Angular MSAL Configuration - Setting up authorityMetadata and doesn't redirect to register page.

[hansakaRightS]

Core Library

MSAL.js (@azure/msal-browser)

Core Library Version

3.0.4

Wrapper Library

MSAL Angular (@azure/msal-angular)

Wrapper Library Version

3.1.0

Public or Confidential Client?

Public

Description

We are tying to setup a authority metadata in our angular msal configurations. we have followed this document here

we have our msal configurations setup like this

    const isIE = window.navigator.userAgent.indexOf('MSIE ') > -1 || window.navigator.userAgent.indexOf('Trident/') > -1;
    const endpoint_url = `https://${environment.activeDirectory.loginDomain}/${environment.activeDirectory.domain}`;
    const msalConfig: Configuration = {
        auth: {
            clientId: environment.activeDirectory.clientId,
            authority: `${endpoint_url}/B2C_1A_SIGNUP_SIGNIN`,
            knownAuthorities: [
                environment.activeDirectory.loginDomain,
                environment.activeDirectory.editDomain
            ],
            redirectUri: '/',
            navigateToLoginRequestUrl: false,
            authorityMetadata: `{
                "issuer": "https://${environment.activeDirectory.loginDomain}/${environment.activeDirectory.tenentId}/v2.0/",
                "authorization_endpoint": "${endpoint_url}/b2c_1a_signup_signin/oauth2/v2.0/authorize",
                "token_endpoint": "${endpoint_url}/b2c_1a_signup_signin/oauth2/v2.0/token",
                "end_session_endpoint": "${endpoint_url}/b2c_1a_signup_signin/oauth2/v2.0/logout",
                "jwks_uri": "${endpoint_url}/b2c_1a_signup_signin/discovery/v2.0/keys",
                "response_modes_supported": [ "query", "fragment", "form_post" ], "response_types_supported": [ "code", "code id_token", "code token", "code id_token token", "id_token", "id_token token", "token", "token id_token" ], "scopes_supported": [ "openid" ], "subject_types_supported": [ "pairwise" ], "id_token_signing_alg_values_supported": [ "RS256" ], "token_endpoint_auth_methods_supported": [ "client_secret_post", "client_secret_basic" ], "claims_supported": [ "newUser", "email", "sub", "playerId", "X-Frame-Options", "iss", "iat", "exp", "aud", "acr", "nonce", "auth_time" ]
            }`
        },
        cache: {
            cacheLocation: BrowserCacheLocation.LocalStorage,
            storeAuthStateInCookie: isIE
        },
        system: {
            loggerOptions: {
                loggerCallback(logLevel: LogLevel, message: string) { },
                logLevel: LogLevel.Error,
                piiLoggingEnabled: false,
            },
            allowNativeBroker: false
        }
    };

The problem is when we call the register we are redirected to the loigin ui.

this.msalService.loginRedirect({
        scopes: [`https://${environment.activeDirectory.domain}/${environment.activeDirectory.directoryId}/access_as_user`],
        authority: `https://${environment.activeDirectory.loginDomain}/${environment.activeDirectory.domain}/B2C_1A_SIGNUP`,
        extraQueryParameters: extraParameters
      });
  
  when we are calling this function to redirect to the register, we are redirects to the login page instead. 
  
without the  `authorityMetadata` this works without a problem. we need to add the authority meta data for a problem we are having with the login sometimes.

how do we set up the authority meta data to support both login and register and other method we may have to call?

### Error Message

No error

### MSAL Logs

No Logs

### Network Trace (Preferrably Fiddler)

- [X] Sent
- [ ] Pending

### MSAL Configuration

```javascript
const isIE = window.navigator.userAgent.indexOf('MSIE ') > -1 || window.navigator.userAgent.indexOf('Trident/') > -1;
    const endpoint_url = `https://${environment.activeDirectory.loginDomain}/${environment.activeDirectory.domain}`;
    const msalConfig: Configuration = {
        auth: {
            clientId: environment.activeDirectory.clientId,
            authority: `${endpoint_url}/B2C_1A_SIGNUP_SIGNIN`,
            knownAuthorities: [
                environment.activeDirectory.loginDomain,
                environment.activeDirectory.editDomain
            ],
            redirectUri: '/',
            navigateToLoginRequestUrl: false,
            authorityMetadata: `{
                "issuer": "https://${environment.activeDirectory.loginDomain}/${environment.activeDirectory.tenentId}/v2.0/",
                "authorization_endpoint": "${endpoint_url}/b2c_1a_signup_signin/oauth2/v2.0/authorize",
                "token_endpoint": "${endpoint_url}/b2c_1a_signup_signin/oauth2/v2.0/token",
                "end_session_endpoint": "${endpoint_url}/b2c_1a_signup_signin/oauth2/v2.0/logout",
                "jwks_uri": "${endpoint_url}/b2c_1a_signup_signin/discovery/v2.0/keys",
                "response_modes_supported": [ "query", "fragment", "form_post" ], "response_types_supported": [ "code", "code id_token", "code token", "code id_token token", "id_token", "id_token token", "token", "token id_token" ], "scopes_supported": [ "openid" ], "subject_types_supported": [ "pairwise" ], "id_token_signing_alg_values_supported": [ "RS256" ], "token_endpoint_auth_methods_supported": [ "client_secret_post", "client_secret_basic" ], "claims_supported": [ "newUser", "email", "sub", "playerId", "X-Frame-Options", "iss", "iat", "exp", "aud", "acr", "nonce", "auth_time" ]
            }`
        },
        cache: {
            cacheLocation: BrowserCacheLocation.LocalStorage,
            storeAuthStateInCookie: isIE
        },
        system: {
            loggerOptions: {
                loggerCallback(logLevel: LogLevel, message: string) { },
                logLevel: LogLevel.Error,
                piiLoggingEnabled: false,
            },
            allowNativeBroker: false
        }
    };

Relevant Code Snippets

this.msalService.loginRedirect({
        scopes: [`https://${environment.activeDirectory.domain}/${environment.activeDirectory.directoryId}/access_as_user`],
        authority: `https://${environment.activeDirectory.loginDomain}/${environment.activeDirectory.domain}/B2C_1A_SIGNUP`,
        extraQueryParameters: extraParameters
      });

Reproduction Steps

1. Click on the register with authorityMetadata configurations

Expected Behavior

Should redirects to the register page.

Identity Provider

Azure B2C Custom Policy

Browsers Affected (Select all that apply)

Chrome, Firefox, Edge, Safari

Regression

No response

Source

External (Customer)