Repository navigation
[Core/Auth] Enable native authentication broker on macOS, Linux, and WSL #33842
Description
Activity
Thank you for opening this issue, we will look into it.
Thanks for raising this! Quick update: this is actively in progress. We're currently investing significant time in thorough testing to make sure the change is solid and doesn't introduce regressions across the supported platforms. We appreciate your patience and will follow up with next steps as things progress.
Yeming Liu (@isra-fel) Thanks for the update.
Quick question: Would adding support for linux arm64 also be in the scope of this work? I noticed that pymsalruntime does not ship precompiled wheels for linux arm64
AzureAD/microsoft-authentication-library-for-python#949
Preconditions
Related command
az loginand subsequent user-token acquisition commands.Resource Provider
N/A — Azure CLI core authentication.
Description of Feature or Work Requested
Azure CLI currently enables MSAL's native Web Account Manager broker on Windows through
enable_broker_on_windows, but defaults to browser authentication on macOS, Linux, and WSL.MSAL Python 1.36 supports native brokers through:
enable_broker_on_macenable_broker_on_linuxenable_broker_on_wslEnable the appropriate broker by default on each supported platform when its runtime prerequisites are available. This provides OS-integrated SSO, device-bound authentication, token protection, and support for device-based Conditional Access policies.
When the broker or its native dependencies are unavailable, Azure CLI must retain its existing browser/device-code fallback rather than failing authentication.
Relevant MSAL documentation:
Minimum API Version Required
N/A
Swagger PR link / SDK link
N/A
Request Example
No response
Target Date
N/A
PM Contact
N/A
Engineer Contact
N/A
Additional context
No response