Home

The Microsoft Authentication Library of JavaScript (MSAL.JS) is a token based authentication library for Single Page Applications. MSAL.JS enables you to acquire tokens from Azure AD to authenticate users and access Microsoft APIs such as Microsoft Graph or any API registered with Azure AD. MSAL.JS authenticate users with work or school accounts in Azure AD(AAD), Microsoft personal accounts (MSA) and accounts with social identity providers like Facebook, Google, Micosoft Accounts, etc. through Azure AD B2C service.

• Getting started with MSAL.js
• Supported OAuth 2.0 Grant Types
• Advanced topics
• Roadmap
• Release

Getting started with MSAL.js

1. Understand Single Page Application scenarios
2. Register your app with Azure AD
3. Initialize your application
4. Acquire tokens to access Web APIs
5. Review vanillaJS and Angular quickstart guides.

Supported OAuth 2.0 Grant Types

To sign-in users and acquire access tokens:

• MSAL.js v1.x implements OAuth 2.0 Implicit Grant Flow.
• MSAL.js v2.x implements OAuth 2.0 Authorization Code Flow with PKCE.

Roadmap

Timeline	Status	Release	Main features
Dec 2019	Complete	MSAL.js 1.2.X	(Production release) Authentication support for nested iframes, conditional access and sovereign clouds(specific to first party customers only). Checkout the latest MSAL.js 1.2.1.
Apr 2020	In Progress	MSAL.js 1.3.X	ssoSilent API / Integration / Unit testing improvements. Checkout the latest MSAL.js 1.3.0.
May 2020	Complete	MSAL Angular 1.0.0	Bringing MSAL-Angular up to date with msal-core 1.0.0 and ready to GA. Improvements and feature enhancements for MSAL Angular wrapper based on preview feedback. Please refer to list of known issues and requests.
July 2020	Complete	MSAL.js 2.0.0	Supporting Authorization Code Flow with PKCE for Single Page Applications.
TBD	In Progress	MSAL.js B2C Enhancements	Enhancements to usage of MSAL.js with Azure AD B2C. Please refer to list of known issues and requests.
TBD	In Progress	MSAL Node.js Preview	Preview version of a server side authentication library for node.js. Support of Oauth2 auth-code and device-code flow.
TBD	Not Started	MSAL React Preview	Preview version of a client side library for adding authentication to React applications.

Releases

• See here