A resource can define a number of scopes, or oAuth2Permissions in the app manifest, that it understands. In ADAL, an app had to provide a resource identifier like to acquire tokens from the Azure Active Directory v1.0 endpoint. For most apps, one MSALPublicClientApplication instance is sufficient. One instance of MSALPublicClientApplication can be used to interact with multiple Azure AD clouds, and tenants, without needing to create a new instance for each authority. In MSAL, the main interaction is through an MSALPublicClientApplication object, which is modeled after OAuth 2.0 Public Client. The same ADAuthenticationContext can be used to get tokens for multiple public client applications. Apps create a new instance of ADAuthenticationContext for each Azure Active Directory cloud and tenant (authority) combination. MSALPublicClientApplication instead of ADAuthenticationContextĪDAuthenticationContext is the first object an ADAL app creates. The MSAL public API reflects a few key differences between Azure AD v1.0 and the Microsoft identity platform. For more information, see permissions and consent. Apps can ask for permissions only as needed and request more as the app needs them.

The Microsoft identity platform allows you to request permissions dynamically.

The Microsoft identity platform follows OAuth 2.0 and OpenId Connect standards.

MSAL supports work and school accounts, and Azure AD B2C accounts.

MSAL supports personal Microsoft accounts (MSA accounts) such as, , and.

ADAL only supports work and school accounts-also known as Azure AD accounts.ADAL and MSAL app capability differences Who can sign in This article highlights these differences and provides guidance to migrate an app from ADAL to MSAL. The Microsoft identity platform has a few key differences with Azure Active Directory v1.0. The Microsoft Authentication Library for iOS and macOS (MSAL) is built to work with all Microsoft identities such as Azure Active Directory (Azure AD) accounts, personal Microsoft accounts, and Azure AD B2C accounts via the Microsoft identity platform (formally the Azure AD v2.0 endpoint).

The Azure Active Directory Authentication Library ( ADAL Objective-C) was created to work with Azure Active Directory accounts via the v1.0 endpoint.

Objective c to swift migration