Microsoft.Identity.Web Namespace

  • Reference

Classes

ApiControllerExtensions

Extension methods to retrieve a Graph service client, or interfaces used to call downstream web APIs.
AppBuilderExtension

Extension methods on an ASP.NET application to add a web app or web API.
AzureIdentityForKubernetesClientAssertion

Gets a signed assertion from Azure workload identity for kubernetes when an app is running in a container in Azure Kubernetes Services. See https://aka.ms/ms-id-web/certificateless and https://learn.microsoft.com/azure/aks/workload-identity-overview
BaseRequestExtensions

Extension methods for Graph requests
CertificateDescription

Description of a certificate.
CertificatelessOptions

Options for configuring CertificatelessOptions. See https://aka.ms/ms-id-web/certificateless.
ClaimConstants

Constants for claim types.
ClaimsPrincipalExtensions

Extensions for ClaimsPrincipal.
ClientAssertion

Client assertion.
ClientAssertionProviderBase

Description of a client assertion in the application configuration. See https://aka.ms/ms-id-web/client-assertions.
Constants

General constants for Microsoft Identity Web.
ControllerBaseExtensions

Extension methods to retrieve a Graph service client and interfaces used to call a downstream web API.
DefaultCertificateLoader

Certificate Loader. Only use when loading a certificate from a daemon application, or an ASP NET app, using MSAL .NET directly. For an ASP NET Core app, Microsoft Identity Web will handle the certificate loading for you. 

IConfidentialClientApplication app;
ICertificateLoader certificateLoader = new DefaultCertificateLoader();
    certificateLoader.LoadIfNeeded(config.CertificateDescription);

   app = ConfidentialClientApplicationBuilder.Create(config.ClientId)
          .WithCertificate(config.CertificateDescription.Certificate)
          .WithAuthority(new Uri(config.Authority))
          .Build();
DefaultCredentialsLoader

Default credentials loader.
DownstreamRestApiExtensions

Extension methods to support downstream REST API services.
GraphServiceCollectionExtensions

Extensions methods on a MicrosoftIdentityAppCallingWebApiAuthenticationBuilder builder to add support to call Microsoft Graph.
ManagedIdentityClientAssertion

See https://aka.ms/ms-id-web/certificateless.
MicrosoftGraphOptions

Options passed-in to call Microsoft Graph.
MicrosoftIdentityAppCallsWebApiAuthenticationBuilder

Authentication builder returned by the EnableTokenAcquisitionToCallDownstreamApi methods enabling you to decide token cache implementations.
MicrosoftIdentityBaseAuthenticationBuilder

Base class for web app and web API Microsoft Identity authentication builders.
MicrosoftIdentityOptions

Options for configuring authentication using Azure Active Directory. It has both AAD and B2C configuration attributes.
MicrosoftIdentityWebChallengeUserException

Microsoft Identity Web specific exception class for use in Blazor or Razor pages to process the user challenge. Handles the MsalUiRequiredException.
OpenIdConnectOptions

OpenIdConnect options
ServiceCollectionExtensions

Extensions for IServiceCollection for startup initialization of web APIs.
TokenAcquirerFactory

Factory of a token acquirer.
TokenAcquisitionOptions

Options passed-in to create the token acquisition object which calls into MSAL .NET.
TokenCacheExtensions

Extension methods to expose a simplified developer experience for adding token caches to MSAL.NET confidential client applications in ASP.NET, or .NET Core, or .NET FW.

Interfaces

ICertificateLoader

Interface to implement loading of a certificate. Only use when loading a certificate from a daemon application, or an ASP NET app, using MSAL .NET directly. For an ASP NET Core app, Microsoft Identity Web will handle the certificate loading for you. 

IConfidentialClientApplication app;
ICertificateLoader certificateLoader = new DefaultCertificateLoader();
    certificateLoader.LoadIfNeeded(config.CertificateDescription);

   app = ConfidentialClientApplicationBuilder.Create(config.ClientId)
          .WithCertificate(config.CertificateDescription.Certificate)
          .WithAuthority(new Uri(config.Authority))
          .Build();
ITokenAcquisition

Interface for the token acquisition service (encapsulating MSAL.NET).

Enums

CertificateSource

Source for a certificate.