microsoft-authentication-library-for-python icon indicating copy to clipboard operation
microsoft-authentication-library-for-python copied to clipboard
verified publisher icon AzureAD

Add test case to show that OBO supports SP

Open rayluo opened this issue 3 years ago • 4 comments

  • There is no code change to MSAL's implementation in this PR. This means the existing MSAL Python needs no change to support the OBO-for-SP scenario, perhaps since the initial OBO implementation.
  • This PR contains changes to MSAL's test case, to demonstrate that how OBO for SP could work. It is a matter of how the mid-tier app chooses to manage the potentially-more-than-one SP "accounts", which can be an open topic for discussion.
  • Currently, the test certificate is not committed, so, the new test case will not be run in CI. But it was manually run by PR author.

rayluo avatar Jun 08 '22 18:06 rayluo

We have an E2E in MSAL.NET - please ping the .NET team to discuss about the certificate.

bgavrilMS avatar Oct 10 '23 10:10 bgavrilMS

This branch has conflicts that must be resolved.

micwoj92 avatar Nov 18 '23 00:11 micwoj92

This branch has conflicts that must be resolved.

Thanks. We will be informed of this by github when we revisit this PR (possibly while attempting to solve the test cert topic mentioned above).

Meanwhile, assuming your interest on this topic was driven by your trying to find an OBO example for Service Principal, this PR in its current form (i.e., before merging) still worked as-is, and can serve its current purpose of showcasing how to do OBO with SP.

rayluo avatar Nov 18 '23 22:11 rayluo

@micwoj92 - just to set expectations here. OBO for service principals is currently being experimented on by some internal teams. There is not way for external customers to configure it.

bgavrilMS avatar Nov 20 '23 12:11 bgavrilMS