OAuth 2.0

MSAL.js 2.0 is now generally available with support for authorization code flow

July 20, 2020 Jul 20, 2020 07/20/20

MSAL.js 2.0 supports authorization code flow for single-page applications with PKCE and CORS is now generally available.

Update your applications to use Microsoft Authentication Library and Microsoft Graph API

June 22, 2020 Jun 22, 2020 06/22/20

Microsoft identity platform team

Today we're announcing end of support timelines for Azure AD Authentication Library (ADAL) and Azure AD Graph. Starting June 30th, 2020, we will no longer add any new features to ADAL and Azure AD Graph. We will continue to provide technical support and security updates but will no longer provide feature updates. Starting June 30th, 2022, we will end support for and Azure AD Graph and will no longer provide technical support or security updates. Apps using Azure AD Graph after this time will no longer receive responses from the Azure AD Graph endpoint.

Deferred end of support date for Basic Authentication in Exchange Online

April 3, 2020 Apr 3, 2020 04/3/20

Sivaprakash Saripalli

Last year we announced end of support for Basic Authentication for Exchange Web Services (EWS), Exchange Active Sync (EAS), Post Office Protocol (POP), Internet Message Access Protocol (IMAP), and Remote PowerShell (RPS) in Exchange Online. In response to the COVID-19 crisis and knowing that priorities have changed for many of our ...

Microsoft Authentication Libraries for Android, iOS and macOS are now Generally Available

October 10, 2019 Oct 10, 2019 10/10/19

Microsoft identity platform team

We are excited to announce General Availability of Microsoft Authentication Libraries (MSAL) for Android, iOS and macOS!

Our thoughts on implicit grant with Microsoft identity

May 3, 2019 May 3, 2019 05/3/19

Microsoft identity platform team

Microsoft Azure Active Directory uses open industry standard protocols such as OAuth2 and OpenID Connect. The OAuth2 working group recently released a draft of the best practices on how to secure applications using OAuth2 and OpenID Connect.