which will then be populated by the serializer. </summary> <param name="objectType">Type of the object.</param> <returns>The created object.</returns> </member> <member name="M:Microsoft.Identity.Json.Converters.CustomCreationConverter`1.CanConvert(System.Type)"> <summary> Determines whether this instance can convert the specified object type. </summary> <param name="objectType">Type of the object.</param> <returns> <c>true</c> if this instance can convert the specified object type; otherwise, <c>false</c>. </returns> </member> <member name="P:Microsoft.Identity.Json.Converters.CustomCreationConverter`1.CanWrite"> <summary> Gets a value indicating whether this <see cref="T:Microsoft.Identity.Json.JsonConverter"/> can write JSON. </summary> <value> <c>true</c> if this <see cref="T:Microsoft.Identity.Json.JsonConverter"/> can write JSON; otherwise, <c>false</c>. </value> </member> <member name="T:Microsoft.Identity.Json.Converters.DataSetConverter"> <summary> Converts a <see cref="T:System.Data.DataSet"/> to and from JSON. </summary> </member> <member name="M:Microsoft.Identity.Json.Converters.DataSetConverter.WriteJson(Microsoft.Identity.Json.JsonWriter,System.Object,Microsoft.Identity.Json.JsonSerializer)"> <summary> Writes the JSON representation of the object. </summary> <param name="writer">The <see cref="T:Microsoft.Identity.Json.JsonWriter"/> to write to.</param> <param name="value">The value.</param> <param name="serializer">The calling serializer.</param> </member> <member name="M:Microsoft.Identity.Json.Converters.DataSetConverter.ReadJson(Microsoft.Identity.Json.JsonReader,System.Type,System.Object,Microsoft.Identity.Json.JsonSerializer)"> <summary> Reads the JSON representation of the object. </summary> <param name="reader">The <see cref="T:Microsoft.Identity.Json.JsonReader"/> to read from |