Microsoft.Identity.Client.ManagedIdentity.V2.MsiCertificateFriendlyNameEncoder
Encodes/decodes the X.509 FriendlyName used by MSAL for mTLS-bound certificates.
Best-effort only: methods are non-throwing so certificate persistence never blocks auth.
namespace Microsoft.Identity.Client.ManagedIdentity.V2
{
internal static class MsiCertificateFriendlyNameEncoder
{
public const string Prefix = "MSAL|";
public const string TagAlias = "alias";
public const string TagEp = "ep";
public static bool TryEncode(string alias, string endpointBase, out string friendlyName);
public static bool TryDecode(string friendlyName, out string alias, out string endpointBase);
}
}