Peter

I rephrased the title. Yes, I meant that that OneBranch should be sufficient and be our primary pipelines. If there are blockers, we should create support tickets with them, sooner...

As part of this we should also add a clear code snippet in our docs on how to do this: > Correct pattern is: > > Extract tid claim from...

Were the docs updated?

Closing - this was released in 4.60.0. Added an issue in the docs repo for the related updates: https://github.com/MicrosoftDocs/microsoft-authentication-library-dotnet/issues/393

@gladjohn Should this be set to draft; you're splitting it into a separate PR?

There are two types of `WithExtraQueryParameters`, some on [application builder](https://learn.microsoft.com/en-us/dotnet/api/microsoft.identity.client.abstractapplicationbuilder-1.withextraqueryparameters?view=msal-dotnet-latest) (makes the parameters application-wide) and some on the [acquire token builder](https://learn.microsoft.com/en-us/dotnet/api/microsoft.identity.client.abstractacquiretokenparameterbuilder-1.withextraqueryparameters?view=msal-dotnet-latest) (for per-request parameters). Took a quick look and they...

From your code snippet above can you remove `.WithUseEmbeddedWebView(true)`, does work then? It should be either `WithBroker()` or `.WithUseEmbeddedWebView(true)`.

Which sign-in window is it: embedded web view, WAM, WAM preview? Which TFM is this, net7.0-windowsX?

What you have is a token endpoint. B2C authority should look like `https://{your-tenant-name}.b2clogin.com/tfp/{your-tenant-ID}/{policyname}` and AAD authority like `https://login.microsoftonline.com//`. B2C authorities: https://learn.microsoft.com/en-us/entra/msal/dotnet/acquiring-tokens/desktop-mobile/social-identities Azure AD authorities: https://learn.microsoft.com/en-us/entra/identity-platform/msal-client-application-configuration#authority We refactored that code. It...

Another possible analyzer tool: https://github.com/dotnet/roslyn-analyzers/blob/main/src/PublicApiAnalyzers/PublicApiAnalyzers.Help.md