Microsoft.Identity.Client.ApiConfig.Parameters.AcquireTokenForManagedIdentityParameters
public Func<string, SafeHandle, string, string, ILoggerAdapter, CancellationToken, Task<string>> AttestationTokenProvider { get; set; }
Optional delegate for obtaining attestation JWT for Credential Guard keys.
Set by the KeyAttestation package via .WithAttestationSupport().
Signature: (endpoint, keyHandle, clientId, keyId, logger, cancellationToken) → JWT or null.
Client-originated claims to be sent to the identity endpoint.
Unlike Claims (server-issued), these are cached and keyed on the claims value.