Microsoft.Identity.Client.ApiConfig.Parameters.AcquireTokenForManagedIdentityParameters

class AcquireTokenForManagedIdentityParameters : IAcquireTokenParameters

public Func<string, SafeHandle, string, string, ILoggerAdapter, CancellationToken, Task<string>> AttestationTokenProvider { get; set; }

Optional delegate for obtaining attestation JWT for Credential Guard keys. Set by the KeyAttestation package via .WithAttestationSupport(). Signature: (endpoint, keyHandle, clientId, keyId, logger, cancellationToken) → JWT or null.

public string Claims { get; set; }

public bool ForceRefresh { get; set; }

public bool IsMtlsPopRequested { get; set; }

public MtlsBindingStrength MtlsPopMinStrength { get; set; }

The minimum mTLS binding strength the host must support for the request to succeed. Defaults to None (no floor).

public bool PreferMsiV2 { get; set; }

When true, MSAL uses the full IMDSv2 attested flow (mTLS connection to ESTS via a Credential Guard–issued certificate) but requests token_type=bearer from the token endpoint, returning a standard bearer token with no binding certificate.

public string Resource { get; set; }

public string RevokedTokenHash { get; set; }

public AcquireTokenForManagedIdentityParameters()

public void LogParameters(ILoggerAdapter logger)