Stephan van Rooij

@bgavrilMS the proposed solution would also work during development. You give the developer sign permission to the key vault and the developer would not be able to extract the certificate,...

@krisrandall could you explain when you get this error, by calling `authenticate` it checks if their is a code from the identity provider [here](https://github.com/jumbojett/OpenID-Connect-PHP/blob/master/OpenIDConnectClient.php#L225) and else it will call `requestAuthorization`...

How about just creating an array of expected issuers, check with that and throw an error is the issuer is not in the array? That is the recommended way to...

Just my opinion, but new projects should not support legacy authentication systems. LDAP is so 1990s...

This issue is roughly two and a half years old. Any updates? Blazor Web Assembly is super useful for a Teams app where a lot has to happen client side...

That small line all the way at the bottom of the readme might help, but why not fix the cause that new developers don't need this mess? Do the files...

@bgavrilMS you wanted to go "managed identity everywhere"? How about support for the following? ```csharp var app = ConfidentialClientApplicationBuilder .Create(clientId) .WithAuthority(AzureCloudInstance.AzurePublic, tenantId) .WithManagedIdentity(federatedScope) .Build(); ``` I figured out a way...

@msundman78 I got you covered https://github.com/Smartersoft/identity-client-assertion/blob/main/docs%2FSmartersoft.Identity.Client.Assertion.md This shows you how to use the key to sign the assertion in the cloud, the key will NEVER leave the keyvault. But still...

@msundman78 at some point in time, you were able to use a token you got from managed identity as a federated credential for a multi tenant app. I've build a...

Have you seen my extensions methods on the confidential client builder? It allows you to use a certificate from the keyvault as you described with it being marked as not...