Issues

• Redirect bridge finds empty sessionStorage after the prompt=select_account account picker in Chrome (after "Clear site data"); bridge falls back to homepage and handleRedirectPromise returns null

  bug-unconfirmedNeeds: Attention 👋question
  AzureAD/microsoft-authentication-library-for-js#8879 · Filter by author yyangchong opened on Oct 2, 2026

• [msal-node] bad_token refresh-token removal is not persisted; silent requests reuse the rejected token

  msal-nodepublic-client
  AzureAD/microsoft-authentication-library-for-js#8849 · Filter by author TylerLeonhardt opened on Sep 18, 2026

• [msal-node] Refresh token persisted by v3 or earlier shadows newer tokens after upgrading to v5; expires after 90 days and cannot be healed by sign-in

  msal-nodemsal-node-extensionspublic-client
  AzureAD/microsoft-authentication-library-for-js#8835 · Filter by author Farmerobot opened on Sep 16, 2026

• Wiki link to road map is 404

  documentationNeeds: Attention 👋public-clientquestion
  AzureAD/microsoft-authentication-library-for-js#8831 · Filter by author Pheil opened on Sep 15, 2026

• State mismatch error happens from time to time after logging in/out from Azure B2C.

  bug-unconfirmedconfidential-clientmsal-angularmsal-browserNeeds: Attention 👋public-clientquestion
  AzureAD/microsoft-authentication-library-for-js#8804 · Filter by author madalina-herea opened on Sep 2, 2026
  1

• Custom Storage mechanisms (like crossTabMemoryStorage)

  feature-unconfirmedmsal-browsermsal-reactNeeds: Attention 👋public-clientquestion
  AzureAD/microsoft-authentication-library-for-js#8764 · Filter by author devinrhode2 opened on Aug 12, 2026
  1

• 22.81 second lag on connection start to /token

  bug-unconfirmedNeeds: Attention 👋question
  AzureAD/microsoft-authentication-library-for-js#8755 · Filter by author devinrhode2 opened on Aug 6, 2026
  2

• Logout after password/email change fail silently when idTokenHint acquisition fails

  b2cbug-unconfirmedmsal-browsermsal-reactNeeds: Attention 👋public-clientquestion
  AzureAD/microsoft-authentication-library-for-js#8728 · Filter by author dorota133 opened on Jul 23, 2026

• External ID custom Email OTP extension fails account creation with generic account lookup error while using MSAL.js

  bug-unconfirmedmsal-angularmsal-browserNeeds: Attention 👋public-clientquestion
  AzureAD/microsoft-authentication-library-for-js#8696 · Filter by author captain01010101 opened on Jul 6, 2026

• AADSTS9002327 occurs when using CustomAuthAccountData.getAccessToken with forceRefresh=true after logging in via a social account

  bug-unconfirmedmsal-browserNeeds: Attention 👋public-clientquestion
  AzureAD/microsoft-authentication-library-for-js#8690 · Filter by author tht245806497 opened on Jun 29, 2026
  2

• temporaryCacheLocation removed in v5 breaks mobile app-switch redirects (e.g. itsme) that return in a new tab

  b2cbug-unconfirmedmsal-angularmsal-browserNeeds: Attention 👋public-clientquestion
  AzureAD/microsoft-authentication-library-for-js#8667 · Filter by author nicolaszawada opened on Jun 19, 2026

• Embedded sign-in with MFA

  feature-unconfirmedmsal-browsermsal-reactNeeds: Attention 👋public-clientquestion
  AzureAD/microsoft-authentication-library-for-js#8629 · Filter by author komalkhatri08 opened on Jun 5, 2026
  1

• Validate region string format before use in URL construction

  more-information-needed
  AzureAD/microsoft-authentication-library-for-js#8605 · Filter by author bgavrilMS opened on May 25, 2026
  1

• PublicClientApplication leaks an unclosed BroadcastChannel / MessagePort handle (regression since v4.2.0)

  msal-browserpublic-client
  AzureAD/microsoft-authentication-library-for-js#8603 · Filter by author gh2k opened on May 22, 2026

• logoutRedirect leads to "Function object could not be cloned"

  bug-unconfirmedmsal-browserNeeds: Attention 👋public-clientquestion
  AzureAD/microsoft-authentication-library-for-js#8535 · Filter by author jimdigriz opened on Apr 15, 2026
  3

• Calling PublicClientApplication.acquireTokenInteractive() with NativeBrokerPlugin hangs

  bug-unconfirmedmsal-nodemsal-node-extensionsNeeds: Attention 👋public-clientquestion
  AzureAD/microsoft-authentication-library-for-js#8483 · Filter by author mmaitre314 opened on Mar 29, 2026

• GA Managed Identity v2 feature

  confidential-clientfeaturemsal-node
  Feature

  AzureAD/microsoft-authentication-library-for-js#8472 · Filter by author gladjohn opened on Mar 25, 2026
  

• acquireTokenPopup, add support for an existing popup window to avoid browser popup blocking when acquiring tokens for multiple resources

  feature-unconfirmedmsal-browserNeeds: Attention 👋public-clientquestion
  AzureAD/microsoft-authentication-library-for-js#8455 · Filter by author mfalkus opened on Mar 20, 2026
  2

• Safari requires re-login when reloading page (no SSL)

  bug-unconfirmedmsal-browsermsal-reactNeeds: Attention 👋public-clientquestion
  AzureAD/microsoft-authentication-library-for-js#8394 · Filter by author SimonSimCity opened on Mar 9, 2026
  2

• [MSAL NODE] SNI AADSTS700027: The certificate with identifier used to sign the client assertion is not registered on application. [Reason - The key was not found

  bug-unconfirmedconfidential-clientmsal-nodeNeeds: Attention 👋question
  AzureAD/microsoft-authentication-library-for-js#8339 · Filter by author Stalluri1 opened on Feb 18, 2026

• User Token Issue preferred_username msal-browser and msal-react

  bug-unconfirmedmsal-browsermsal-reactNeeds: Attention 👋public-clientquestion
  AzureAD/microsoft-authentication-library-for-js#8334 · Filter by author rameshlamaniweir opened on Feb 17, 2026

• X-Frame-Options set to Deny when using loginPopup - MSAL Login within iframed Web App

  bug-unconfirmedmsal-browsermsal-reactNeeds: Attention 👋public-clientquestion
  AzureAD/microsoft-authentication-library-for-js#8211 · Filter by author ianaguilar opened on Dec 26, 2025

• Multi-tenant issue with native broker authentication

  bug-unconfirmedmsal-nodemsal-node-extensionsNeeds: Attention 👋public-clientquestion
  AzureAD/microsoft-authentication-library-for-js#8206 · Filter by author HuihuiWu-Microsoft opened on Dec 16, 2025

• AccountInfo.username is no longer populated for Azure B2C token

  b2cbug-unconfirmedmsal-browsermsal-reactNeeds: Attention 👋public-clientquestion
  AzureAD/microsoft-authentication-library-for-js#8205 · Filter by author cjbanna opened on Dec 15, 2025
  2

• Duplicated correlation ID in both query parameter and form body

  bug-unconfirmedmsal-nodeNeeds: Attention 👋public-clientquestion
  AzureAD/microsoft-authentication-library-for-js#8193 · Filter by author clnv opened on Dec 9, 2025