@azure/msal-browser 3.19.0 → 3.20.0

package/lib/msal-browser.js

@@ -1,4 +1,4 @@
-/*! @azure/msal-browser v3.19.0 2024-07-12 */
+/*! @azure/msal-browser v3.20.0 2024-07-23 */
 'use strict';
 (function (global, factory) {
     typeof exports === 'object' && typeof module !== 'undefined' ? factory(exports) :
@@ -6,7 +6,7 @@
     (global = typeof globalThis !== 'undefined' ? globalThis : global || self, factory(global.msal = {}));
 })(this, (function (exports) { 'use strict';
 
-    /*! @azure/msal-common v14.13.0 2024-07-12 */
+    /*! @azure/msal-common v14.14.0 2024-07-23 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -315,7 +315,7 @@
     // Token renewal offset default in seconds
     const DEFAULT_TOKEN_RENEWAL_OFFSET_SEC = 300;
 
-    /*! @azure/msal-common v14.13.0 2024-07-12 */
+    /*! @azure/msal-common v14.14.0 2024-07-23 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -332,7 +332,7 @@
         unexpectedError: unexpectedError
     });
 
-    /*! @azure/msal-common v14.13.0 2024-07-12 */
+    /*! @azure/msal-common v14.14.0 2024-07-23 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -381,7 +381,7 @@
             : AuthErrorMessages[code]);
     }
 
-    /*! @azure/msal-common v14.13.0 2024-07-12 */
+    /*! @azure/msal-common v14.14.0 2024-07-23 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -479,7 +479,7 @@
         userTimeoutReached: userTimeoutReached
     });
 
-    /*! @azure/msal-common v14.13.0 2024-07-12 */
+    /*! @azure/msal-common v14.14.0 2024-07-23 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -731,7 +731,7 @@
         return new ClientAuthError(errorCode, additionalMessage);
     }
 
-    /*! @azure/msal-common v14.13.0 2024-07-12 */
+    /*! @azure/msal-common v14.14.0 2024-07-23 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -792,7 +792,7 @@
         }
     }
 
-    /*! @azure/msal-common v14.13.0 2024-07-12 */
+    /*! @azure/msal-common v14.14.0 2024-07-23 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -807,7 +807,7 @@
         Ciam: 3,
     };
 
-    /*! @azure/msal-common v14.13.0 2024-07-12 */
+    /*! @azure/msal-common v14.14.0 2024-07-23 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -819,7 +819,7 @@
             response.hasOwnProperty("jwks_uri"));
     }
 
-    /*! @azure/msal-common v14.13.0 2024-07-12 */
+    /*! @azure/msal-common v14.14.0 2024-07-23 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -873,7 +873,7 @@
         urlParseError: urlParseError
     });
 
-    /*! @azure/msal-common v14.13.0 2024-07-12 */
+    /*! @azure/msal-common v14.14.0 2024-07-23 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1011,7 +1011,7 @@
         return new ClientConfigurationError(errorCode);
     }
 
-    /*! @azure/msal-common v14.13.0 2024-07-12 */
+    /*! @azure/msal-common v14.14.0 2024-07-23 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -1108,7 +1108,7 @@
         }
     }
 
-    /*! @azure/msal-common v14.13.0 2024-07-12 */
+    /*! @azure/msal-common v14.14.0 2024-07-23 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1155,7 +1155,7 @@
         return null;
     }
 
-    /*! @azure/msal-common v14.13.0 2024-07-12 */
+    /*! @azure/msal-common v14.14.0 2024-07-23 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1319,7 +1319,7 @@
         }
     }
 
-    /*! @azure/msal-common v14.13.0 2024-07-12 */
+    /*! @azure/msal-common v14.14.0 2024-07-23 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1459,7 +1459,7 @@
         return null;
     }
 
-    /*! @azure/msal-common v14.13.0 2024-07-12 */
+    /*! @azure/msal-common v14.14.0 2024-07-23 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -1472,7 +1472,7 @@
         OIDC: "OIDC",
     };
 
-    /*! @azure/msal-common v14.13.0 2024-07-12 */
+    /*! @azure/msal-common v14.14.0 2024-07-23 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -1492,7 +1492,7 @@
         AzureUsGovernment: "https://login.microsoftonline.us",
     };
 
-    /*! @azure/msal-common v14.13.0 2024-07-12 */
+    /*! @azure/msal-common v14.14.0 2024-07-23 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -1502,7 +1502,7 @@
             response.hasOwnProperty("metadata"));
     }
 
-    /*! @azure/msal-common v14.13.0 2024-07-12 */
+    /*! @azure/msal-common v14.14.0 2024-07-23 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -1512,7 +1512,7 @@
             response.hasOwnProperty("error_description"));
     }
 
-    /*! @azure/msal-common v14.13.0 2024-07-12 */
+    /*! @azure/msal-common v14.14.0 2024-07-23 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -1994,7 +1994,7 @@
         "multiMatchedRT",
     ]);
 
-    /*! @azure/msal-common v14.13.0 2024-07-12 */
+    /*! @azure/msal-common v14.14.0 2024-07-23 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -2090,7 +2090,7 @@
         };
     };
 
-    /*! @azure/msal-common v14.13.0 2024-07-12 */
+    /*! @azure/msal-common v14.14.0 2024-07-23 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2199,7 +2199,7 @@
         },
     };
 
-    /*! @azure/msal-common v14.13.0 2024-07-12 */
+    /*! @azure/msal-common v14.14.0 2024-07-23 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -2236,7 +2236,7 @@
         return cachedAtSec > nowSeconds();
     }
 
-    /*! @azure/msal-common v14.13.0 2024-07-12 */
+    /*! @azure/msal-common v14.14.0 2024-07-23 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2563,7 +2563,7 @@
         return metadata.expiresAt <= nowSeconds();
     }
 
-    /*! @azure/msal-common v14.13.0 2024-07-12 */
+    /*! @azure/msal-common v14.14.0 2024-07-23 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3402,7 +3402,7 @@
         };
     }
 
-    /*! @azure/msal-common v14.13.0 2024-07-12 */
+    /*! @azure/msal-common v14.14.0 2024-07-23 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3433,7 +3433,7 @@
         }
     }
 
-    /*! @azure/msal-common v14.13.0 2024-07-12 */
+    /*! @azure/msal-common v14.14.0 2024-07-23 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -3451,7 +3451,7 @@
         }
     }
 
-    /*! @azure/msal-common v14.13.0 2024-07-12 */
+    /*! @azure/msal-common v14.14.0 2024-07-23 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -3497,8 +3497,9 @@
     const SID = "sid";
     const LOGIN_HINT = "login_hint";
     const DOMAIN_HINT = "domain_hint";
+    const X_CLIENT_EXTRA_SKU = "x-client-xtra-sku";
 
-    /*! @azure/msal-common v14.13.0 2024-07-12 */
+    /*! @azure/msal-common v14.14.0 2024-07-23 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3537,7 +3538,7 @@
         },
     };
 
-    /*! @azure/msal-common v14.13.0 2024-07-12 */
+    /*! @azure/msal-common v14.14.0 2024-07-23 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3728,12 +3729,12 @@
         }
     }
 
-    /*! @azure/msal-common v14.13.0 2024-07-12 */
+    /*! @azure/msal-common v14.14.0 2024-07-23 */
     /* eslint-disable header/header */
     const name$1 = "@azure/msal-common";
-    const version$1 = "14.13.0";
+    const version$1 = "14.14.0";
 
-    /*! @azure/msal-common v14.13.0 2024-07-12 */
+    /*! @azure/msal-common v14.14.0 2024-07-23 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3933,7 +3934,7 @@
         }
     }
 
-    /*! @azure/msal-common v14.13.0 2024-07-12 */
+    /*! @azure/msal-common v14.14.0 2024-07-23 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3973,7 +3974,7 @@
         };
     }
 
-    /*! @azure/msal-common v14.13.0 2024-07-12 */
+    /*! @azure/msal-common v14.14.0 2024-07-23 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -3989,21 +3990,38 @@
             !!homeAccountId &&
             tenantId === homeAccountId.split(".")[1]);
     }
-    function buildTenantProfileFromIdTokenClaims(homeAccountId, idTokenClaims) {
-        const { oid, sub, tid, name, tfp, acr } = idTokenClaims;
-        /**
-         * Since there is no way to determine if the authority is AAD or B2C, we exhaust all the possible claims that can serve as tenant ID with the following precedence:
-         * tid - TenantID claim that identifies the tenant that issued the token in AAD. Expected in all AAD ID tokens, not present in B2C ID Tokens.
-         * tfp - Trust Framework Policy claim that identifies the policy that was used to authenticate the user. Functions as tenant for B2C scenarios.
-         * acr - Authentication Context Class Reference claim used only with older B2C policies. Fallback in case tfp is not present, but likely won't be present anyway.
-         */
-        const tenantId = tid || tfp || acr || "";
-        return {
-            tenantId: tenantId,
-            localAccountId: oid || sub || "",
-            name: name,
-            isHomeTenant: tenantIdMatchesHomeTenant(tenantId, homeAccountId),
-        };
+    /**
+     * Build tenant profile
+     * @param homeAccountId - Home account identifier for this account object
+     * @param localAccountId - Local account identifer for this account object
+     * @param tenantId - Full tenant or organizational id that this account belongs to
+     * @param idTokenClaims - Claims from the ID token
+     * @returns
+     */
+    function buildTenantProfile(homeAccountId, localAccountId, tenantId, idTokenClaims) {
+        if (idTokenClaims) {
+            const { oid, sub, tid, name, tfp, acr } = idTokenClaims;
+            /**
+             * Since there is no way to determine if the authority is AAD or B2C, we exhaust all the possible claims that can serve as tenant ID with the following precedence:
+             * tid - TenantID claim that identifies the tenant that issued the token in AAD. Expected in all AAD ID tokens, not present in B2C ID Tokens.
+             * tfp - Trust Framework Policy claim that identifies the policy that was used to authenticate the user. Functions as tenant for B2C scenarios.
+             * acr - Authentication Context Class Reference claim used only with older B2C policies. Fallback in case tfp is not present, but likely won't be present anyway.
+             */
+            const tenantId = tid || tfp || acr || "";
+            return {
+                tenantId: tenantId,
+                localAccountId: oid || sub || "",
+                name: name,
+                isHomeTenant: tenantIdMatchesHomeTenant(tenantId, homeAccountId),
+            };
+        }
+        else {
+            return {
+                tenantId,
+                localAccountId,
+                isHomeTenant: tenantIdMatchesHomeTenant(tenantId, homeAccountId),
+            };
+        }
     }
     /**
      * Replaces account info that varies by tenant profile sourced from the ID token claims passed in with the tenant-specific account info
@@ -4023,7 +4041,7 @@
         if (idTokenClaims) {
             // Ignore isHomeTenant, loginHint, and sid which are part of tenant profile but not base account info
             // eslint-disable-next-line @typescript-eslint/no-unused-vars
-            const { isHomeTenant, ...claimsSourcedTenantProfile } = buildTenantProfileFromIdTokenClaims(baseAccountInfo.homeAccountId, idTokenClaims);
+            const { isHomeTenant, ...claimsSourcedTenantProfile } = buildTenantProfile(baseAccountInfo.homeAccountId, baseAccountInfo.localAccountId, baseAccountInfo.tenantId, idTokenClaims);
             updatedAccountInfo = {
                 ...updatedAccountInfo,
                 ...claimsSourcedTenantProfile,
@@ -4035,7 +4053,7 @@
         return updatedAccountInfo;
     }
 
-    /*! @azure/msal-common v14.13.0 2024-07-12 */
+    /*! @azure/msal-common v14.14.0 2024-07-23 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -4057,7 +4075,7 @@
         return null;
     }
 
-    /*! @azure/msal-common v14.13.0 2024-07-12 */
+    /*! @azure/msal-common v14.14.0 2024-07-23 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4201,12 +4219,8 @@
                 account.tenantProfiles = accountDetails.tenantProfiles;
             }
             else {
-                const tenantProfiles = [];
-                if (accountDetails.idTokenClaims) {
-                    const tenantProfile = buildTenantProfileFromIdTokenClaims(accountDetails.homeAccountId, accountDetails.idTokenClaims);
-                    tenantProfiles.push(tenantProfile);
-                }
-                account.tenantProfiles = tenantProfiles;
+                const tenantProfile = buildTenantProfile(accountDetails.homeAccountId, account.localAccountId, account.realm, accountDetails.idTokenClaims);
+                account.tenantProfiles = [tenantProfile];
             }
             return account;
         }
@@ -4304,7 +4318,7 @@
         }
     }
 
-    /*! @azure/msal-common v14.13.0 2024-07-12 */
+    /*! @azure/msal-common v14.14.0 2024-07-23 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -4312,7 +4326,7 @@
     const cacheQuotaExceededErrorCode = "cache_quota_exceeded";
     const cacheUnknownErrorCode = "cache_error_unknown";
 
-    /*! @azure/msal-common v14.13.0 2024-07-12 */
+    /*! @azure/msal-common v14.14.0 2024-07-23 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4339,7 +4353,7 @@
         }
     }
 
-    /*! @azure/msal-common v14.13.0 2024-07-12 */
+    /*! @azure/msal-common v14.14.0 2024-07-23 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4407,12 +4421,9 @@
          */
         buildTenantProfiles(cachedAccounts, accountFilter) {
             return cachedAccounts.flatMap((accountEntity) => {
-                return this.getAccountInfoForTenantProfiles(accountEntity, accountFilter);
+                return this.getTenantProfilesFromAccountEntity(accountEntity, accountFilter?.tenantId, accountFilter);
             });
         }
-        getAccountInfoForTenantProfiles(accountEntity, accountFilter) {
-            return this.getTenantProfilesFromAccountEntity(accountEntity, accountFilter?.tenantId, accountFilter);
-        }
         getTenantedAccountInfoByFilter(accountInfo, tokenKeys, tenantProfile, tenantProfileFilter) {
             let tenantedAccountInfo = null;
             let idTokenClaims;
@@ -5594,7 +5605,7 @@
         }
     }
 
-    /*! @azure/msal-common v14.13.0 2024-07-12 */
+    /*! @azure/msal-common v14.14.0 2024-07-23 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5692,7 +5703,7 @@
         return (config.authOptions.authority.options.protocolMode === ProtocolMode.OIDC);
     }
 
-    /*! @azure/msal-common v14.13.0 2024-07-12 */
+    /*! @azure/msal-common v14.14.0 2024-07-23 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5711,7 +5722,7 @@
         }
     }
 
-    /*! @azure/msal-common v14.13.0 2024-07-12 */
+    /*! @azure/msal-common v14.14.0 2024-07-23 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5809,7 +5820,7 @@
         }
     }
 
-    /*! @azure/msal-common v14.13.0 2024-07-12 */
+    /*! @azure/msal-common v14.14.0 2024-07-23 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5846,7 +5857,7 @@
         }
     }
 
-    /*! @azure/msal-common v14.13.0 2024-07-12 */
+    /*! @azure/msal-common v14.14.0 2024-07-23 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -5856,7 +5867,7 @@
         UPN: "UPN",
     };
 
-    /*! @azure/msal-common v14.13.0 2024-07-12 */
+    /*! @azure/msal-common v14.14.0 2024-07-23 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5923,7 +5934,7 @@
         }
     }
 
-    /*! @azure/msal-common v14.13.0 2024-07-12 */
+    /*! @azure/msal-common v14.14.0 2024-07-23 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6308,7 +6319,7 @@
         }
     }
 
-    /*! @azure/msal-common v14.13.0 2024-07-12 */
+    /*! @azure/msal-common v14.14.0 2024-07-23 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6411,7 +6422,7 @@
         }
     }
 
-    /*! @azure/msal-common v14.13.0 2024-07-12 */
+    /*! @azure/msal-common v14.14.0 2024-07-23 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -6437,7 +6448,7 @@
         refreshTokenExpired: refreshTokenExpired
     });
 
-    /*! @azure/msal-common v14.13.0 2024-07-12 */
+    /*! @azure/msal-common v14.14.0 2024-07-23 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6525,7 +6536,7 @@
         return new InteractionRequiredAuthError(errorCode, InteractionRequiredAuthErrorMessages[errorCode]);
     }
 
-    /*! @azure/msal-common v14.13.0 2024-07-12 */
+    /*! @azure/msal-common v14.14.0 2024-07-23 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6597,7 +6608,7 @@
         }
     }
 
-    /*! @azure/msal-common v14.13.0 2024-07-12 */
+    /*! @azure/msal-common v14.14.0 2024-07-23 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6681,7 +6692,7 @@
         }
     }
 
-    /*! @azure/msal-common v14.13.0 2024-07-12 */
+    /*! @azure/msal-common v14.14.0 2024-07-23 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -6708,7 +6719,7 @@
         }
     }
 
-    /*! @azure/msal-common v14.13.0 2024-07-12 */
+    /*! @azure/msal-common v14.14.0 2024-07-23 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7073,19 +7084,19 @@
                 nativeAccountId: nativeAccountId,
             }, authority, base64Decode);
         const tenantProfiles = baseAccount.tenantProfiles || [];
-        if (claimsTenantId &&
-            idTokenClaims &&
+        const tenantId = claimsTenantId || baseAccount.realm;
+        if (tenantId &&
             !tenantProfiles.find((tenantProfile) => {
-                return tenantProfile.tenantId === claimsTenantId;
+                return tenantProfile.tenantId === tenantId;
             })) {
-            const newTenantProfile = buildTenantProfileFromIdTokenClaims(homeAccountId, idTokenClaims);
+            const newTenantProfile = buildTenantProfile(homeAccountId, baseAccount.localAccountId, tenantId, idTokenClaims);
             tenantProfiles.push(newTenantProfile);
         }
         baseAccount.tenantProfiles = tenantProfiles;
         return baseAccount;
     }
 
-    /*! @azure/msal-common v14.13.0 2024-07-12 */
+    /*! @azure/msal-common v14.14.0 2024-07-23 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7508,7 +7519,7 @@
         }
     }
 
-    /*! @azure/msal-common v14.13.0 2024-07-12 */
+    /*! @azure/msal-common v14.14.0 2024-07-23 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7722,7 +7733,7 @@
         }
     }
 
-    /*! @azure/msal-common v14.13.0 2024-07-12 */
+    /*! @azure/msal-common v14.14.0 2024-07-23 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7858,7 +7869,7 @@
         }
     }
 
-    /*! @azure/msal-common v14.13.0 2024-07-12 */
+    /*! @azure/msal-common v14.14.0 2024-07-23 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7873,7 +7884,7 @@
         },
     };
 
-    /*! @azure/msal-common v14.13.0 2024-07-12 */
+    /*! @azure/msal-common v14.14.0 2024-07-23 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -7881,7 +7892,7 @@
     const missingKidError = "missing_kid_error";
     const missingAlgError = "missing_alg_error";
 
-    /*! @azure/msal-common v14.13.0 2024-07-12 */
+    /*! @azure/msal-common v14.14.0 2024-07-23 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7906,7 +7917,7 @@
         return new JoseHeaderError(code, JoseHeaderErrorMessages[code]);
     }
 
-    /*! @azure/msal-common v14.13.0 2024-07-12 */
+    /*! @azure/msal-common v14.14.0 2024-07-23 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7946,7 +7957,7 @@
         }
     }
 
-    /*! @azure/msal-common v14.13.0 2024-07-12 */
+    /*! @azure/msal-common v14.14.0 2024-07-23 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -8004,12 +8015,50 @@
         }
     }
 
-    /*! @azure/msal-common v14.13.0 2024-07-12 */
+    /*! @azure/msal-common v14.14.0 2024-07-23 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
      */
+    const skuGroupSeparator = ",";
+    const skuValueSeparator = "|";
+    function makeExtraSkuString(params) {
+        const { skus, libraryName, libraryVersion, extensionName, extensionVersion, } = params;
+        const skuMap = new Map([
+            [0, [libraryName, libraryVersion]],
+            [2, [extensionName, extensionVersion]],
+        ]);
+        let skuArr = [];
+        if (skus?.length) {
+            skuArr = skus.split(skuGroupSeparator);
+            // Ignore invalid input sku param
+            if (skuArr.length < 4) {
+                return skus;
+            }
+        }
+        else {
+            skuArr = Array.from({ length: 4 }, () => skuValueSeparator);
+        }
+        skuMap.forEach((value, key) => {
+            if (value.length === 2 && value[0]?.length && value[1]?.length) {
+                setSku({
+                    skuArr,
+                    index: key,
+                    skuName: value[0],
+                    skuVersion: value[1],
+                });
+            }
+        });
+        return skuArr.join(skuGroupSeparator);
+    }
+    function setSku(params) {
+        const { skuArr, index, skuName, skuVersion } = params;
+        if (index >= skuArr.length) {
+            return;
+        }
+        skuArr[index] = [skuName, skuVersion].join(skuValueSeparator);
+    }
     /** @internal */
     class ServerTelemetryManager {
         constructor(telemetryRequest, cacheManager) {
@@ -8029,7 +8078,12 @@
          */
         generateCurrentRequestHeaderValue() {
             const request = `${this.apiId}${SERVER_TELEM_CONSTANTS.VALUE_SEPARATOR}${this.cacheOutcome}`;
-            const platformFields = [this.wrapperSKU, this.wrapperVer].join(SERVER_TELEM_CONSTANTS.VALUE_SEPARATOR);
+            const platformFieldsArr = [this.wrapperSKU, this.wrapperVer];
+            const nativeBrokerErrorCode = this.getNativeBrokerErrorCode();
+            if (nativeBrokerErrorCode?.length) {
+                platformFieldsArr.push(`broker_error=${nativeBrokerErrorCode}`);
+            }
+            const platformFields = platformFieldsArr.join(SERVER_TELEM_CONSTANTS.VALUE_SEPARATOR);
             const regionDiscoveryFields = this.getRegionDiscoveryFields();
             const requestWithRegionDiscoveryFields = [
                 request,
@@ -8206,9 +8260,25 @@
         setCacheOutcome(cacheOutcome) {
             this.cacheOutcome = cacheOutcome;
         }
+        setNativeBrokerErrorCode(errorCode) {
+            const lastRequests = this.getLastRequests();
+            lastRequests.nativeBrokerErrorCode = errorCode;
+            this.cacheManager.setServerTelemetry(this.telemetryCacheKey, lastRequests);
+        }
+        getNativeBrokerErrorCode() {
+            return this.getLastRequests().nativeBrokerErrorCode;
+        }
+        clearNativeBrokerErrorCode() {
+            const lastRequests = this.getLastRequests();
+            delete lastRequests.nativeBrokerErrorCode;
+            this.cacheManager.setServerTelemetry(this.telemetryCacheKey, lastRequests);
+        }
+        static makeExtraSkuString(params) {
+            return makeExtraSkuString(params);
+        }
     }
 
-    /*! @azure/msal-common v14.13.0 2024-07-12 */
+    /*! @azure/msal-common v14.14.0 2024-07-23 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -8287,7 +8357,7 @@
         }
     }
 
-    /*! @azure/msal-common v14.13.0 2024-07-12 */
+    /*! @azure/msal-common v14.14.0 2024-07-23 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -10158,7 +10228,7 @@
 
     /* eslint-disable header/header */
     const name = "@azure/msal-browser";
-    const version = "3.19.0";
+    const version = "3.20.0";
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -13306,6 +13376,30 @@
             this.nativeMessageHandler = provider;
             this.nativeStorageManager = nativeStorageImpl;
             this.silentCacheClient = new SilentCacheClient(config, this.nativeStorageManager, browserCrypto, logger, eventHandler, navigationClient, performanceClient, provider, correlationId);
+            this.serverTelemetryManager = this.initializeServerTelemetryManager(this.apiId);
+            const extensionName = this.nativeMessageHandler.getExtensionId() ===
+                NativeConstants.PREFERRED_EXTENSION_ID
+                ? "chrome"
+                : this.nativeMessageHandler.getExtensionId()?.length
+                    ? "unknown"
+                    : undefined;
+            this.skus = ServerTelemetryManager.makeExtraSkuString({
+                libraryName: BrowserConstants.MSAL_SKU,
+                libraryVersion: version,
+                extensionName: extensionName,
+                extensionVersion: this.nativeMessageHandler.getExtensionVersion(),
+            });
+        }
+        /**
+         * Adds SKUs to request extra query parameters
+         * @param request {NativeTokenRequest}
+         * @private
+         */
+        addRequestSKUs(request) {
+            request.extraParameters = {
+                ...request.extraParameters,
+                [X_CLIENT_EXTRA_SKU]: this.skus,
+            };
         }
         /**
          * Acquire token from native platform via browser extension
@@ -13317,48 +13411,57 @@
             // start the perf measurement
             const nativeATMeasurement = this.performanceClient.startMeasurement(PerformanceEvents.NativeInteractionClientAcquireToken, request.correlationId);
             const reqTimestamp = nowSeconds();
-            // initialize native request
-            const nativeRequest = await this.initializeNativeRequest(request);
-            // check if the tokens can be retrieved from internal cache
             try {
-                const result = await this.acquireTokensFromCache(this.accountId, nativeRequest);
-                nativeATMeasurement.end({
-                    success: true,
-                    isNativeBroker: false,
-                    fromCache: true,
+                // initialize native request
+                const nativeRequest = await this.initializeNativeRequest(request);
+                // check if the tokens can be retrieved from internal cache
+                try {
+                    const result = await this.acquireTokensFromCache(this.accountId, nativeRequest);
+                    nativeATMeasurement.end({
+                        success: true,
+                        isNativeBroker: false,
+                        fromCache: true,
+                    });
+                    return result;
+                }
+                catch (e) {
+                    // continue with a native call for any and all errors
+                    this.logger.info("MSAL internal Cache does not contain tokens, proceed to make a native call");
+                }
+                const { ...nativeTokenRequest } = nativeRequest;
+                // fall back to native calls
+                const messageBody = {
+                    method: NativeExtensionMethod.GetToken,
+                    request: nativeTokenRequest,
+                };
+                const response = await this.nativeMessageHandler.sendMessage(messageBody);
+                const validatedResponse = this.validateNativeResponse(response);
+                return await this.handleNativeResponse(validatedResponse, nativeRequest, reqTimestamp)
+                    .then((result) => {
+                    nativeATMeasurement.end({
+                        success: true,
+                        isNativeBroker: true,
+                        requestId: result.requestId,
+                    });
+                    this.serverTelemetryManager.clearNativeBrokerErrorCode();
+                    return result;
+                })
+                    .catch((error) => {
+                    nativeATMeasurement.end({
+                        success: false,
+                        errorCode: error.errorCode,
+                        subErrorCode: error.subError,
+                        isNativeBroker: true,
+                    });
+                    throw error;
                 });
-                return result;
             }
             catch (e) {
-                // continue with a native call for any and all errors
-                this.logger.info("MSAL internal Cache does not contain tokens, proceed to make a native call");
+                if (e instanceof NativeAuthError) {
+                    this.serverTelemetryManager.setNativeBrokerErrorCode(e.errorCode);
+                }
+                throw e;
             }
-            const { ...nativeTokenRequest } = nativeRequest;
-            // fall back to native calls
-            const messageBody = {
-                method: NativeExtensionMethod.GetToken,
-                request: nativeTokenRequest,
-            };
-            const response = await this.nativeMessageHandler.sendMessage(messageBody);
-            const validatedResponse = this.validateNativeResponse(response);
-            return this.handleNativeResponse(validatedResponse, nativeRequest, reqTimestamp)
-                .then((result) => {
-                nativeATMeasurement.end({
-                    success: true,
-                    isNativeBroker: true,
-                    requestId: result.requestId,
-                });
-                return result;
-            })
-                .catch((error) => {
-                nativeATMeasurement.end({
-                    success: false,
-                    errorCode: error.errorCode,
-                    subErrorCode: error.subError,
-                    isNativeBroker: true,
-                });
-                throw error;
-            });
         }
         /**
          * Creates silent flow request
@@ -13431,8 +13534,11 @@
             }
             catch (e) {
                 // Only throw fatal errors here to allow application to fallback to regular redirect. Otherwise proceed and the error will be thrown in handleRedirectPromise
-                if (e instanceof NativeAuthError && isFatalNativeAuthError(e)) {
-                    throw e;
+                if (e instanceof NativeAuthError) {
+                    this.serverTelemetryManager.setNativeBrokerErrorCode(e.errorCode);
+                    if (isFatalNativeAuthError(e)) {
+                        throw e;
+                    }
                 }
             }
             this.browserStorage.setTemporaryCache(TemporaryCacheKeys.NATIVE_REQUEST, JSON.stringify(nativeRequest), true);
@@ -13483,7 +13589,9 @@
                 this.validateNativeResponse(response);
                 const result = this.handleNativeResponse(response, request, reqTimestamp);
                 this.browserStorage.setInteractionInProgress(false);
-                return await result;
+                const res = await result;
+                this.serverTelemetryManager.clearNativeBrokerErrorCode();
+                return res;
             }
             catch (e) {
                 this.browserStorage.setInteractionInProgress(false);
@@ -13847,6 +13955,7 @@
                 // SPAs require whole string to be passed to broker
                 validatedRequest.reqCnf = reqCnfData;
             }
+            this.addRequestSKUs(validatedRequest);
             return validatedRequest;
         }
         /**
@@ -17114,7 +17223,7 @@
                 "";
             const name = fromAccount.name || effectiveIdTokenClaims?.name;
             const tenantProfiles = new Map();
-            const tenantProfile = buildTenantProfileFromIdTokenClaims(homeAccountId, effectiveIdTokenClaims);
+            const tenantProfile = buildTenantProfile(homeAccountId, localAccountId, tenantId, effectiveIdTokenClaims);
             tenantProfiles.set(tenantId, tenantProfile);
             const account = {
                 homeAccountId,