Microsoft.Identity.Client

This package contains the binaries of the Microsoft Authentication Library for .NET (MSAL.NET). MSAL.NET makes it easy to obtain tokens from the Microsoft identity platform for developers (formerly Azure AD v2.0) signing-in users with work & school accounts, Microsoft personal accounts, and social identities via Azure AD B2C. These tokens provide access to Microsoft Cloud API and any other API secured by the Microsoft identity platform. This version supports adding authentication functionality to your .NET based clients - .NET, .NET Framework, .NET MAUI

View on Nuget

Activity

Latest release: 3d ago
Total releases: 217
Cadence: ~6 days
Last 12 months: 38

Details

License: MIT
First release: Mar 29, 2016

Releases

Version	Released
`4.89.0` minor	Sep 10, 2026
`4.88.0` minor	Aug 20, 2026
`4.87.1-preview.2` pre	Aug 12, 2026
`4.87.0` minor	Jul 24, 2026
`4.86.1` patch	Jul 15, 2026
`4.86.1-azure-arc-preview` pre	Jul 15, 2026
`4.86.0` minor	Jul 08, 2026
`4.85.2` patch	Jun 26, 2026
`4.85.1` patch	Jun 23, 2026
`4.85.0` minor	Jun 19, 2026
`4.84.2` patch	Jun 04, 2026
`4.84.2-preview4-GetManagedIdentityCapabilitiesAsync` pre	Jun 03, 2026
`4.84.2-preview3-mtls-pop-host-check` pre	May 29, 2026
`4.84.2-preview2-orphaned-kg-certs` pre	May 28, 2026
`4.84.2-preview` pre	May 23, 2026
`4.84.1` patch	May 19, 2026
`4.84.1-preview` pre	May 15, 2026
`4.84.0` minor	May 04, 2026
`4.83.4-preview1` pre	Apr 03, 2026
`4.83.3` patch	Mar 30, 2026
`4.83.1` patch	Mar 10, 2026
`4.83.0-preview-1` pre	Mar 09, 2026
`4.83.0` minor	Mar 09, 2026
`4.82.1-preview2` pre	Mar 06, 2026
`4.82.1-preview` pre	Feb 24, 2026
`4.82.1` patch	Feb 05, 2026
`4.82.0` minor	Feb 02, 2026
`4.81.0-preview-1` pre	Jan 31, 2026
`4.82.0-preview-2` pre	Jan 29, 2026
`4.82.0-preview-1` pre	Jan 15, 2026
`4.81.0` minor	Jan 08, 2026
`4.80.0` minor	Jan 05, 2026
`4.79.2` patch	Nov 17, 2025
`4.79.1` patch	Nov 13, 2025
`4.79.0` minor	Nov 10, 2025
`4.77.2-preview1` pre	Oct 31, 2025
`4.78.1-preview1` pre	Oct 24, 2025
`4.78.0` minor	Oct 24, 2025
`4.77.1` patch	Sep 24, 2025
`4.76.2-preview` pre	Sep 13, 2025
`4.77.0` minor	Sep 11, 2025
`4.76.1-preview` pre	Sep 10, 2025
`4.74.0-pop-attestation-2` pre	Sep 03, 2025
`4.74.0-pop-attestation-1` pre	Sep 02, 2025
`4.76.0` minor	Aug 15, 2025
`4.73.0-pop-assertion-preview` pre	Aug 09, 2025
`4.74.1-preview1` pre	Jul 27, 2025
`4.74.1` patch	Jul 21, 2025
`4.74.0` minor	Jul 14, 2025
`4.72.3-slc-preview` pre	Jul 01, 2025

1–50 of 217

Dependencies (6)

Depends on

4.89.0

Used by

815

Supply-chain exposure

815 tracked projects depend on this, <1% of every package we track.

A known CVE here directly exposes every one of them.

Known CVEs (2)

CVE-2024-35255 GHSA-m5vv-6r4h-3vj9 GO-2024-2918 PYSEC-2026-1209 Jun 11, 2024

Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability

Medium
Local Low Low None

Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability.

Affected versions

4.49.14.50.04.51.04.52.04.53.04.54.04.54.14.55.04.55.0-TestPackage4.56.04.57.04.58.0

+ 11 more Show less

4.58.14.59.04.59.14.60.04.60.0-netonly4.60.14.60.24.60.34.61.04.61.14.61.2

Fixed in

4.60.44.61.3

References

https://nvd.nist.gov/vuln/detail/CVE-2024-35255
https://github.com/AzureAD/microsoft-authentication-library-for-dotnet/issues/4806#issuecomment-2178960340
https://github.com/Azure/azure-sdk-for-go/commit/50774cd9709905523136fb05e8c85a50e8984499
https://github.com/Azure/azure-sdk-for-java/commit/5bf020d6ea056de40e2738e3647a4e06f902c18d
https://github.com/Azure/azure-sdk-for-js/commit/c6aa75d312ae463e744163cedfd8fc480cc8d492
https://github.com/Azure/azure-sdk-for-net/commit/9279a4f38bf69b457cfb9b354f210e0a540a5c53

Updated Sep 10, 2026 · Source: OSV.dev
CVE-2024-27086 GHSA-x674-v45j-fwxw Apr 16, 2024

MSAL.NET applications targeting Xamarin Android and .NET Android (MAUI) susceptible to local denial of service

3.9 / 10
Low
Local Low Low Required Unchanged None Low Low

[!IMPORTANT] ONLY applications targeting Xamarin Android and .NET Android (MAUI) are impacted. All others can safely dismiss this CVE.

Impact

MSAL.NET applications targeting Xamarin Android and .NET Android (e.g., MAUI) using the library from versions 4.48.0 to 4.60.3 (inclusive, except 4.59.1 and 4.60.3) are impacted by a low severity vulnerability.

A malicious application running on a customer Android device can (1) inject HTML/JavaScript in an embedded web view exported by affected applications, or (2) cause local denial of service against applications that were built using MSAL.NET for authentication on the same device (i.e., prevent the user of the legitimate application from logging in) due to incorrect activity export configuration.

Patches

MSAL.NET version 4.60.3 includes the fix. We recommend all users of MSAL.NET that are building public client applications for Android update to the latest version.

Workarounds

We recommend developers update to the latest version of MSAL.NET. If that is not possible, a developer may explicitly mark the MSAL.NET activity non-exported:

<activity android:name="microsoft.identity.client.AuthenticationAgentActivity" android:configChanges="orientation|screenSize" android:exported="false"> <intent-filter> <action android:name="android.intent.action.VIEW" /> <category android:name="android.intent.category.DEFAULT" /> <category android:name="android.intent.category.BROWSABLE" /> <data android:scheme="msalYOUR_CLIENT_ID" android:host="auth" /> </intent-filter> </activity>

References

Refer to MSAL.NET documentation for latest guidance and best practices on configuring client applications using the library.

Affected versions

4.48.04.48.14.49.04.49.14.50.04.51.04.52.04.53.04.54.04.54.14.55.04.55.0-TestPackage

+ 8 more Show less

4.56.04.57.04.58.04.58.14.59.04.60.04.60.14.60.2

Fixed in

4.59.14.60.3

References

https://github.com/AzureAD/microsoft-authentication-library-for-dotnet/security/advisories/GHSA-x674-v45j-fwxw
https://nvd.nist.gov/vuln/detail/CVE-2024-27086
https://github.com/AzureAD/microsoft-authentication-library-for-dotnet/commit/413e319472ccf48c86647f19fa2aa49ff6038488
https://github.com/AzureAD/microsoft-authentication-library-for-dotnet
https://learn.microsoft.com/en-us/entra/msal/dotnet
https://www.nuget.org/packages/Microsoft.Identity.Client

Updated Sep 10, 2026 · Source: OSV.dev

Insights

Releases per month

last 12 months

Release mix

major 2
minor 89
patch 60
pre 65

217 releases

Dependencies over time

per release

Release calendar

2026

Jan

Feb

Mar

Apr

May

Jun

Jul

Aug

Sep

Oct

Nov

Dec

Less More