@azure/msal-browser 3.19.0 → 3.20.0

package/lib/msal-browser.cjs

@@ -1,8 +1,8 @@
-/*! @azure/msal-browser v3.19.0 2024-07-12 */
+/*! @azure/msal-browser v3.20.0 2024-07-23 */
 'use strict';
 'use strict';
 
-/*! @azure/msal-common v14.13.0 2024-07-12 */
+/*! @azure/msal-common v14.14.0 2024-07-23 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -311,7 +311,7 @@ const JsonWebTokenTypes = {
 // Token renewal offset default in seconds
 const DEFAULT_TOKEN_RENEWAL_OFFSET_SEC = 300;
 
-/*! @azure/msal-common v14.13.0 2024-07-12 */
+/*! @azure/msal-common v14.14.0 2024-07-23 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -328,7 +328,7 @@ var AuthErrorCodes = /*#__PURE__*/Object.freeze({
     unexpectedError: unexpectedError
 });
 
-/*! @azure/msal-common v14.13.0 2024-07-12 */
+/*! @azure/msal-common v14.14.0 2024-07-23 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -377,7 +377,7 @@ function createAuthError(code, additionalMessage) {
         : AuthErrorMessages[code]);
 }
 
-/*! @azure/msal-common v14.13.0 2024-07-12 */
+/*! @azure/msal-common v14.14.0 2024-07-23 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -475,7 +475,7 @@ var ClientAuthErrorCodes = /*#__PURE__*/Object.freeze({
     userTimeoutReached: userTimeoutReached
 });
 
-/*! @azure/msal-common v14.13.0 2024-07-12 */
+/*! @azure/msal-common v14.14.0 2024-07-23 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -727,7 +727,7 @@ function createClientAuthError(errorCode, additionalMessage) {
     return new ClientAuthError(errorCode, additionalMessage);
 }
 
-/*! @azure/msal-common v14.13.0 2024-07-12 */
+/*! @azure/msal-common v14.14.0 2024-07-23 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -788,7 +788,7 @@ function checkMaxAge(authTime, maxAge) {
     }
 }
 
-/*! @azure/msal-common v14.13.0 2024-07-12 */
+/*! @azure/msal-common v14.14.0 2024-07-23 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -803,7 +803,7 @@ const AuthorityType = {
     Ciam: 3,
 };
 
-/*! @azure/msal-common v14.13.0 2024-07-12 */
+/*! @azure/msal-common v14.14.0 2024-07-23 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -815,7 +815,7 @@ function isOpenIdConfigResponse(response) {
         response.hasOwnProperty("jwks_uri"));
 }
 
-/*! @azure/msal-common v14.13.0 2024-07-12 */
+/*! @azure/msal-common v14.14.0 2024-07-23 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -869,7 +869,7 @@ var ClientConfigurationErrorCodes = /*#__PURE__*/Object.freeze({
     urlParseError: urlParseError
 });
 
-/*! @azure/msal-common v14.13.0 2024-07-12 */
+/*! @azure/msal-common v14.14.0 2024-07-23 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1007,7 +1007,7 @@ function createClientConfigurationError(errorCode) {
     return new ClientConfigurationError(errorCode);
 }
 
-/*! @azure/msal-common v14.13.0 2024-07-12 */
+/*! @azure/msal-common v14.14.0 2024-07-23 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -1104,7 +1104,7 @@ class StringUtils {
     }
 }
 
-/*! @azure/msal-common v14.13.0 2024-07-12 */
+/*! @azure/msal-common v14.14.0 2024-07-23 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1151,7 +1151,7 @@ function getDeserializedResponse(responseString) {
     return null;
 }
 
-/*! @azure/msal-common v14.13.0 2024-07-12 */
+/*! @azure/msal-common v14.14.0 2024-07-23 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1315,7 +1315,7 @@ class UrlString {
     }
 }
 
-/*! @azure/msal-common v14.13.0 2024-07-12 */
+/*! @azure/msal-common v14.14.0 2024-07-23 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1455,7 +1455,7 @@ function getCloudDiscoveryMetadataFromNetworkResponse(response, authorityHost) {
     return null;
 }
 
-/*! @azure/msal-common v14.13.0 2024-07-12 */
+/*! @azure/msal-common v14.14.0 2024-07-23 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -1468,7 +1468,7 @@ const ProtocolMode = {
     OIDC: "OIDC",
 };
 
-/*! @azure/msal-common v14.13.0 2024-07-12 */
+/*! @azure/msal-common v14.14.0 2024-07-23 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -1488,7 +1488,7 @@ const AzureCloudInstance = {
     AzureUsGovernment: "https://login.microsoftonline.us",
 };
 
-/*! @azure/msal-common v14.13.0 2024-07-12 */
+/*! @azure/msal-common v14.14.0 2024-07-23 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -1498,7 +1498,7 @@ function isCloudInstanceDiscoveryResponse(response) {
         response.hasOwnProperty("metadata"));
 }
 
-/*! @azure/msal-common v14.13.0 2024-07-12 */
+/*! @azure/msal-common v14.14.0 2024-07-23 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -1508,7 +1508,7 @@ function isCloudInstanceDiscoveryErrorResponse(response) {
         response.hasOwnProperty("error_description"));
 }
 
-/*! @azure/msal-common v14.13.0 2024-07-12 */
+/*! @azure/msal-common v14.14.0 2024-07-23 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -1990,7 +1990,7 @@ const IntFields = new Set([
     "multiMatchedRT",
 ]);
 
-/*! @azure/msal-common v14.13.0 2024-07-12 */
+/*! @azure/msal-common v14.14.0 2024-07-23 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -2086,7 +2086,7 @@ const invokeAsync = (callback, eventName, logger, telemetryClient, correlationId
     };
 };
 
-/*! @azure/msal-common v14.13.0 2024-07-12 */
+/*! @azure/msal-common v14.14.0 2024-07-23 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2195,7 +2195,7 @@ RegionDiscovery.IMDS_OPTIONS = {
     },
 };
 
-/*! @azure/msal-common v14.13.0 2024-07-12 */
+/*! @azure/msal-common v14.14.0 2024-07-23 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -2232,7 +2232,7 @@ function wasClockTurnedBack(cachedAt) {
     return cachedAtSec > nowSeconds();
 }
 
-/*! @azure/msal-common v14.13.0 2024-07-12 */
+/*! @azure/msal-common v14.14.0 2024-07-23 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2559,7 +2559,7 @@ function isAuthorityMetadataExpired(metadata) {
     return metadata.expiresAt <= nowSeconds();
 }
 
-/*! @azure/msal-common v14.13.0 2024-07-12 */
+/*! @azure/msal-common v14.14.0 2024-07-23 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3398,7 +3398,7 @@ function buildStaticAuthorityOptions(authOptions) {
     };
 }
 
-/*! @azure/msal-common v14.13.0 2024-07-12 */
+/*! @azure/msal-common v14.14.0 2024-07-23 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3429,7 +3429,7 @@ async function createDiscoveredInstance(authorityUri, networkClient, cacheManage
     }
 }
 
-/*! @azure/msal-common v14.13.0 2024-07-12 */
+/*! @azure/msal-common v14.14.0 2024-07-23 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -3447,7 +3447,7 @@ async function getClientAssertion(clientAssertion, clientId, tokenEndpoint) {
     }
 }
 
-/*! @azure/msal-common v14.13.0 2024-07-12 */
+/*! @azure/msal-common v14.14.0 2024-07-23 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -3493,8 +3493,9 @@ const LOGOUT_HINT = "logout_hint";
 const SID = "sid";
 const LOGIN_HINT = "login_hint";
 const DOMAIN_HINT = "domain_hint";
+const X_CLIENT_EXTRA_SKU = "x-client-xtra-sku";
 
-/*! @azure/msal-common v14.13.0 2024-07-12 */
+/*! @azure/msal-common v14.14.0 2024-07-23 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3533,7 +3534,7 @@ const DEFAULT_CRYPTO_IMPLEMENTATION = {
     },
 };
 
-/*! @azure/msal-common v14.13.0 2024-07-12 */
+/*! @azure/msal-common v14.14.0 2024-07-23 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3724,12 +3725,12 @@ class Logger {
     }
 }
 
-/*! @azure/msal-common v14.13.0 2024-07-12 */
+/*! @azure/msal-common v14.14.0 2024-07-23 */
 /* eslint-disable header/header */
 const name$1 = "@azure/msal-common";
-const version$1 = "14.13.0";
+const version$1 = "14.14.0";
 
-/*! @azure/msal-common v14.13.0 2024-07-12 */
+/*! @azure/msal-common v14.14.0 2024-07-23 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3929,7 +3930,7 @@ class ScopeSet {
     }
 }
 
-/*! @azure/msal-common v14.13.0 2024-07-12 */
+/*! @azure/msal-common v14.14.0 2024-07-23 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3969,7 +3970,7 @@ function buildClientInfoFromHomeAccountId(homeAccountId) {
     };
 }
 
-/*! @azure/msal-common v14.13.0 2024-07-12 */
+/*! @azure/msal-common v14.14.0 2024-07-23 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -3985,21 +3986,38 @@ function tenantIdMatchesHomeTenant(tenantId, homeAccountId) {
         !!homeAccountId &&
         tenantId === homeAccountId.split(".")[1]);
 }
-function buildTenantProfileFromIdTokenClaims(homeAccountId, idTokenClaims) {
-    const { oid, sub, tid, name, tfp, acr } = idTokenClaims;
-    /**
-     * Since there is no way to determine if the authority is AAD or B2C, we exhaust all the possible claims that can serve as tenant ID with the following precedence:
-     * tid - TenantID claim that identifies the tenant that issued the token in AAD. Expected in all AAD ID tokens, not present in B2C ID Tokens.
-     * tfp - Trust Framework Policy claim that identifies the policy that was used to authenticate the user. Functions as tenant for B2C scenarios.
-     * acr - Authentication Context Class Reference claim used only with older B2C policies. Fallback in case tfp is not present, but likely won't be present anyway.
-     */
-    const tenantId = tid || tfp || acr || "";
-    return {
-        tenantId: tenantId,
-        localAccountId: oid || sub || "",
-        name: name,
-        isHomeTenant: tenantIdMatchesHomeTenant(tenantId, homeAccountId),
-    };
+/**
+ * Build tenant profile
+ * @param homeAccountId - Home account identifier for this account object
+ * @param localAccountId - Local account identifer for this account object
+ * @param tenantId - Full tenant or organizational id that this account belongs to
+ * @param idTokenClaims - Claims from the ID token
+ * @returns
+ */
+function buildTenantProfile(homeAccountId, localAccountId, tenantId, idTokenClaims) {
+    if (idTokenClaims) {
+        const { oid, sub, tid, name, tfp, acr } = idTokenClaims;
+        /**
+         * Since there is no way to determine if the authority is AAD or B2C, we exhaust all the possible claims that can serve as tenant ID with the following precedence:
+         * tid - TenantID claim that identifies the tenant that issued the token in AAD. Expected in all AAD ID tokens, not present in B2C ID Tokens.
+         * tfp - Trust Framework Policy claim that identifies the policy that was used to authenticate the user. Functions as tenant for B2C scenarios.
+         * acr - Authentication Context Class Reference claim used only with older B2C policies. Fallback in case tfp is not present, but likely won't be present anyway.
+         */
+        const tenantId = tid || tfp || acr || "";
+        return {
+            tenantId: tenantId,
+            localAccountId: oid || sub || "",
+            name: name,
+            isHomeTenant: tenantIdMatchesHomeTenant(tenantId, homeAccountId),
+        };
+    }
+    else {
+        return {
+            tenantId,
+            localAccountId,
+            isHomeTenant: tenantIdMatchesHomeTenant(tenantId, homeAccountId),
+        };
+    }
 }
 /**
  * Replaces account info that varies by tenant profile sourced from the ID token claims passed in with the tenant-specific account info
@@ -4019,7 +4037,7 @@ function updateAccountTenantProfileData(baseAccountInfo, tenantProfile, idTokenC
     if (idTokenClaims) {
         // Ignore isHomeTenant, loginHint, and sid which are part of tenant profile but not base account info
         // eslint-disable-next-line @typescript-eslint/no-unused-vars
-        const { isHomeTenant, ...claimsSourcedTenantProfile } = buildTenantProfileFromIdTokenClaims(baseAccountInfo.homeAccountId, idTokenClaims);
+        const { isHomeTenant, ...claimsSourcedTenantProfile } = buildTenantProfile(baseAccountInfo.homeAccountId, baseAccountInfo.localAccountId, baseAccountInfo.tenantId, idTokenClaims);
         updatedAccountInfo = {
             ...updatedAccountInfo,
             ...claimsSourcedTenantProfile,
@@ -4031,7 +4049,7 @@ function updateAccountTenantProfileData(baseAccountInfo, tenantProfile, idTokenC
     return updatedAccountInfo;
 }
 
-/*! @azure/msal-common v14.13.0 2024-07-12 */
+/*! @azure/msal-common v14.14.0 2024-07-23 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -4053,7 +4071,7 @@ function getTenantIdFromIdTokenClaims(idTokenClaims) {
     return null;
 }
 
-/*! @azure/msal-common v14.13.0 2024-07-12 */
+/*! @azure/msal-common v14.14.0 2024-07-23 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4197,12 +4215,8 @@ class AccountEntity {
             account.tenantProfiles = accountDetails.tenantProfiles;
         }
         else {
-            const tenantProfiles = [];
-            if (accountDetails.idTokenClaims) {
-                const tenantProfile = buildTenantProfileFromIdTokenClaims(accountDetails.homeAccountId, accountDetails.idTokenClaims);
-                tenantProfiles.push(tenantProfile);
-            }
-            account.tenantProfiles = tenantProfiles;
+            const tenantProfile = buildTenantProfile(accountDetails.homeAccountId, account.localAccountId, account.realm, accountDetails.idTokenClaims);
+            account.tenantProfiles = [tenantProfile];
         }
         return account;
     }
@@ -4300,7 +4314,7 @@ class AccountEntity {
     }
 }
 
-/*! @azure/msal-common v14.13.0 2024-07-12 */
+/*! @azure/msal-common v14.14.0 2024-07-23 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -4308,7 +4322,7 @@ class AccountEntity {
 const cacheQuotaExceededErrorCode = "cache_quota_exceeded";
 const cacheUnknownErrorCode = "cache_error_unknown";
 
-/*! @azure/msal-common v14.13.0 2024-07-12 */
+/*! @azure/msal-common v14.14.0 2024-07-23 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4335,7 +4349,7 @@ class CacheError extends Error {
     }
 }
 
-/*! @azure/msal-common v14.13.0 2024-07-12 */
+/*! @azure/msal-common v14.14.0 2024-07-23 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4403,12 +4417,9 @@ class CacheManager {
      */
     buildTenantProfiles(cachedAccounts, accountFilter) {
         return cachedAccounts.flatMap((accountEntity) => {
-            return this.getAccountInfoForTenantProfiles(accountEntity, accountFilter);
+            return this.getTenantProfilesFromAccountEntity(accountEntity, accountFilter?.tenantId, accountFilter);
         });
     }
-    getAccountInfoForTenantProfiles(accountEntity, accountFilter) {
-        return this.getTenantProfilesFromAccountEntity(accountEntity, accountFilter?.tenantId, accountFilter);
-    }
     getTenantedAccountInfoByFilter(accountInfo, tokenKeys, tenantProfile, tenantProfileFilter) {
         let tenantedAccountInfo = null;
         let idTokenClaims;
@@ -5590,7 +5601,7 @@ class DefaultStorageClass extends CacheManager {
     }
 }
 
-/*! @azure/msal-common v14.13.0 2024-07-12 */
+/*! @azure/msal-common v14.14.0 2024-07-23 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5688,7 +5699,7 @@ function isOidcProtocolMode(config) {
     return (config.authOptions.authority.options.protocolMode === ProtocolMode.OIDC);
 }
 
-/*! @azure/msal-common v14.13.0 2024-07-12 */
+/*! @azure/msal-common v14.14.0 2024-07-23 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5707,7 +5718,7 @@ class ServerError extends AuthError {
     }
 }
 
-/*! @azure/msal-common v14.13.0 2024-07-12 */
+/*! @azure/msal-common v14.14.0 2024-07-23 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5805,7 +5816,7 @@ class ThrottlingUtils {
     }
 }
 
-/*! @azure/msal-common v14.13.0 2024-07-12 */
+/*! @azure/msal-common v14.14.0 2024-07-23 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5842,7 +5853,7 @@ class NetworkManager {
     }
 }
 
-/*! @azure/msal-common v14.13.0 2024-07-12 */
+/*! @azure/msal-common v14.14.0 2024-07-23 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -5852,7 +5863,7 @@ const CcsCredentialType = {
     UPN: "UPN",
 };
 
-/*! @azure/msal-common v14.13.0 2024-07-12 */
+/*! @azure/msal-common v14.14.0 2024-07-23 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5919,7 +5930,7 @@ class RequestValidator {
     }
 }
 
-/*! @azure/msal-common v14.13.0 2024-07-12 */
+/*! @azure/msal-common v14.14.0 2024-07-23 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6304,7 +6315,7 @@ class RequestParameterBuilder {
     }
 }
 
-/*! @azure/msal-common v14.13.0 2024-07-12 */
+/*! @azure/msal-common v14.14.0 2024-07-23 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6407,7 +6418,7 @@ class BaseClient {
     }
 }
 
-/*! @azure/msal-common v14.13.0 2024-07-12 */
+/*! @azure/msal-common v14.14.0 2024-07-23 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -6433,7 +6444,7 @@ var InteractionRequiredAuthErrorCodes = /*#__PURE__*/Object.freeze({
     refreshTokenExpired: refreshTokenExpired
 });
 
-/*! @azure/msal-common v14.13.0 2024-07-12 */
+/*! @azure/msal-common v14.14.0 2024-07-23 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6521,7 +6532,7 @@ function createInteractionRequiredAuthError(errorCode) {
     return new InteractionRequiredAuthError(errorCode, InteractionRequiredAuthErrorMessages[errorCode]);
 }
 
-/*! @azure/msal-common v14.13.0 2024-07-12 */
+/*! @azure/msal-common v14.14.0 2024-07-23 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6593,7 +6604,7 @@ class ProtocolUtils {
     }
 }
 
-/*! @azure/msal-common v14.13.0 2024-07-12 */
+/*! @azure/msal-common v14.14.0 2024-07-23 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6677,7 +6688,7 @@ class PopTokenGenerator {
     }
 }
 
-/*! @azure/msal-common v14.13.0 2024-07-12 */
+/*! @azure/msal-common v14.14.0 2024-07-23 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -6704,7 +6715,7 @@ class PopTokenGenerator {
     }
 }
 
-/*! @azure/msal-common v14.13.0 2024-07-12 */
+/*! @azure/msal-common v14.14.0 2024-07-23 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7069,19 +7080,19 @@ function buildAccountToCache(cacheStorage, authority, homeAccountId, base64Decod
             nativeAccountId: nativeAccountId,
         }, authority, base64Decode);
     const tenantProfiles = baseAccount.tenantProfiles || [];
-    if (claimsTenantId &&
-        idTokenClaims &&
+    const tenantId = claimsTenantId || baseAccount.realm;
+    if (tenantId &&
         !tenantProfiles.find((tenantProfile) => {
-            return tenantProfile.tenantId === claimsTenantId;
+            return tenantProfile.tenantId === tenantId;
         })) {
-        const newTenantProfile = buildTenantProfileFromIdTokenClaims(homeAccountId, idTokenClaims);
+        const newTenantProfile = buildTenantProfile(homeAccountId, baseAccount.localAccountId, tenantId, idTokenClaims);
         tenantProfiles.push(newTenantProfile);
     }
     baseAccount.tenantProfiles = tenantProfiles;
     return baseAccount;
 }
 
-/*! @azure/msal-common v14.13.0 2024-07-12 */
+/*! @azure/msal-common v14.14.0 2024-07-23 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7504,7 +7515,7 @@ class AuthorizationCodeClient extends BaseClient {
     }
 }
 
-/*! @azure/msal-common v14.13.0 2024-07-12 */
+/*! @azure/msal-common v14.14.0 2024-07-23 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7718,7 +7729,7 @@ class RefreshTokenClient extends BaseClient {
     }
 }
 
-/*! @azure/msal-common v14.13.0 2024-07-12 */
+/*! @azure/msal-common v14.14.0 2024-07-23 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7854,7 +7865,7 @@ class SilentFlowClient extends BaseClient {
     }
 }
 
-/*! @azure/msal-common v14.13.0 2024-07-12 */
+/*! @azure/msal-common v14.14.0 2024-07-23 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7869,7 +7880,7 @@ const StubbedNetworkModule = {
     },
 };
 
-/*! @azure/msal-common v14.13.0 2024-07-12 */
+/*! @azure/msal-common v14.14.0 2024-07-23 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -7877,7 +7888,7 @@ const StubbedNetworkModule = {
 const missingKidError = "missing_kid_error";
 const missingAlgError = "missing_alg_error";
 
-/*! @azure/msal-common v14.13.0 2024-07-12 */
+/*! @azure/msal-common v14.14.0 2024-07-23 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7902,7 +7913,7 @@ function createJoseHeaderError(code) {
     return new JoseHeaderError(code, JoseHeaderErrorMessages[code]);
 }
 
-/*! @azure/msal-common v14.13.0 2024-07-12 */
+/*! @azure/msal-common v14.14.0 2024-07-23 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7942,7 +7953,7 @@ class JoseHeader {
     }
 }
 
-/*! @azure/msal-common v14.13.0 2024-07-12 */
+/*! @azure/msal-common v14.14.0 2024-07-23 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -8000,12 +8011,50 @@ class AuthenticationHeaderParser {
     }
 }
 
-/*! @azure/msal-common v14.13.0 2024-07-12 */
+/*! @azure/msal-common v14.14.0 2024-07-23 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
  */
+const skuGroupSeparator = ",";
+const skuValueSeparator = "|";
+function makeExtraSkuString(params) {
+    const { skus, libraryName, libraryVersion, extensionName, extensionVersion, } = params;
+    const skuMap = new Map([
+        [0, [libraryName, libraryVersion]],
+        [2, [extensionName, extensionVersion]],
+    ]);
+    let skuArr = [];
+    if (skus?.length) {
+        skuArr = skus.split(skuGroupSeparator);
+        // Ignore invalid input sku param
+        if (skuArr.length < 4) {
+            return skus;
+        }
+    }
+    else {
+        skuArr = Array.from({ length: 4 }, () => skuValueSeparator);
+    }
+    skuMap.forEach((value, key) => {
+        if (value.length === 2 && value[0]?.length && value[1]?.length) {
+            setSku({
+                skuArr,
+                index: key,
+                skuName: value[0],
+                skuVersion: value[1],
+            });
+        }
+    });
+    return skuArr.join(skuGroupSeparator);
+}
+function setSku(params) {
+    const { skuArr, index, skuName, skuVersion } = params;
+    if (index >= skuArr.length) {
+        return;
+    }
+    skuArr[index] = [skuName, skuVersion].join(skuValueSeparator);
+}
 /** @internal */
 class ServerTelemetryManager {
     constructor(telemetryRequest, cacheManager) {
@@ -8025,7 +8074,12 @@ class ServerTelemetryManager {
      */
     generateCurrentRequestHeaderValue() {
         const request = `${this.apiId}${SERVER_TELEM_CONSTANTS.VALUE_SEPARATOR}${this.cacheOutcome}`;
-        const platformFields = [this.wrapperSKU, this.wrapperVer].join(SERVER_TELEM_CONSTANTS.VALUE_SEPARATOR);
+        const platformFieldsArr = [this.wrapperSKU, this.wrapperVer];
+        const nativeBrokerErrorCode = this.getNativeBrokerErrorCode();
+        if (nativeBrokerErrorCode?.length) {
+            platformFieldsArr.push(`broker_error=${nativeBrokerErrorCode}`);
+        }
+        const platformFields = platformFieldsArr.join(SERVER_TELEM_CONSTANTS.VALUE_SEPARATOR);
         const regionDiscoveryFields = this.getRegionDiscoveryFields();
         const requestWithRegionDiscoveryFields = [
             request,
@@ -8202,9 +8256,25 @@ class ServerTelemetryManager {
     setCacheOutcome(cacheOutcome) {
         this.cacheOutcome = cacheOutcome;
     }
+    setNativeBrokerErrorCode(errorCode) {
+        const lastRequests = this.getLastRequests();
+        lastRequests.nativeBrokerErrorCode = errorCode;
+        this.cacheManager.setServerTelemetry(this.telemetryCacheKey, lastRequests);
+    }
+    getNativeBrokerErrorCode() {
+        return this.getLastRequests().nativeBrokerErrorCode;
+    }
+    clearNativeBrokerErrorCode() {
+        const lastRequests = this.getLastRequests();
+        delete lastRequests.nativeBrokerErrorCode;
+        this.cacheManager.setServerTelemetry(this.telemetryCacheKey, lastRequests);
+    }
+    static makeExtraSkuString(params) {
+        return makeExtraSkuString(params);
+    }
 }
 
-/*! @azure/msal-common v14.13.0 2024-07-12 */
+/*! @azure/msal-common v14.14.0 2024-07-23 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -8283,7 +8353,7 @@ class StubPerformanceClient {
     }
 }
 
-/*! @azure/msal-common v14.13.0 2024-07-12 */
+/*! @azure/msal-common v14.14.0 2024-07-23 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -10154,7 +10224,7 @@ function buildConfiguration({ auth: userInputAuth, cache: userInputCache, system
 
 /* eslint-disable header/header */
 const name = "@azure/msal-browser";
-const version = "3.19.0";
+const version = "3.20.0";
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -13302,6 +13372,30 @@ class NativeInteractionClient extends BaseInteractionClient {
         this.nativeMessageHandler = provider;
         this.nativeStorageManager = nativeStorageImpl;
         this.silentCacheClient = new SilentCacheClient(config, this.nativeStorageManager, browserCrypto, logger, eventHandler, navigationClient, performanceClient, provider, correlationId);
+        this.serverTelemetryManager = this.initializeServerTelemetryManager(this.apiId);
+        const extensionName = this.nativeMessageHandler.getExtensionId() ===
+            NativeConstants.PREFERRED_EXTENSION_ID
+            ? "chrome"
+            : this.nativeMessageHandler.getExtensionId()?.length
+                ? "unknown"
+                : undefined;
+        this.skus = ServerTelemetryManager.makeExtraSkuString({
+            libraryName: BrowserConstants.MSAL_SKU,
+            libraryVersion: version,
+            extensionName: extensionName,
+            extensionVersion: this.nativeMessageHandler.getExtensionVersion(),
+        });
+    }
+    /**
+     * Adds SKUs to request extra query parameters
+     * @param request {NativeTokenRequest}
+     * @private
+     */
+    addRequestSKUs(request) {
+        request.extraParameters = {
+            ...request.extraParameters,
+            [X_CLIENT_EXTRA_SKU]: this.skus,
+        };
     }
     /**
      * Acquire token from native platform via browser extension
@@ -13313,48 +13407,57 @@ class NativeInteractionClient extends BaseInteractionClient {
         // start the perf measurement
         const nativeATMeasurement = this.performanceClient.startMeasurement(PerformanceEvents.NativeInteractionClientAcquireToken, request.correlationId);
         const reqTimestamp = nowSeconds();
-        // initialize native request
-        const nativeRequest = await this.initializeNativeRequest(request);
-        // check if the tokens can be retrieved from internal cache
         try {
-            const result = await this.acquireTokensFromCache(this.accountId, nativeRequest);
-            nativeATMeasurement.end({
-                success: true,
-                isNativeBroker: false,
-                fromCache: true,
+            // initialize native request
+            const nativeRequest = await this.initializeNativeRequest(request);
+            // check if the tokens can be retrieved from internal cache
+            try {
+                const result = await this.acquireTokensFromCache(this.accountId, nativeRequest);
+                nativeATMeasurement.end({
+                    success: true,
+                    isNativeBroker: false,
+                    fromCache: true,
+                });
+                return result;
+            }
+            catch (e) {
+                // continue with a native call for any and all errors
+                this.logger.info("MSAL internal Cache does not contain tokens, proceed to make a native call");
+            }
+            const { ...nativeTokenRequest } = nativeRequest;
+            // fall back to native calls
+            const messageBody = {
+                method: NativeExtensionMethod.GetToken,
+                request: nativeTokenRequest,
+            };
+            const response = await this.nativeMessageHandler.sendMessage(messageBody);
+            const validatedResponse = this.validateNativeResponse(response);
+            return await this.handleNativeResponse(validatedResponse, nativeRequest, reqTimestamp)
+                .then((result) => {
+                nativeATMeasurement.end({
+                    success: true,
+                    isNativeBroker: true,
+                    requestId: result.requestId,
+                });
+                this.serverTelemetryManager.clearNativeBrokerErrorCode();
+                return result;
+            })
+                .catch((error) => {
+                nativeATMeasurement.end({
+                    success: false,
+                    errorCode: error.errorCode,
+                    subErrorCode: error.subError,
+                    isNativeBroker: true,
+                });
+                throw error;
             });
-            return result;
         }
         catch (e) {
-            // continue with a native call for any and all errors
-            this.logger.info("MSAL internal Cache does not contain tokens, proceed to make a native call");
+            if (e instanceof NativeAuthError) {
+                this.serverTelemetryManager.setNativeBrokerErrorCode(e.errorCode);
+            }
+            throw e;
         }
-        const { ...nativeTokenRequest } = nativeRequest;
-        // fall back to native calls
-        const messageBody = {
-            method: NativeExtensionMethod.GetToken,
-            request: nativeTokenRequest,
-        };
-        const response = await this.nativeMessageHandler.sendMessage(messageBody);
-        const validatedResponse = this.validateNativeResponse(response);
-        return this.handleNativeResponse(validatedResponse, nativeRequest, reqTimestamp)
-            .then((result) => {
-            nativeATMeasurement.end({
-                success: true,
-                isNativeBroker: true,
-                requestId: result.requestId,
-            });
-            return result;
-        })
-            .catch((error) => {
-            nativeATMeasurement.end({
-                success: false,
-                errorCode: error.errorCode,
-                subErrorCode: error.subError,
-                isNativeBroker: true,
-            });
-            throw error;
-        });
     }
     /**
      * Creates silent flow request
@@ -13427,8 +13530,11 @@ class NativeInteractionClient extends BaseInteractionClient {
         }
         catch (e) {
             // Only throw fatal errors here to allow application to fallback to regular redirect. Otherwise proceed and the error will be thrown in handleRedirectPromise
-            if (e instanceof NativeAuthError && isFatalNativeAuthError(e)) {
-                throw e;
+            if (e instanceof NativeAuthError) {
+                this.serverTelemetryManager.setNativeBrokerErrorCode(e.errorCode);
+                if (isFatalNativeAuthError(e)) {
+                    throw e;
+                }
             }
         }
         this.browserStorage.setTemporaryCache(TemporaryCacheKeys.NATIVE_REQUEST, JSON.stringify(nativeRequest), true);
@@ -13479,7 +13585,9 @@ class NativeInteractionClient extends BaseInteractionClient {
             this.validateNativeResponse(response);
             const result = this.handleNativeResponse(response, request, reqTimestamp);
             this.browserStorage.setInteractionInProgress(false);
-            return await result;
+            const res = await result;
+            this.serverTelemetryManager.clearNativeBrokerErrorCode();
+            return res;
         }
         catch (e) {
             this.browserStorage.setInteractionInProgress(false);
@@ -13843,6 +13951,7 @@ class NativeInteractionClient extends BaseInteractionClient {
             // SPAs require whole string to be passed to broker
             validatedRequest.reqCnf = reqCnfData;
         }
+        this.addRequestSKUs(validatedRequest);
         return validatedRequest;
     }
     /**
@@ -17110,7 +17219,7 @@ class NestedAppAuthAdapter {
             "";
         const name = fromAccount.name || effectiveIdTokenClaims?.name;
         const tenantProfiles = new Map();
-        const tenantProfile = buildTenantProfileFromIdTokenClaims(homeAccountId, effectiveIdTokenClaims);
+        const tenantProfile = buildTenantProfile(homeAccountId, localAccountId, tenantId, effectiveIdTokenClaims);
         tenantProfiles.set(tenantId, tenantProfile);
         const account = {
             homeAccountId,