Bogdan Gavril

How does your token look like? (make sure to hide any PII like name etc) Here's mine from https://jwt.ms 

Thanks I got it. I think it's a broker issue. I am able to get a response if I use the browser to authenticate, but I get the `Token must...

Yes, please do escalate this issue via Azure support and via your account manager to get more attention to it. CC @localden and @ashok672

I'm editing the issue to make it clear, as it's a pretty long thread.

@marbon87 - can you convince KeyCloack to call `https://graph.microsoft.com/v1.0/me` instead of the userinfo endpoint? I think they are similar.

@Robbie-Microsoft - pls continue to the work we discussed, but do not commit. This work hasn't been OK-ed yet by the MSI team. It will anyway be required for MSIv2....

Right, this is a feature gap with WAM. It does not support fetching SSH certificates.

MSAL Py also supports fetching SSH certificates. It is possible that the team also added support for WAM + SSH certificates, I don't recollect. @rayluo @jiasli @iulico-1 - do you...

Let's take this one as well please.

We recommend using the broker for logging in with AAD. https://learn.microsoft.com/en-us/entra/msal/java/advanced/using-wam-and-the-msal4jbrokers-package