<PackageReference Include="Microsoft.Identity.Client" Version="4.84.2-preview4-GetManagedIdentityCapabilitiesAsync" />

Microsoft.Identity.Client.AuthScheme.IAuthenticationOperation3

Extends IAuthenticationOperation2 with a lifecycle hook so MSAL can pass runtime context (e.g., the mTLS certificate selected for the current request) to a custom authentication operation. Enables composition of schemes such as CDT + mTLS PoP without MSAL having to replace the operation.

MSAL invokes this once per token request, after it has evaluated the credentials that will be used. The operation reads what it needs from context and configures itself for the upcoming FormatResult call.