CBA on Android

testuser7 286 Reputation points
2024-01-29T19:50:55.0566667+00:00

I have quick question

on Android, can app do CBA (cert based authentication ) with latest MSAL library without broker (MS-authenticator ) ?

My certificate is in yubikey and my installed native app is using latest MSAL library but NOT wired with broker. Thanks.

Microsoft Security | Microsoft Entra | Microsoft Entra ID
0 comments No comments
{count} votes

3 answers

Sort by: Most helpful
  1. Shweta Mathur 30,296 Reputation points Microsoft Employee Moderator
    2024-01-30T11:08:17.8466667+00:00

    Hi @testuser7 , Thanks for reaching out.

    Applications using the latest Microsoft Authentication Library (MSAL) can do certificate-based authentication (CBA) on Android devices without the Microsoft Authenticator app.

    However, to support YubiKeys with Microsoft Entra CBA, YubiKey Android SDK has been integrated into the Microsoft broker code which can be leveraged through the latest MSAL.

    I would suggest you post this idea at the Azure Feedback Portal, which is monitored by the product team for feature enhancements.

    Hope this will help.

    Thanks,

    Shweta


    Please remember to "Accept Answer" if answer helped you.

    0 comments No comments

  2. testuser7 286 Reputation points
    2024-01-30T12:25:34.8866667+00:00

    Thanks @Sweta Mathur but I am confused by your two different statements.

    you said that apps using latest MSAL can do CBA without broker.

    of course yubikey-SDK has been integrated into broker but like I said, app is NOT using broker. So can app do CBA just with the help of latest MSAL ??

    0 comments No comments

  3. testuser7 286 Reputation points
    2024-01-30T12:54:54.5+00:00

    Thanks but I am confused by your two different statements. you said that apps using latest MSAL can do CBA without broker. of course yubikey-sdk has been integrated into broker but like I said, app is NOT using broker. So can app do CBA just with the help of latest MSAL ??

    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.