-
Couldn't load subscription status.
- Fork 378
Closed
Description
MSAL client type
Confidential
Problem statement
FMI tokens, Entra's solution for SPIFEE
Proposed solution
Create a new API on AcquireTokenForClient - WithFmiPath(string pathSuffix). . It shall be experimental for the time being.
Internally, it will do the following.
- It will add
fmi_path={pathSuffix}to the /token request - It will change the access token cache key by adding
fmi_pathto the cache key
We should be able to write integration tests for this. Upon requesting an FMI token, the sub claim will be changed to contain the fmi_path.
THe new API is experimental.
Acceptance test: get an app token with an FMI path and assertr that the sub claim has the FMI path.