-
Notifications
You must be signed in to change notification settings - Fork 366
MSAL.NET telemetry solution overview
MSAL.NET sends basic telemetry about the client side state on requests to the ESTS token endpoint. Telemetry data will be logged by ESTS. This telemetry will give us visibility into both 1st and 3rd party app health without introducing an additional telemetry pipeline dependency into the open source SDK. MSAL.NET collects this telemetry to proactively detect server side failures or library regressions, in order to provide a better service.
Basic telemetry includes:
- Client side state at the time of the request - shows the reason for the request execution, e.g. client app requested prompt, no cached tokens, expired access token etc
- Errors for preceding requests that failed
- SDK API usage metadata - e.g. which API/parameters were used for the request
MSAL requests to the token endpoint will have 2 additional headers:
- Current request header: "x-client-current-telemetry"
- Current request will contain information about the current public API request.
- Last request header: "x-client-last-telemetry"
- Last request contains information about failures for any previous requests.
Current request and last request are appended to calls to the token endpoint.
Current requests are used in telemetry to help proactively detect server side issues or library regressions with as little impact to the customer as possible. An example of the current request header format is found here.
Failed requests are used in telemetry to help proactively detect server side issues or library regressions with as little impact to the customer as possible. An example of the last request header format is found here.
- Home
- Why use MSAL.NET
- Is MSAL.NET right for me
- Scenarios
- Register your app with AAD
- Client applications
- Acquiring tokens
- MSAL samples
- Known Issues
- Acquiring a token for the app
- Acquiring a token on behalf of a user in Web APIs
- Acquiring a token by authorization code in Web Apps
- AcquireTokenInteractive
- WAM - the Windows broker
- .NET Core
- Maui Docs
- Custom Browser
- Applying an AAD B2C policy
- Integrated Windows Authentication for domain or AAD joined machines
- Username / Password
- Device Code Flow for devices without a Web browser
- ADFS support
- High Availability
- Regional
- Token cache serialization
- Logging
- Exceptions in MSAL
- Provide your own Httpclient and proxy
- Extensibility Points
- Clearing the cache
- Client Credentials Multi-Tenant guidance
- Performance perspectives
- Differences between ADAL.NET and MSAL.NET Apps
- PowerShell support
- Testing apps that use MSAL
- Experimental Features
- Proof of Possession (PoP) tokens
- Using in Azure functions
- Extract info from WWW-Authenticate headers
- SPA Authorization Code