[FEATURE REQ] Expose claims on Confidential Client flows (user and service pricipal)

[bgavrilMS]

Library name

Azure Identity

Please describe the feature.

Claims are a key part of AAD. Claims can come from both the STS and from the Resource. A few scenarios where claims are important:

1. For the new token revocation for service principal scenario, which is effectively implemented via CAE. You will get claims from the resource.
2. In web site and web api scenario, when going across tenants. For example:

• user gets a token for tenant A and a refresh token.
• user now silently tries to get a token for tenant B. Normally this works, but the tenant B admin requested configured MFA
• ESTS responds with an error code indicating that UI is required and with some claims
• the app should extract the Claims from the MsalUiRequiredException and request a token interactively again (doesn't matter what tenant)

3. In the "Authentication Context" scenario, which I will not go at lenghts here, but please see this sample (sorry, this is a Java sample because the .NET one is overly complex) - https://github.com/Azure-Samples/ms-identity-msal-java-samples/tree/main/3-java-servlet-web-app/1-Authentication/sign-in-auth-context

[jsquire]

Thank you for your feedback. Tagging and routing to the team member best able to assist.