msal-angular with AD FS 2019

[sglickman]

Core Library

MSAL.js v2 (@azure/msal-browser)

Core Library Version

^2.19.0

Wrapper Library

MSAL Angular (@azure/msal-angular)

Wrapper Library Version

^2.0.5

Description

I'm trying to follow the msal-angular-tutorial to create an angular app which authenticates against an on-premise AD FS 2019 server.

I see that this should be supported, per this pull request, but I can't seem to get it working, and am wondering what I'm doing wrong, or if there is any documentation around AD FS 2019 (vs. Azure-managed authentication).

I'm seeing an issue where when I try to log in, it's attempting to hit login.microsoftonline.com which returns a 400 error.

Here's my MsalModule setup code.

    MsalModule.forRoot(new PublicClientApplication({
      auth: {
        clientId: CLIENT_ID, // This is your client ID
        authority: ADFS_2019_ENDPOINT, // This is your tenant ID
        redirectUri: 'http://localhost:4200/' // This is your redirect URI
      },
      cache: {
        cacheLocation: 'localStorage',
        storeAuthStateInCookie: isIE, // Set to true for Internet Explorer 11
      }
    }), null, null)

ADFS_2019_ENDPOINT looks like 'https://staging.mydomain.com/adfs'

I would have expected that supplying a URL for the authority field would have overridden any references to login.microsoftonline.com, but am I doing something wrong?

MSAL Configuration

{
  auth: {
    clientId: CLIENT_ID, // This is your client ID
    authority: ADFS_2019_ENDPOINT, // This is your tenant ID
    redirectUri: 'http://localhost:4200/' // This is your redirect URI
  },
  cache: {
    cacheLocation: 'localStorage',
    storeAuthStateInCookie: isIe, // Set to true for Internet Explorer 11
  }
}), null, null)

Relevant Code Snippets

No response

Identity Provider

ADFS

Source

External (Customer)

[sglickman]

Seeing this error in my browser console:

GET https://login.microsoftonline.com/common/discovery/instance?api-version=1.1&authorization_endpoint=https://staging.mydomain.com/adfs/oauth2/v2.0/authorize 400

[sglickman]

I added a knownAuthorities section and it seems to be working - apologies for the noise but it would be very helpful to have a mention of this on the tutorial page.