Have you updated your applications to use the Microsoft Authentication Library and Microsoft Graph?

Published Jun 18 2021 09:00 AM 17.2K Views

Howdy folks,

 

In 2020, we made a recommendation to developers to use the Microsoft Authentication Library (MSAL) and the Microsoft Graph API when developing applications.  Since then, we’ve continued to add capabilities to both MSAL and Microsoft Graph, including improvements in performance, security, and reliability. We’ve also added hundreds of new APIs, including Continuous Access Evaluation-enabled APIs and Conditional Access authentication context to Microsoft Graph. These are now available for developers using MSAL and allow them to build Zero Trust-ready applications.

 

Since we’re ending support for Active Directory Auth Library (ADAL) and Azure Active Directory Graph on June 30, 2022, this is a reminder to update your apps to use MSAL and Microsoft Graph. We’ve also made it easier for you to find all the apps that are still using ADAL.

 

Find the apps still using ADAL and Azure AD Graph

The Azure AD monitoring workbook can help you find applications that use ADAL. This uses a set of queries that collect and visualize information available in Azure AD sign-in logs. You can also use the sign-in logs directly using the sign-in logs schema here.

 

To access the workbook:

  1. Sign into the Azure portal
  2. Navigate to Azure Active Directory > Monitoring > Workbooks
  3. In the Usage section, open the Sign-ins workbook

 

Woodgrove.png

 

 

The Sign-ins workbook has a new table at the bottom of the page that shows you which recently used apps are using ADAL. You can also export a list of these apps.

 

 

Woodgrove Workbooks.png

 

 

Once you’ve identified the apps that are using ADAL, you can use the MSAL migration guide. To find apps that use Azure AD Graph, search your code for the string “graph.windows.net” and then use the Microsoft Graph migration guide.

 

Send your questions, open issues, and feature requests through Microsoft Q&A by using the tag azure-ad-adal-deprecation or azure-ad-graph-deprecation.

 

As always, we’d love to hear your feedback or suggestions. Let us know what you think in the comments below or on the Azure AD feedback forum.

 

Best regards, 

Alex Simons (Twitter: @Alex_A_Simons)

Corporate Vice President of Program Management

Microsoft Identity Division

 

 

Learn more about Microsoft identity:

3 Comments
Visitor

How we can use MSAL to create SharePoint list item(delegate permissions), will the MSAL support the below scenario?

https://pnp.github.io/pnpjs/authentication/msaljsclient/#calling-sharepoint-via-msal 

User with read-only permission should be able to perform CRUD operations on SharePoint list.

Regular Visitor

The workbook gives me no results, does it require at least AAD P1 licenses? "The query returned no results." for all panels

Regular Visitor
%3CLINGO-SUB%20id%3D%22lingo-sub-1144698%22%20slang%3D%22en-US%22%3EHave%20you%20updated%20your%20applications%20to%20use%20the%20Microsoft%20Authentication%20Library%20and%20Microsoft%20Graph%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1144698%22%20slang%3D%22en-US%22%3E%3CP%3E%3CSPAN%3EHowdy%20folks%2C%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%3EIn%202020%2C%20we%20%3C%2FSPAN%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Fthe%2520Microsoft%2520Authentication%2520Library%2520(MSAL)%2520and%2520the%2520Microsoft%2520Graph%2520API%2520in%2520their%2520application%2520development.%22%20target%3D%22_blank%22%3Emade%20a%20recommendation%3C%2FA%3E%3CSPAN%3E%20to%20developers%20to%20use%20%3C%2FSPAN%3Ethe%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Factive-directory%2Fdevelop%2Fmsal-overview%23languages-and-frameworks%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3EMicrosoft%20Authentication%20Library%20(MSAL)%3C%2FA%3E%26nbsp%3Band%20the%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fgraph%2Foverview%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3EMicrosoft%20Graph%20API%3C%2FA%3E%26nbsp%3Bwhen%20developing%20applications.%26nbsp%3B%20Since%20then%2C%20we%E2%80%99ve%20continued%20to%20add%20capabilities%20to%20both%20MSAL%20and%20Microsoft%20Graph%2C%20including%20improvements%20in%20performance%2C%20security%2C%20and%20reliability.%20We%E2%80%99ve%20also%20added%20hundreds%20of%20new%20APIs%2C%20including%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fazure%2Factive-directory%2Fdevelop%2Fapp-resilience-continuous-access-evaluation%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3EContinuous%20Access%20Evaluation%3C%2FA%3E-enabled%20APIs%20and%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fazure%2Factive-directory%2Fdevelop%2Fdeveloper-guide-conditional-access-authentication-context%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3EConditional%20Access%20authentication%20context%3C%2FA%3E%20to%20Microsoft%20Graph.%20These%20are%20now%20available%20for%20developers%20using%20MSAL%20and%20allow%20them%20to%20build%20%3CA%20href%3D%22https%3A%2F%2Fwww.microsoft.com%2Fsecurity%2Fblog%2F2021%2F01%2F19%2Fusing-zero-trust-principles-to-protect-against-sophisticated-attacks-like-solorigate%2F%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3EZero%20Trust-ready%3C%2FA%3E%20applications.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3ESince%20we%E2%80%99re%20ending%20support%20for%20Active%20Directory%20Auth%20Library%20(ADAL)%20and%20Azure%20Active%20Directory%20Graph%20on%20June%2030%3CSUP%3E%2C%3C%2FSUP%3E%202022%2C%20this%20is%20a%20reminder%20to%20update%20your%20apps%20to%20use%20MSAL%20and%20Microsoft%20Graph.%20We%E2%80%99ve%20also%20made%20it%20easier%20for%20you%20to%20find%20all%20the%20apps%20that%20are%20still%20using%20ADAL%3CSPAN%3E.%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CH4%20id%3D%22toc-hId-263627577%22%20id%3D%22toc-hId-263627554%22%3E%3CSTRONG%3EFind%20the%20apps%20still%20using%20ADAL%20and%20Azure%20AD%20Graph%3C%2FSTRONG%3E%3C%2FH4%3E%0A%3CP%3E%3CSPAN%3EThe%20Azure%20AD%20monitoring%20workbook%20can%20help%20you%20find%20applications%20that%20use%20ADAL.%26nbsp%3BThis%20uses%20a%20set%20of%20queries%20that%20collect%26nbsp%3Band%20visualize%20information%20available%20in%20Azure%20AD%26nbsp%3Bsign-in%26nbsp%3Blogs.%26nbsp%3BYou%20can%20also%20use%20the%20sign-in%20logs%20directly%20using%20the%3C%2FSPAN%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fazure%2Factive-directory%2Freports-monitoring%2Freference-azure-monitor-sign-ins-log-schema%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Esign-in%20logs%20schema%20here%3C%2FA%3E%3CSPAN%3E.%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3ETo%20access%20the%20workbook%3A%3C%2FP%3E%0A%3COL%3E%0A%3CLI%3ESign%20into%20the%20%3CA%20href%3D%22http%3A%2F%2Fwww.portal.azure.com%2F%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noreferrer%22%3EAzure%20portal%3C%2FA%3E%3C%2FLI%3E%0A%3CLI%3ENavigate%20to%20%3CSTRONG%3EAzure%20Active%20Directory%3C%2FSTRONG%3E%20%26gt%3B%20%3CSTRONG%3EMonitoring%20%3C%2FSTRONG%3E%26gt%3B%20%3CSTRONG%3EWorkbooks%3C%2FSTRONG%3E%3C%2FLI%3E%0A%3CLI%3EIn%20the%20Usage%20section%2C%20open%20the%20%3CSTRONG%3ESign-ins%20workbook%3C%2FSTRONG%3E%3C%2FLI%3E%0A%3C%2FOL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22Woodgrove.png%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F289788i95FBCE4B44C6E4B6%2Fimage-size%2Flarge%3Fv%3Dv2%26amp%3Bpx%3D999%22%20role%3D%22button%22%20title%3D%22Woodgrove.png%22%20alt%3D%22Woodgrove.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%3CSTRONG%3E%26nbsp%3B%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EThe%20Sign-ins%20workbook%20has%20a%20new%20table%20at%20the%20bottom%20of%20the%20page%20that%20shows%20you%20which%20recently%20used%20apps%20are%20using%20ADAL.%20You%20can%20also%20export%20a%20list%20of%20these%20apps.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22Woodgrove%20Workbooks.png%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F289791iEE822B58F14EC5E7%2Fimage-size%2Flarge%3Fv%3Dv2%26amp%3Bpx%3D999%22%20role%3D%22button%22%20title%3D%22Woodgrove%20Workbooks.png%22%20alt%3D%22Woodgrove%20Workbooks.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EOnce%20you%E2%80%99ve%20identified%20the%20apps%20that%20are%20using%20ADAL%2C%20you%20can%20use%20the%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Factive-directory%2Fdevelop%2Fmsal-migration%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3EMSAL%20migration%20guide%3C%2FA%3E%3CU%3E.%3C%2FU%3E%20To%20find%20apps%20that%20use%20Azure%20AD%20Graph%2C%20search%20your%20code%20for%20the%20string%20%E2%80%9Cgraph.windows.net%E2%80%9D%20and%20then%20use%20the%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fgraph%2Fmigrate-azure-ad-graph-planning-checklist%3Fview%3Dgraph-rest-1.0%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3EMicrosoft%20Graph%20migration%20guide%3C%2FA%3E.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3ESend%20your%20questions%2C%20open%20issues%2C%20and%20feature%20requests%20through%20Microsoft%20Q%26amp%3BA%20by%20using%20the%20tag%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fanswers%2Ftopics%2Fazure-ad-adal-deprecation.html%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Eazure-ad-adal-deprecation%3C%2FA%3E%20or%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fanswers%2Ftopics%2Fazure-ad-graph-deprecation.html%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Eazure-ad-graph-deprecation%3C%2FA%3E.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EAs%20always%2C%20we%E2%80%99d%20love%20to%20hear%20your%20feedback%20or%20suggestions.%20Let%20us%20know%20what%20you%20think%20in%20the%20comments%20below%20or%20on%20the%20%3CA%20href%3D%22https%3A%2F%2Ffeedback.azure.com%2Fforums%2F169401-azure-active-directory%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noreferrer%22%3EAzure%20AD%20feedback%20forum%3C%2FA%3E.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EBest%20regards%2C%26nbsp%3B%3C%2FP%3E%0A%3CP%3EAlex%20Simons%20(Twitter%3A%E2%80%AF%3CA%20href%3D%22http%3A%2F%2Ftwitter.com%2Falex_a_simons%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noreferrer%22%3E%40Alex_A_Simons%3C%2FA%3E)%3C%2FP%3E%0A%3CP%3ECorporate%20Vice%20President%20of%20Program%20Management%3C%2FP%3E%0A%3CP%3EMicrosoft%20Identity%20Division%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CEM%3ELearn%20more%20about%20Microsoft%20identity%3A%3C%2FEM%3E%3C%2FP%3E%0A%3CUL%3E%0A%3CLI%3E%3CEM%3EReturn%20to%20the%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FEM%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fazure-active-directory-identity%2Fbg-p%2FIdentity%22%20target%3D%22_blank%22%3E%3CEM%3EAzure%20Active%20Directory%20Identity%20blog%20home%3C%2FEM%3E%3C%2FA%3E%3C%2FLI%3E%0A%3CLI%3E%3CEM%3EJoin%20the%20conversation%20on%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FEM%3E%3CA%20href%3D%22https%3A%2F%2Ftwitter.com%2Fazuread%2Fstatus%2F1278418103903363074%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noreferrer%22%3E%3CEM%3ETwitter%3C%2FEM%3E%3C%2FA%3E%3CEM%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3Eand%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FEM%3E%3CA%20href%3D%22https%3A%2F%2Fwww.linkedin.com%2Fshowcase%2Fmicrosoft-security%2F%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noreferrer%22%3E%3CEM%3ELinkedIn%3C%2FEM%3E%3C%2FA%3E%3C%2FLI%3E%0A%3CLI%3E%3CEM%3EShare%20product%20suggestions%20on%20the%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FEM%3E%3CA%20href%3D%22https%3A%2F%2Ffeedback.azure.com%2Fforums%2F169401-azure-active-directory%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noreferrer%22%3E%3CEM%3EAzure%20Feedback%20Forum%3C%2FEM%3E%3C%2FA%3E%3C%2FLI%3E%0A%3C%2FUL%3E%3C%2FLINGO-BODY%3E%3CLINGO-TEASER%20id%3D%22lingo-teaser-1144698%22%20slang%3D%22en-US%22%3E%3CP%3E%3CSPAN%3EUpdate%20your%20applications%20with%20the%20Microsoft%20Authentication%20Library%20and%20Microsoft%20Graph%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22Woodgrove.png%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F289795i4137DE78212624F3%2Fimage-size%2Flarge%3Fv%3Dv2%26amp%3Bpx%3D999%22%20role%3D%22button%22%20title%3D%22Woodgrove.png%22%20alt%3D%22Woodgrove.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-TEASER%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1144698%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EIdentity%20and%20Access%20Management%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E
Version history
Last update:
‎Aug 19 2021 04:23 PM
Updated by: