ADAL deprecation and SharePoint Online

Question

I am seeing posts about ADAL being deprecated, but nothing on migrating SharePoint Client Object Model / SharePoint REST APIs / or JSOM to support to support MSAL tokens.

There are several items Graph does not support and we need to continue to use these tools. Is there any information on using the CSOM with an MSAL token?

Answer 1

Hi @Ted Wagner ,

Below is my sample for you to get the MSAL access token

    private static async Task<string> GetToken()  
    {  
        string applicationId = "client-id";  
        string tenantId = "tenant.onmicrosoft.com";  
        X509Certificate2 certificate = new X509Certificate2(@"C:\cer.pfx", "password");  

        IConfidentialClientApplication confApp = ConfidentialClientApplicationBuilder.Create(applicationId)  
        .WithAuthority($"https://login.microsoftonline.com/{tenantId}")  
        .WithCertificate(certificate)   
        .Build();  

        var scopes = new[] { "https://tenant.sharepoint.com/.default" };  
        var authenticationResult = await confApp.AcquireTokenForClient(scopes).ExecuteAsync();  
        return authenticationResult.AccessToken;  
    }  
    static async Task Main(string[] args)  
    {  


        string site = "https://tenant.sharepoint.com/sites/test";  
        string token = await GetToken();  
        Console.WriteLine(token);  

        ClientContext ctx = new ClientContext(site);  
        ctx.ExecutingWebRequest += (s, e) =>  
        {  
            e.WebRequestExecutor.RequestHeaders["Authorization"] = "Bearer " + token;  
        };  
        Web web = ctx.Web;  
        ctx.Load(web);  
        ctx.ExecuteQuery();  
        Console.WriteLine(web.Title);  

    }  

Here is a nice blog to use CSOM with an MSAL toke for your reference: https://www.vrdmn.com/2020/06/using-net-standard-csom-and-msalnet-for.html

And I would suggest use PnP Framework library directly for SharePoint CSOM. This is much easier. For example, you just need to get the clientcontext like below.

var context = new PnP.Framework.AuthenticationManager(clientId, certificatePath, password, "tenant.onmicrosoft.com").GetContext(site);  

---

If an Answer is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 2

Hi @Ted Wagner ,

If you want to use username and password for authentication, the AuthenticationManager class in PnP Framework library also supports it. Below is my sample for you:

        String name = "michael@tenant.onmicrosoft.com";  
        String password = "xxxx";  
        SecureString securePassword = new SecureString();  
        foreach (char c in password.ToCharArray())  
        {  
            securePassword.AppendChar(c);  
        }  

        string site = "https://tenant.sharepoint.com/sites/test";  
        var authenticationManager = new AuthenticationManager(name, securePassword);  
        var ctx = authenticationManager.GetContext(site);  
        Web web = ctx.Web;  
        ctx.Load(web);  
        ctx.ExecuteQuery();