Bogdan Gavril

How about we test this out in MSAL Golang, which is being worked on, and then make the changes in the other MSALs too? It will help with testing. But...

Just an update on this - @4gust is testing with `msi_res_id` in MSAL Golang. So far this works well for: IMDS, Arc and App Service. Once we confirm the other...

Close this and track it via ADO?

> Fixes #5138 > > **Changes proposed in this request** This pull request includes several changes to the `Microsoft.Identity.Client` library to support claims and capabilities in managed identity requests. The...

@gladjohn - what's the status on this one - when can it be merged?

Hi @devlanfear, to implement your own "browser", please use this extensibility mechanism: https://docs.microsoft.com/en-us/azure/active-directory/develop/scenario-desktop-acquire-token?tabs=dotnet#use-withcustomwebui I hope the comments on that interface are sufficient - essentially we give you an URL that...

It's ok to just reuse the IMDS retry policy.

@4gust - was this implemented?

The Managed Identity infrastructure can suffer from availability issues in certain circumstances. We have updated IdWeb to use a different way of getting tokens from Managed Identity. Can you try...

Hi @Avery-Dunn - I think this is because you used base64 decoding. But jwts are encoded with `base64URL` protocol. See here for a comparison: https://stackoverflow.com/questions/55389211/string-based-data-encoding-base64-vs-base64url