npm - @azure/msal-browser - Versions diffs - 4.22.1 → 4.24.0 - Mend

@azure/msal-browser 4.22.1 → 4.24.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (766) hide show

package/lib/custom-auth-path/msal-custom-auth.cjs CHANGED Viewed

@@ -1,8 +1,8 @@
-/*! @azure/msal-browser v4.22.1 2025-09-09 */
+/*! @azure/msal-browser v4.24.0 2025-09-24 */
 'use strict';
 'use strict';
-/*! @azure/msal-common v15.12.0 2025-09-09 */
+/*! @azure/msal-common v15.13.0 2025-09-24 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -276,7 +276,7 @@ const JsonWebTokenTypes = {
 // Token renewal offset default in seconds
 const DEFAULT_TOKEN_RENEWAL_OFFSET_SEC = 300;
-/*! @azure/msal-common v15.12.0 2025-09-09 */
+/*! @azure/msal-common v15.13.0 2025-09-24 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -287,7 +287,7 @@ const DEFAULT_TOKEN_RENEWAL_OFFSET_SEC = 300;
 const unexpectedError = "unexpected_error";
 const postRequestFailed$1 = "post_request_failed";
-/*! @azure/msal-common v15.12.0 2025-09-09 */
+/*! @azure/msal-common v15.13.0 2025-09-24 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -322,7 +322,7 @@ function createAuthError(code, additionalMessage) {
         : AuthErrorMessages[code]);
 }
-/*! @azure/msal-common v15.12.0 2025-09-09 */
+/*! @azure/msal-common v15.13.0 2025-09-24 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -372,7 +372,7 @@ const missingTenantIdError = "missing_tenant_id_error";
 const methodNotImplemented = "method_not_implemented";
 const nestedAppAuthBridgeDisabled = "nested_app_auth_bridge_disabled";
-/*! @azure/msal-common v15.12.0 2025-09-09 */
+/*! @azure/msal-common v15.13.0 2025-09-24 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -446,7 +446,7 @@ function createClientAuthError(errorCode, additionalMessage) {
     return new ClientAuthError(errorCode, additionalMessage);
 }
-/*! @azure/msal-common v15.12.0 2025-09-09 */
+/*! @azure/msal-common v15.13.0 2025-09-24 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -485,7 +485,7 @@ const DEFAULT_CRYPTO_IMPLEMENTATION = {
     },
 };
-/*! @azure/msal-common v15.12.0 2025-09-09 */
+/*! @azure/msal-common v15.13.0 2025-09-24 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -676,12 +676,12 @@ class Logger {
     }
 }
-/*! @azure/msal-common v15.12.0 2025-09-09 */
+/*! @azure/msal-common v15.13.0 2025-09-24 */
 /* eslint-disable header/header */
 const name$1 = "@azure/msal-common";
-const version$1 = "15.12.0";
+const version$1 = "15.13.0";
-/*! @azure/msal-common v15.12.0 2025-09-09 */
+/*! @azure/msal-common v15.13.0 2025-09-24 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -690,7 +690,7 @@ const AzureCloudInstance = {
     // AzureCloudInstance is not specified.
     None: "none"};
-/*! @azure/msal-common v15.12.0 2025-09-09 */
+/*! @azure/msal-common v15.13.0 2025-09-24 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -719,7 +719,7 @@ const authorityMismatch = "authority_mismatch";
 const invalidRequestMethodForEAR = "invalid_request_method_for_EAR";
 const invalidAuthorizePostBodyParameters = "invalid_authorize_post_body_parameters";
-/*! @azure/msal-common v15.12.0 2025-09-09 */
+/*! @azure/msal-common v15.13.0 2025-09-24 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -764,7 +764,7 @@ function createClientConfigurationError(errorCode) {
     return new ClientConfigurationError(errorCode);
 }
-/*! @azure/msal-common v15.12.0 2025-09-09 */
+/*! @azure/msal-common v15.13.0 2025-09-24 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -861,7 +861,7 @@ class StringUtils {
     }
 }
-/*! @azure/msal-common v15.12.0 2025-09-09 */
+/*! @azure/msal-common v15.13.0 2025-09-24 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1056,7 +1056,7 @@ class ScopeSet {
     }
 }
-/*! @azure/msal-common v15.12.0 2025-09-09 */
+/*! @azure/msal-common v15.13.0 2025-09-24 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -1138,7 +1138,7 @@ function updateAccountTenantProfileData(baseAccountInfo, tenantProfile, idTokenC
     return updatedAccountInfo;
 }
-/*! @azure/msal-common v15.12.0 2025-09-09 */
+/*! @azure/msal-common v15.13.0 2025-09-24 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1199,7 +1199,7 @@ function checkMaxAge(authTime, maxAge) {
     }
 }
-/*! @azure/msal-common v15.12.0 2025-09-09 */
+/*! @azure/msal-common v15.13.0 2025-09-24 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1315,7 +1315,7 @@ function normalizeUrlForComparison(url) {
     }
 }
-/*! @azure/msal-common v15.12.0 2025-09-09 */
+/*! @azure/msal-common v15.13.0 2025-09-24 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1479,7 +1479,7 @@ class UrlString {
     }
 }
-/*! @azure/msal-common v15.12.0 2025-09-09 */
+/*! @azure/msal-common v15.13.0 2025-09-24 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1618,7 +1618,7 @@ function getCloudDiscoveryMetadataFromNetworkResponse(response, authorityHost) {
     return null;
 }
-/*! @azure/msal-common v15.12.0 2025-09-09 */
+/*! @azure/msal-common v15.13.0 2025-09-24 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -1626,7 +1626,7 @@ function getCloudDiscoveryMetadataFromNetworkResponse(response, authorityHost) {
 const cacheQuotaExceeded = "cache_quota_exceeded";
 const cacheErrorUnknown = "cache_error_unknown";
-/*! @azure/msal-common v15.12.0 2025-09-09 */
+/*! @azure/msal-common v15.13.0 2025-09-24 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1671,7 +1671,7 @@ function createCacheError(e) {
     }
 }
-/*! @azure/msal-common v15.12.0 2025-09-09 */
+/*! @azure/msal-common v15.13.0 2025-09-24 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2779,7 +2779,7 @@ class DefaultStorageClass extends CacheManager {
     }
 }
-/*! @azure/msal-common v15.12.0 2025-09-09 */
+/*! @azure/msal-common v15.13.0 2025-09-24 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -2803,7 +2803,7 @@ const ProtocolMode = {
     EAR: "EAR",
 };
-/*! @azure/msal-common v15.12.0 2025-09-09 */
+/*! @azure/msal-common v15.13.0 2025-09-24 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -3070,7 +3070,7 @@ const PerformanceEvents = {
 const PerformanceEventStatus = {
     InProgress: 1};
-/*! @azure/msal-common v15.12.0 2025-09-09 */
+/*! @azure/msal-common v15.13.0 2025-09-24 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3149,7 +3149,7 @@ class StubPerformanceClient {
     }
 }
-/*! @azure/msal-common v15.12.0 2025-09-09 */
+/*! @azure/msal-common v15.13.0 2025-09-24 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3249,7 +3249,7 @@ function isOidcProtocolMode(config) {
     return (config.authOptions.authority.options.protocolMode === ProtocolMode.OIDC);
 }
-/*! @azure/msal-common v15.12.0 2025-09-09 */
+/*! @azure/msal-common v15.13.0 2025-09-24 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -3259,7 +3259,7 @@ const CcsCredentialType = {
     UPN: "UPN",
 };
-/*! @azure/msal-common v15.12.0 2025-09-09 */
+/*! @azure/msal-common v15.13.0 2025-09-24 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3299,7 +3299,7 @@ function buildClientInfoFromHomeAccountId(homeAccountId) {
     };
 }
-/*! @azure/msal-common v15.12.0 2025-09-09 */
+/*! @azure/msal-common v15.13.0 2025-09-24 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -3349,7 +3349,7 @@ const INSTANCE_AWARE = "instance_aware";
 const EAR_JWK = "ear_jwk";
 const EAR_JWE_CRYPTO = "ear_jwe_crypto";
-/*! @azure/msal-common v15.12.0 2025-09-09 */
+/*! @azure/msal-common v15.13.0 2025-09-24 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3729,7 +3729,7 @@ function addPostBodyParameters(parameters, bodyParameters) {
     });
 }
-/*! @azure/msal-common v15.12.0 2025-09-09 */
+/*! @azure/msal-common v15.13.0 2025-09-24 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -3744,7 +3744,7 @@ const AuthorityType = {
     Ciam: 3,
 };
-/*! @azure/msal-common v15.12.0 2025-09-09 */
+/*! @azure/msal-common v15.13.0 2025-09-24 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -3756,7 +3756,7 @@ function isOpenIdConfigResponse(response) {
         response.hasOwnProperty("jwks_uri"));
 }
-/*! @azure/msal-common v15.12.0 2025-09-09 */
+/*! @azure/msal-common v15.13.0 2025-09-24 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -3766,7 +3766,7 @@ function isCloudInstanceDiscoveryResponse(response) {
         response.hasOwnProperty("metadata"));
 }
-/*! @azure/msal-common v15.12.0 2025-09-09 */
+/*! @azure/msal-common v15.13.0 2025-09-24 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -3776,7 +3776,7 @@ function isCloudInstanceDiscoveryErrorResponse(response) {
         response.hasOwnProperty("error_description"));
 }
-/*! @azure/msal-common v15.12.0 2025-09-09 */
+/*! @azure/msal-common v15.13.0 2025-09-24 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -3872,7 +3872,7 @@ const invokeAsync = (callback, eventName, logger, telemetryClient, correlationId
     };
 };
-/*! @azure/msal-common v15.12.0 2025-09-09 */
+/*! @azure/msal-common v15.13.0 2025-09-24 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3978,7 +3978,7 @@ RegionDiscovery.IMDS_OPTIONS = {
     },
 };
-/*! @azure/msal-common v15.12.0 2025-09-09 */
+/*! @azure/msal-common v15.13.0 2025-09-24 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -4043,7 +4043,7 @@ function wasClockTurnedBack(cachedAt) {
     return cachedAtSec > nowSeconds();
 }
-/*! @azure/msal-common v15.12.0 2025-09-09 */
+/*! @azure/msal-common v15.13.0 2025-09-24 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4305,7 +4305,7 @@ function isAuthorityMetadataExpired(metadata) {
     return metadata.expiresAt <= nowSeconds();
 }
-/*! @azure/msal-common v15.12.0 2025-09-09 */
+/*! @azure/msal-common v15.13.0 2025-09-24 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5144,7 +5144,7 @@ function buildStaticAuthorityOptions(authOptions) {
     };
 }
-/*! @azure/msal-common v15.12.0 2025-09-09 */
+/*! @azure/msal-common v15.13.0 2025-09-24 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5175,7 +5175,7 @@ async function createDiscoveredInstance(authorityUri, networkClient, cacheManage
     }
 }
-/*! @azure/msal-common v15.12.0 2025-09-09 */
+/*! @azure/msal-common v15.13.0 2025-09-24 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5194,7 +5194,7 @@ class ServerError extends AuthError {
     }
 }
-/*! @azure/msal-common v15.12.0 2025-09-09 */
+/*! @azure/msal-common v15.13.0 2025-09-24 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -5215,7 +5215,7 @@ function getRequestThumbprint(clientId, request, homeAccountId) {
     };
 }
-/*! @azure/msal-common v15.12.0 2025-09-09 */
+/*! @azure/msal-common v15.13.0 2025-09-24 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5302,7 +5302,7 @@ class ThrottlingUtils {
     }
 }
-/*! @azure/msal-common v15.12.0 2025-09-09 */
+/*! @azure/msal-common v15.13.0 2025-09-24 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5333,7 +5333,7 @@ function createNetworkError(error, httpStatus, responseHeaders, additionalError)
     return new NetworkError(error, httpStatus, responseHeaders);
 }
-/*! @azure/msal-common v15.12.0 2025-09-09 */
+/*! @azure/msal-common v15.13.0 2025-09-24 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5481,7 +5481,7 @@ class BaseClient {
     }
 }
-/*! @azure/msal-common v15.12.0 2025-09-09 */
+/*! @azure/msal-common v15.13.0 2025-09-24 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -5503,7 +5503,7 @@ function getTenantIdFromIdTokenClaims(idTokenClaims) {
     return null;
 }
-/*! @azure/msal-common v15.12.0 2025-09-09 */
+/*! @azure/msal-common v15.13.0 2025-09-24 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5551,6 +5551,7 @@ class AccountEntity {
             tenantProfiles: new Map((this.tenantProfiles || []).map((tenantProfile) => {
                 return [tenantProfile.tenantId, tenantProfile];
             })),
+            dataBoundary: this.dataBoundary,
         };
     }
     /**
@@ -5577,6 +5578,10 @@ class AccountEntity {
         let clientInfo;
         if (accountDetails.clientInfo && base64Decode) {
             clientInfo = buildClientInfo(accountDetails.clientInfo, base64Decode);
+            if (clientInfo.xms_tdbr) {
+                account.dataBoundary =
+                    clientInfo.xms_tdbr === "EU" ? "EU" : "None";
+            }
         }
         account.clientInfo = accountDetails.clientInfo;
         account.homeAccountId = accountDetails.homeAccountId;
@@ -5645,6 +5650,7 @@ class AccountEntity {
         account.msGraphHost = msGraphHost;
         // Serialize tenant profiles map into an array
         account.tenantProfiles = Array.from(accountInfo.tenantProfiles?.values() || []);
+        account.dataBoundary = accountInfo.dataBoundary;
         return account;
     }
     /**
@@ -5718,7 +5724,7 @@ class AccountEntity {
     }
 }
-/*! @azure/msal-common v15.12.0 2025-09-09 */
+/*! @azure/msal-common v15.13.0 2025-09-24 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -5734,7 +5740,7 @@ const consentRequired = "consent_required";
 const loginRequired = "login_required";
 const badToken = "bad_token";
-/*! @azure/msal-common v15.12.0 2025-09-09 */
+/*! @azure/msal-common v15.13.0 2025-09-24 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5806,7 +5812,7 @@ function createInteractionRequiredAuthError(errorCode) {
     return new InteractionRequiredAuthError(errorCode, InteractionRequiredAuthErrorMessages[errorCode]);
 }
-/*! @azure/msal-common v15.12.0 2025-09-09 */
+/*! @azure/msal-common v15.13.0 2025-09-24 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5878,7 +5884,7 @@ class ProtocolUtils {
     }
 }
-/*! @azure/msal-common v15.12.0 2025-09-09 */
+/*! @azure/msal-common v15.13.0 2025-09-24 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5960,7 +5966,7 @@ class PopTokenGenerator {
     }
 }
-/*! @azure/msal-common v15.12.0 2025-09-09 */
+/*! @azure/msal-common v15.13.0 2025-09-24 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -5987,7 +5993,7 @@ class PopTokenGenerator {
     }
 }
-/*! @azure/msal-common v15.12.0 2025-09-09 */
+/*! @azure/msal-common v15.13.0 2025-09-24 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6318,7 +6324,7 @@ function buildAccountToCache(cacheStorage, authority, homeAccountId, base64Decod
     return baseAccount;
 }
-/*! @azure/msal-common v15.12.0 2025-09-09 */
+/*! @azure/msal-common v15.13.0 2025-09-24 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -6336,7 +6342,7 @@ async function getClientAssertion(clientAssertion, clientId, tokenEndpoint) {
     }
 }
-/*! @azure/msal-common v15.12.0 2025-09-09 */
+/*! @azure/msal-common v15.13.0 2025-09-24 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6571,7 +6577,7 @@ class AuthorizationCodeClient extends BaseClient {
     }
 }
-/*! @azure/msal-common v15.12.0 2025-09-09 */
+/*! @azure/msal-common v15.13.0 2025-09-24 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6780,7 +6786,7 @@ class RefreshTokenClient extends BaseClient {
     }
 }
-/*! @azure/msal-common v15.12.0 2025-09-09 */
+/*! @azure/msal-common v15.13.0 2025-09-24 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6878,7 +6884,7 @@ class SilentFlowClient extends BaseClient {
     }
 }
-/*! @azure/msal-common v15.12.0 2025-09-09 */
+/*! @azure/msal-common v15.13.0 2025-09-24 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6893,7 +6899,7 @@ const StubbedNetworkModule = {
     },
 };
-/*! @azure/msal-common v15.12.0 2025-09-09 */
+/*! @azure/msal-common v15.13.0 2025-09-24 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7117,7 +7123,7 @@ function extractLoginHint(account) {
     return account.loginHint || account.idTokenClaims?.login_hint || null;
 }
-/*! @azure/msal-common v15.12.0 2025-09-09 */
+/*! @azure/msal-common v15.13.0 2025-09-24 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7380,7 +7386,7 @@ class ServerTelemetryManager {
     }
 }
-/*! @azure/msal-common v15.12.0 2025-09-09 */
+/*! @azure/msal-common v15.13.0 2025-09-24 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -7388,7 +7394,7 @@ class ServerTelemetryManager {
 const missingKidError = "missing_kid_error";
 const missingAlgError = "missing_alg_error";
-/*! @azure/msal-common v15.12.0 2025-09-09 */
+/*! @azure/msal-common v15.13.0 2025-09-24 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7413,7 +7419,7 @@ function createJoseHeaderError(code) {
     return new JoseHeaderError(code, JoseHeaderErrorMessages[code]);
 }
-/*! @azure/msal-common v15.12.0 2025-09-09 */
+/*! @azure/msal-common v15.13.0 2025-09-24 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7476,10 +7482,9 @@ class CustomAuthError extends Error {
  * Licensed under the MIT License.
  */
 class MsalCustomAuthError extends CustomAuthError {
-    constructor(error, errorDescription, subError, correlationId) {
-        super(error, errorDescription, correlationId);
+    constructor(error, errorDescription, subError, errorCodes, correlationId) {
+        super(error, errorDescription, correlationId, errorCodes, subError);
         Object.setPrototypeOf(this, MsalCustomAuthError.prototype);
-        this.subError = subError || "";
     }
 }
@@ -7537,7 +7542,19 @@ class AuthFlowResultBase {
             return error;
         }
         else if (error instanceof AuthError) {
-            return new MsalCustomAuthError(error.errorCode, error.errorMessage, error.subError, error.correlationId);
+            const errorCodes = [];
+            if ("errorNo" in error) {
+                if (typeof error.errorNo === "string") {
+                    const code = Number(error.errorNo);
+                    if (!isNaN(code)) {
+                        errorCodes.push(code);
+                    }
+                }
+                else if (typeof error.errorNo === "number") {
+                    errorCodes.push(error.errorNo);
+                }
+            }
+            return new MsalCustomAuthError(error.errorCode, error.errorMessage, error.subError, errorCodes, error.correlationId);
         }
         else {
             return new UnexpectedError(error);
@@ -7633,7 +7650,9 @@ const PASSWORD_RECENTLY_USED = "password_recently_used";
 const PASSWORD_BANNED = "password_banned";
 const PASSWORD_IS_INVALID = "password_is_invalid";
 const INVALID_OOB_VALUE = "invalid_oob_value";
-const ATTRIBUTE_VALIATION_FAILED = "attribute_validation_failed";
+const ATTRIBUTE_VALIATION_FAILED = "attribute_validation_failed";
+const REGISTRATION_REQUIRED = "registration_required";
+const MFA_REQUIRED = "mfa_required";
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7677,7 +7696,9 @@ class AuthFlowErrorBase {
             this.errorData.subError ===
                 INVALID_OOB_VALUE) ||
             (this.errorData instanceof InvalidArgumentError &&
-                this.errorData.errorDescription?.includes("code") === true));
+                (this.errorData.errorDescription?.includes("code") ||
+                    this.errorData.errorDescription?.includes("challenge")) ===
+                    true));
     }
     isRedirectError() {
         return this.errorData instanceof RedirectError;
@@ -7728,6 +7749,17 @@ class AuthFlowErrorBase {
             this.errorData.error === INVALID_REQUEST &&
             this.errorData.errorCodes?.includes(50142) === true);
     }
+    isInvalidInputError() {
+        return (this.errorData instanceof CustomAuthApiError &&
+            this.errorData.error === INVALID_REQUEST &&
+            this.errorData.errorCodes?.includes(901001) === true);
+    }
+    isVerificationContactBlockedError() {
+        return (this.errorData instanceof CustomAuthApiError &&
+            this.errorData.error === INVALID_REQUEST &&
+            this.errorData.errorCodes?.includes(550024) === true &&
+            this.errorData.errorDescription?.includes("multi-factor authentication method is blocked") === true);
+    }
 }
 class AuthActionErrorBase extends AuthFlowErrorBase {
     /**
@@ -7820,7 +7852,7 @@ function ensureArgumentIsJSONString(argName, argValue, correlationId) {
 /* eslint-disable header/header */
 const name = "@azure/msal-browser";
-const version = "4.22.1";
+const version = "4.24.0";
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7830,12 +7862,15 @@ const GrantType = {
     PASSWORD: "password",
     OOB: "oob",
     CONTINUATION_TOKEN: "continuation_token",
+    REDIRECT: "redirect",
     ATTRIBUTES: "attributes",
+    MFA_OOB: "mfa_oob",
 };
 const ChallengeType = {
     PASSWORD: "password",
     OOB: "oob",
     REDIRECT: "redirect",
+    PREVERIFIED: "preverified",
 };
 const DefaultScopes = [
     Constants.OPENID_SCOPE,
@@ -8300,24 +8335,6 @@ class SignInResendCodeResult extends AuthFlowResultBase {
 class SignInCompletedState extends AuthFlowStateBase {
 }
-/*
- * Copyright (c) Microsoft Corporation. All rights reserved.
- * Licensed under the MIT License.
- */
-/*
- * Result of a sign-in submit credential operation.
- */
-class SignInSubmitCredentialResult extends AuthFlowResultBase {
-    /**
-     * Creates a new instance of SignInSubmitCredentialResult.
-     * @param state The state of the result.
-     * @param resultData The result data.
-     */
-    constructor(state, resultData) {
-        super(state, resultData);
-    }
-}
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -8325,7 +8342,7 @@ class SignInSubmitCredentialResult extends AuthFlowResultBase {
 /*
  * Result of a sign-in submit code operation.
  */
-class SignInSubmitCodeResult extends SignInSubmitCredentialResult {
+class SignInSubmitCodeResult extends AuthFlowResultBase {
     /**
      * Creates a new instance of SignInSubmitCodeResult with error data.
      * @param error The error that occurred.
@@ -8369,6 +8386,46 @@ class SignInState extends AuthFlowActionRequiredStateBase {
     }
 }
+/*
+ * Copyright (c) Microsoft Corporation. All rights reserved.
+ * Licensed under the MIT License.
+ */
+const SIGN_IN_CODE_SEND_RESULT_TYPE = "SignInCodeSendResult";
+const SIGN_IN_PASSWORD_REQUIRED_RESULT_TYPE = "SignInPasswordRequiredResult";
+const SIGN_IN_COMPLETED_RESULT_TYPE = "SignInCompletedResult";
+const SIGN_IN_JIT_REQUIRED_RESULT_TYPE = "SignInJitRequiredResult";
+const SIGN_IN_MFA_REQUIRED_RESULT_TYPE = "SignInMfaRequiredResult";
+function createSignInCompleteResult(input) {
+    return {
+        type: SIGN_IN_COMPLETED_RESULT_TYPE,
+        ...input,
+    };
+}
+function createSignInPasswordRequiredResult(input) {
+    return {
+        type: SIGN_IN_PASSWORD_REQUIRED_RESULT_TYPE,
+        ...input,
+    };
+}
+function createSignInCodeSendResult(input) {
+    return {
+        type: SIGN_IN_CODE_SEND_RESULT_TYPE,
+        ...input,
+    };
+}
+function createSignInJitRequiredResult(input) {
+    return {
+        type: SIGN_IN_JIT_REQUIRED_RESULT_TYPE,
+        ...input,
+    };
+}
+function createSignInMfaRequiredResult(input) {
+    return {
+        type: SIGN_IN_MFA_REQUIRED_RESULT_TYPE,
+        ...input,
+    };
+}
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -8397,10 +8454,18 @@ class SignInCodeRequiredState extends SignInState {
                 claims: this.stateParameters.claims,
             };
             this.stateParameters.logger.verbose("Submitting code for sign-in.", this.stateParameters.correlationId);
-            const completedResult = await this.stateParameters.signInClient.submitCode(submitCodeParams);
+            const submitCodeResult = await this.stateParameters.signInClient.submitCode(submitCodeParams);
             this.stateParameters.logger.verbose("Code submitted for sign-in.", this.stateParameters.correlationId);
-            const accountInfo = new CustomAuthAccountData(completedResult.authenticationResult.account, this.stateParameters.config, this.stateParameters.cacheClient, this.stateParameters.logger, this.stateParameters.correlationId);
-            return new SignInSubmitCodeResult(new SignInCompletedState(), accountInfo);
+            if (submitCodeResult.type === SIGN_IN_COMPLETED_RESULT_TYPE) {
+                const accountInfo = new CustomAuthAccountData(submitCodeResult.authenticationResult.account, this.stateParameters.config, this.stateParameters.cacheClient, this.stateParameters.logger, this.stateParameters.correlationId);
+                return new SignInSubmitCodeResult(new SignInCompletedState(), accountInfo);
+            }
+            else {
+                // Unexpected result type
+                const result = submitCodeResult;
+                const error = new Error(`Unexpected result type: ${result.type}`);
+                return SignInSubmitCodeResult.createWithError(error);
+            }
         }
         catch (error) {
             this.stateParameters.logger.errorPii(`Failed to submit code for sign-in. Error: ${error}.`, this.stateParameters.correlationId);
@@ -8430,6 +8495,7 @@ class SignInCodeRequiredState extends SignInState {
                 config: this.stateParameters.config,
                 signInClient: this.stateParameters.signInClient,
                 cacheClient: this.stateParameters.cacheClient,
+                jitClient: this.stateParameters.jitClient,
                 username: this.stateParameters.username,
                 codeLength: result.codeLength,
                 scopes: this.stateParameters.scopes,
@@ -8455,6 +8521,313 @@ class SignInCodeRequiredState extends SignInState {
     }
 }
+/*
+ * Copyright (c) Microsoft Corporation. All rights reserved.
+ * Licensed under the MIT License.
+ */
+// Result type constants
+const JIT_VERIFICATION_REQUIRED_RESULT_TYPE = "JitVerificationRequiredResult";
+const JIT_COMPLETED_RESULT_TYPE = "JitCompletedResult";
+function createJitVerificationRequiredResult(input) {
+    return {
+        type: JIT_VERIFICATION_REQUIRED_RESULT_TYPE,
+        ...input,
+    };
+}
+function createJitCompletedResult(input) {
+    return {
+        type: JIT_COMPLETED_RESULT_TYPE,
+        ...input,
+    };
+}
+/*
+ * Copyright (c) Microsoft Corporation. All rights reserved.
+ * Licensed under the MIT License.
+ */
+/**
+ * Error that occurred during authentication method challenge request.
+ */
+class AuthMethodRegistrationChallengeMethodError extends AuthActionErrorBase {
+    /**
+     * Checks if the input for auth method registration is incorrect.
+     * @returns true if the input is incorrect, false otherwise.
+     */
+    isInvalidInput() {
+        return this.isInvalidInputError();
+    }
+    /**
+     * Checks if the error is due to the verification contact (e.g., phone number or email) being blocked. Consider using a different email/phone number or a different authentication method.
+     * @returns true if the error is due to the verification contact being blocked, false otherwise.
+     */
+    isVerificationContactBlocked() {
+        return this.isVerificationContactBlockedError();
+    }
+}
+/**
+ * Error that occurred during authentication method challenge submission.
+ */
+class AuthMethodRegistrationSubmitChallengeError extends AuthActionErrorBase {
+    /**
+     * Checks if the submitted challenge code is incorrect.
+     * @returns true if the challenge code is incorrect, false otherwise.
+     */
+    isIncorrectChallenge() {
+        return this.isInvalidCodeError();
+    }
+}
+/*
+ * Copyright (c) Microsoft Corporation. All rights reserved.
+ * Licensed under the MIT License.
+ */
+class AuthMethodRegistrationFailedState extends AuthFlowStateBase {
+}
+/*
+ * Copyright (c) Microsoft Corporation. All rights reserved.
+ * Licensed under the MIT License.
+ */
+/**
+ * Result of challenging an authentication method for registration.
+ * Uses base state type to avoid circular dependencies.
+ */
+class AuthMethodRegistrationChallengeMethodResult extends AuthFlowResultBase {
+    /**
+     * Creates an AuthMethodRegistrationChallengeMethodResult with an error.
+     * @param error The error that occurred.
+     * @returns The AuthMethodRegistrationChallengeMethodResult with error.
+     */
+    static createWithError(error) {
+        const result = new AuthMethodRegistrationChallengeMethodResult(new AuthMethodRegistrationFailedState());
+        result.error = new AuthMethodRegistrationChallengeMethodError(AuthMethodRegistrationChallengeMethodResult.createErrorData(error));
+        return result;
+    }
+    /**
+     * Checks if the result indicates that verification is required.
+     * @returns true if verification is required, false otherwise.
+     * @warning This API is experimental. It may be changed in the future without notice. Do not use in production applications.
+     */
+    isVerificationRequired() {
+        return (this.state.constructor?.name ===
+            "AuthMethodVerificationRequiredState");
+    }
+    /**
+     * Checks if the result indicates that registration is completed (fast-pass scenario).
+     * @returns true if registration is completed, false otherwise.
+     * @warning This API is experimental. It may be changed in the future without notice. Do not use in production applications.
+     */
+    isCompleted() {
+        return (this.state.constructor?.name ===
+            "AuthMethodRegistrationCompletedState");
+    }
+    /**
+     * Checks if the result is in a failed state.
+     * @returns true if the result is failed, false otherwise.
+     * @warning This API is experimental. It may be changed in the future without notice. Do not use in production applications.
+     */
+    isFailed() {
+        return this.state instanceof AuthMethodRegistrationFailedState;
+    }
+}
+/*
+ * Copyright (c) Microsoft Corporation. All rights reserved.
+ * Licensed under the MIT License.
+ */
+/**
+ * Result of submitting a challenge for authentication method registration.
+ */
+class AuthMethodRegistrationSubmitChallengeResult extends AuthFlowResultBase {
+    /**
+     * Creates an AuthMethodRegistrationSubmitChallengeResult with an error.
+     * @param error The error that occurred.
+     * @returns The AuthMethodRegistrationSubmitChallengeResult with error.
+     */
+    static createWithError(error) {
+        const result = new AuthMethodRegistrationSubmitChallengeResult(new AuthMethodRegistrationFailedState());
+        result.error = new AuthMethodRegistrationSubmitChallengeError(AuthMethodRegistrationSubmitChallengeResult.createErrorData(error));
+        return result;
+    }
+    /**
+     * Checks if the result indicates that registration is completed.
+     * @returns true if registration is completed, false otherwise.
+     * @warning This API is experimental. It may be changed in the future without notice. Do not use in production applications.
+     */
+    isCompleted() {
+        return (this.state.constructor?.name ===
+            "AuthMethodRegistrationCompletedState");
+    }
+    /**
+     * Checks if the result is in a failed state.
+     * @returns true if the result is failed, false otherwise.
+     * @warning This API is experimental. It may be changed in the future without notice. Do not use in production applications.
+     */
+    isFailed() {
+        return this.state instanceof AuthMethodRegistrationFailedState;
+    }
+}
+/*
+ * Copyright (c) Microsoft Corporation. All rights reserved.
+ * Licensed under the MIT License.
+ */
+class AuthMethodRegistrationCompletedState extends AuthFlowStateBase {
+}
+/*
+ * Copyright (c) Microsoft Corporation. All rights reserved.
+ * Licensed under the MIT License.
+ */
+/**
+ * Abstract base class for authentication method registration states.
+ */
+class AuthMethodRegistrationState extends AuthFlowActionRequiredStateBase {
+    /**
+     * Internal method to challenge an authentication method.
+     * @param authMethodDetails The authentication method details to challenge.
+     * @returns Promise that resolves to AuthMethodRegistrationChallengeMethodResult.
+     */
+    async challengeAuthMethodInternal(authMethodDetails) {
+        try {
+            this.stateParameters.logger.verbose(`Challenging authentication method - '${authMethodDetails.authMethodType.id}' for auth method registration.`, this.stateParameters.correlationId);
+            const challengeParams = {
+                correlationId: this.stateParameters.correlationId,
+                continuationToken: this.stateParameters.continuationToken ?? "",
+                authMethod: authMethodDetails.authMethodType,
+                verificationContact: authMethodDetails.verificationContact,
+                scopes: this.stateParameters.scopes ?? [],
+                username: this.stateParameters.username,
+                claims: this.stateParameters.claims,
+            };
+            const result = await this.stateParameters.jitClient.challengeAuthMethod(challengeParams);
+            this.stateParameters.logger.verbose("Authentication method challenged successfully for auth method registration.", this.stateParameters.correlationId);
+            if (result.type === JIT_VERIFICATION_REQUIRED_RESULT_TYPE) {
+                // Verification required
+                this.stateParameters.logger.verbose("Auth method verification required.", this.stateParameters.correlationId);
+                return new AuthMethodRegistrationChallengeMethodResult(new AuthMethodVerificationRequiredState({
+                    correlationId: result.correlationId,
+                    continuationToken: result.continuationToken,
+                    config: this.stateParameters.config,
+                    logger: this.stateParameters.logger,
+                    jitClient: this.stateParameters.jitClient,
+                    cacheClient: this.stateParameters.cacheClient,
+                    challengeChannel: result.challengeChannel,
+                    challengeTargetLabel: result.challengeTargetLabel,
+                    codeLength: result.codeLength,
+                    scopes: this.stateParameters.scopes ?? [],
+                    username: this.stateParameters.username,
+                    claims: this.stateParameters.claims,
+                }));
+            }
+            else if (result.type === JIT_COMPLETED_RESULT_TYPE) {
+                // Registration completed (fast-pass scenario)
+                this.stateParameters.logger.verbose("Auth method registration completed via fast-pass.", this.stateParameters.correlationId);
+                const accountInfo = new CustomAuthAccountData(result.authenticationResult.account, this.stateParameters.config, this.stateParameters.cacheClient, this.stateParameters.logger, this.stateParameters.correlationId);
+                return new AuthMethodRegistrationChallengeMethodResult(new AuthMethodRegistrationCompletedState(), accountInfo);
+            }
+            else {
+                // Handle unexpected result type with proper typing
+                this.stateParameters.logger.error("Unexpected result type from auth challenge method", this.stateParameters.correlationId);
+                throw new UnexpectedError("Unexpected result type from auth challenge method");
+            }
+        }
+        catch (error) {
+            this.stateParameters.logger.error("Failed to challenge authentication method for auth method registration.", this.stateParameters.correlationId);
+            return AuthMethodRegistrationChallengeMethodResult.createWithError(error);
+        }
+    }
+}
+/**
+ * State indicating that authentication method registration is required.
+ */
+class AuthMethodRegistrationRequiredState extends AuthMethodRegistrationState {
+    /**
+     * Gets the available authentication methods for registration.
+     * @returns Array of available authentication methods.
+     * @warning This API is experimental. It may be changed in the future without notice. Do not use in production applications.
+     */
+    getAuthMethods() {
+        return this.stateParameters.authMethods;
+    }
+    /**
+     * Challenges an authentication method for registration.
+     * @param authMethodDetails The authentication method details to challenge.
+     * @returns Promise that resolves to AuthMethodRegistrationChallengeMethodResult.
+     * @warning This API is experimental. It may be changed in the future without notice. Do not use in production applications.
+     */
+    async challengeAuthMethod(authMethodDetails) {
+        return this.challengeAuthMethodInternal(authMethodDetails);
+    }
+}
+/**
+ * State indicating that verification is required for the challenged authentication method.
+ */
+class AuthMethodVerificationRequiredState extends AuthMethodRegistrationState {
+    /**
+     * Gets the length of the expected verification code.
+     * @returns The code length.
+     * @warning This API is experimental. It may be changed in the future without notice. Do not use in production applications.
+     */
+    getCodeLength() {
+        return this.stateParameters.codeLength;
+    }
+    /**
+     * Gets the channel through which the challenge was sent.
+     * @returns The challenge channel (e.g., "email").
+     * @warning This API is experimental. It may be changed in the future without notice. Do not use in production applications.
+     */
+    getChannel() {
+        return this.stateParameters.challengeChannel;
+    }
+    /**
+     * Gets the target label indicating where the challenge was sent.
+     * @returns The challenge target label (e.g., masked email address).
+     * @warning This API is experimental. It may be changed in the future without notice. Do not use in production applications.
+     */
+    getSentTo() {
+        return this.stateParameters.challengeTargetLabel;
+    }
+    /**
+     * Submits the verification challenge to complete the authentication method registration.
+     * @param code The verification code entered by the user.
+     * @returns Promise that resolves to AuthMethodRegistrationSubmitChallengeResult.
+     * @warning This API is experimental. It may be changed in the future without notice. Do not use in production applications.
+     */
+    async submitChallenge(code) {
+        try {
+            this.ensureCodeIsValid(code, this.getCodeLength());
+            this.stateParameters.logger.verbose("Submitting auth method challenge.", this.stateParameters.correlationId);
+            const submitParams = {
+                correlationId: this.stateParameters.correlationId,
+                continuationToken: this.stateParameters.continuationToken ?? "",
+                scopes: this.stateParameters.scopes ?? [],
+                grantType: GrantType.OOB,
+                challenge: code,
+                username: this.stateParameters.username,
+                claims: this.stateParameters.claims,
+            };
+            const result = await this.stateParameters.jitClient.submitChallenge(submitParams);
+            this.stateParameters.logger.verbose("Auth method challenge submitted successfully.", this.stateParameters.correlationId);
+            const accountInfo = new CustomAuthAccountData(result.authenticationResult.account, this.stateParameters.config, this.stateParameters.cacheClient, this.stateParameters.logger, this.stateParameters.correlationId);
+            return new AuthMethodRegistrationSubmitChallengeResult(new AuthMethodRegistrationCompletedState(), accountInfo);
+        }
+        catch (error) {
+            this.stateParameters.logger.error("Failed to submit auth method challenge.", this.stateParameters.correlationId);
+            return AuthMethodRegistrationSubmitChallengeResult.createWithError(error);
+        }
+    }
+    /**
+     * Challenges a different authentication method for registration.
+     * @param authMethodDetails The authentication method details to challenge.
+     * @returns Promise that resolves to AuthMethodRegistrationChallengeMethodResult.
+     * @warning This API is experimental. It may be changed in the future without notice. Do not use in production applications.
+     */
+    async challengeAuthMethod(authMethodDetails) {
+        return this.challengeAuthMethodInternal(authMethodDetails);
+    }
+}
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -8462,7 +8835,7 @@ class SignInCodeRequiredState extends SignInState {
 /*
  * Result of a sign-in submit password operation.
  */
-class SignInSubmitPasswordResult extends SignInSubmitCredentialResult {
+class SignInSubmitPasswordResult extends AuthFlowResultBase {
     static createWithError(error) {
         const result = new SignInSubmitPasswordResult(new SignInFailedState());
         result.error = new SignInSubmitPasswordError(SignInSubmitPasswordResult.createErrorData(error));
@@ -8480,6 +8853,13 @@ class SignInSubmitPasswordResult extends SignInSubmitCredentialResult {
     isCompleted() {
         return this.state instanceof SignInCompletedState;
     }
+    /**
+     * Checks if the result requires authentication method registration.
+     * @warning This API is experimental. It may be changed in the future without notice. Do not use in production applications.
+     */
+    isAuthMethodRegistrationRequired() {
+        return this.state instanceof AuthMethodRegistrationRequiredState;
+    }
 }
 /*
@@ -8509,10 +8889,34 @@ class SignInPasswordRequiredState extends SignInState {
                 claims: this.stateParameters.claims,
             };
             this.stateParameters.logger.verbose("Submitting password for sign-in.", this.stateParameters.correlationId);
-            const completedResult = await this.stateParameters.signInClient.submitPassword(submitPasswordParams);
+            const submitPasswordResult = await this.stateParameters.signInClient.submitPassword(submitPasswordParams);
             this.stateParameters.logger.verbose("Password submitted for sign-in.", this.stateParameters.correlationId);
-            const accountInfo = new CustomAuthAccountData(completedResult.authenticationResult.account, this.stateParameters.config, this.stateParameters.cacheClient, this.stateParameters.logger, this.stateParameters.correlationId);
-            return new SignInSubmitPasswordResult(new SignInCompletedState(), accountInfo);
+            if (submitPasswordResult.type === SIGN_IN_COMPLETED_RESULT_TYPE) {
+                const accountInfo = new CustomAuthAccountData(submitPasswordResult.authenticationResult.account, this.stateParameters.config, this.stateParameters.cacheClient, this.stateParameters.logger, this.stateParameters.correlationId);
+                return new SignInSubmitPasswordResult(new SignInCompletedState(), accountInfo);
+            }
+            else if (submitPasswordResult.type === SIGN_IN_JIT_REQUIRED_RESULT_TYPE) {
+                // JIT is required - return AuthMethodRegistrationRequiredState
+                this.stateParameters.logger.verbose("Authentication method registration required after password submission.", this.stateParameters.correlationId);
+                return new SignInSubmitPasswordResult(new AuthMethodRegistrationRequiredState({
+                    correlationId: this.stateParameters.correlationId,
+                    continuationToken: submitPasswordResult.continuationToken,
+                    logger: this.stateParameters.logger,
+                    config: this.stateParameters.config,
+                    jitClient: this.stateParameters.jitClient,
+                    cacheClient: this.stateParameters.cacheClient,
+                    authMethods: submitPasswordResult.authMethods,
+                    username: this.stateParameters.username,
+                    scopes: this.stateParameters.scopes ?? [],
+                    claims: this.stateParameters.claims,
+                }));
+            }
+            else {
+                // Unexpected result type
+                const result = submitPasswordResult;
+                const error = new Error(`Unexpected result type: ${result.type}`);
+                return SignInSubmitPasswordResult.createWithError(error);
+            }
         }
         catch (error) {
             this.stateParameters.logger.errorPii(`Failed to sign in after submitting password. Error: ${error}.`, this.stateParameters.correlationId);
@@ -8577,6 +8981,13 @@ class SignInResult extends AuthFlowResultBase {
     isCompleted() {
         return this.state instanceof SignInCompletedState;
     }
+    /**
+     * Checks if the result requires authentication method registration.
+     * @warning This API is experimental. It may be changed in the future without notice. Do not use in production applications.
+     */
+    isAuthMethodRegistrationRequired() {
+        return this.state instanceof AuthMethodRegistrationRequiredState;
+    }
 }
 /*
@@ -8726,10 +9137,37 @@ class SignInContinuationState extends SignInState {
                 claims: signInWithContinuationTokenInputs?.claims,
             };
             this.stateParameters.logger.verbose("Signing in with continuation token.", this.stateParameters.correlationId);
-            const completedResult = await this.stateParameters.signInClient.signInWithContinuationToken(continuationTokenParams);
+            const signInResult = await this.stateParameters.signInClient.signInWithContinuationToken(continuationTokenParams);
             this.stateParameters.logger.verbose("Signed in with continuation token.", this.stateParameters.correlationId);
-            const accountInfo = new CustomAuthAccountData(completedResult.authenticationResult.account, this.stateParameters.config, this.stateParameters.cacheClient, this.stateParameters.logger, this.stateParameters.correlationId);
-            return new SignInResult(new SignInCompletedState(), accountInfo);
+            if (signInResult.type === SIGN_IN_COMPLETED_RESULT_TYPE) {
+                // Sign-in completed successfully
+                const accountInfo = new CustomAuthAccountData(signInResult.authenticationResult.account, this.stateParameters.config, this.stateParameters.cacheClient, this.stateParameters.logger, this.stateParameters.correlationId);
+                return new SignInResult(new SignInCompletedState(), accountInfo);
+            }
+            else if (signInResult.type === SIGN_IN_JIT_REQUIRED_RESULT_TYPE) {
+                // JIT is required
+                this.stateParameters.logger.warning("Auth method registration required during continuation token sign-in.", this.stateParameters.correlationId);
+                // Return AuthMethodRegistrationRequiredState to handle JIT scenario
+                const authMethodRegistrationState = new AuthMethodRegistrationRequiredState({
+                    correlationId: this.stateParameters.correlationId,
+                    continuationToken: signInResult.continuationToken,
+                    logger: this.stateParameters.logger,
+                    config: this.stateParameters.config,
+                    jitClient: this.stateParameters.jitClient,
+                    cacheClient: this.stateParameters.cacheClient,
+                    authMethods: signInResult.authMethods,
+                    username: this.stateParameters.username,
+                    scopes: signInWithContinuationTokenInputs?.scopes ?? [],
+                    claims: this.stateParameters.claims,
+                });
+                return new SignInResult(authMethodRegistrationState);
+            }
+            else {
+                // Unexpected result type
+                const result = signInResult;
+                const error = new Error(`Unexpected result type: ${result.type}`);
+                return SignInResult.createWithError(error);
+            }
         }
         catch (error) {
             this.stateParameters.logger.errorPii(`Failed to sign in with continuation token. Error: ${error}.`, this.stateParameters.correlationId);
@@ -8867,6 +9305,7 @@ class SignUpAttributesRequiredState extends SignUpState {
                     config: this.stateParameters.config,
                     signInClient: this.stateParameters.signInClient,
                     cacheClient: this.stateParameters.cacheClient,
+                    jitClient: this.stateParameters.jitClient,
                     username: this.stateParameters.username,
                     signInScenario: SignInScenario.SignInAfterSignUp,
                 }));
@@ -9013,6 +9452,7 @@ class SignUpPasswordRequiredState extends SignUpState {
                     signInClient: this.stateParameters.signInClient,
                     signUpClient: this.stateParameters.signUpClient,
                     cacheClient: this.stateParameters.cacheClient,
+                    jitClient: this.stateParameters.jitClient,
                     username: this.stateParameters.username,
                     requiredAttributes: result.requiredAttributes,
                 }));
@@ -9027,6 +9467,7 @@ class SignUpPasswordRequiredState extends SignUpState {
                     config: this.stateParameters.config,
                     signInClient: this.stateParameters.signInClient,
                     cacheClient: this.stateParameters.cacheClient,
+                    jitClient: this.stateParameters.jitClient,
                     username: this.stateParameters.username,
                     signInScenario: SignInScenario.SignInAfterSignUp,
                 }));
@@ -9128,6 +9569,7 @@ class SignUpCodeRequiredState extends SignUpState {
                     signInClient: this.stateParameters.signInClient,
                     signUpClient: this.stateParameters.signUpClient,
                     cacheClient: this.stateParameters.cacheClient,
+                    jitClient: this.stateParameters.jitClient,
                     username: this.stateParameters.username,
                 }));
             }
@@ -9142,6 +9584,7 @@ class SignUpCodeRequiredState extends SignUpState {
                     signInClient: this.stateParameters.signInClient,
                     signUpClient: this.stateParameters.signUpClient,
                     cacheClient: this.stateParameters.cacheClient,
+                    jitClient: this.stateParameters.jitClient,
                     username: this.stateParameters.username,
                     requiredAttributes: result.requiredAttributes,
                 }));
@@ -9156,6 +9599,7 @@ class SignUpCodeRequiredState extends SignUpState {
                     config: this.stateParameters.config,
                     signInClient: this.stateParameters.signInClient,
                     cacheClient: this.stateParameters.cacheClient,
+                    jitClient: this.stateParameters.jitClient,
                     username: this.stateParameters.username,
                     signInScenario: SignInScenario.SignInAfterSignUp,
                 }));
@@ -9190,6 +9634,7 @@ class SignUpCodeRequiredState extends SignUpState {
                 signInClient: this.stateParameters.signInClient,
                 signUpClient: this.stateParameters.signUpClient,
                 cacheClient: this.stateParameters.cacheClient,
+                jitClient: this.stateParameters.jitClient,
                 username: this.stateParameters.username,
                 codeLength: result.codeLength,
                 codeResendInterval: result.interval,
@@ -10564,6 +11009,7 @@ class CustomAuthInteractionClientBase extends StandardInteractionClient {
         super(config, storageImpl, browserCrypto, logger, eventHandler, navigationClient, performanceClient);
         this.customAuthApiClient = customAuthApiClient;
         this.customAuthAuthority = customAuthAuthority;
+        this.tokenResponseHandler = new ResponseHandler(this.config.auth.clientId, this.browserStorage, this.browserCrypto, this.logger, null, null);
     }
     getChallengeTypes(configuredChallengeTypes) {
         const challengeType = configuredChallengeTypes ?? [];
@@ -10582,6 +11028,24 @@ class CustomAuthInteractionClientBase extends StandardInteractionClient {
             Constants.OFFLINE_ACCESS_SCOPE,
         ];
     }
+    /**
+     * Common method to handle token response processing.
+     * @param tokenResponse The token response from the API
+     * @param requestScopes Scopes for the token request
+     * @param correlationId Correlation ID for logging
+     * @returns Authentication result from the token response
+     */
+    async handleTokenResponse(tokenResponse, requestScopes, correlationId) {
+        this.logger.verbose("Processing token response.", correlationId);
+        const requestTimestamp = Math.round(new Date().getTime() / 1000.0);
+        // Save tokens and create authentication result
+        const result = await this.tokenResponseHandler.handleServerTokenResponse(tokenResponse, this.customAuthAuthority, requestTimestamp, {
+            authority: this.customAuthAuthority.canonicalAuthority,
+            correlationId: tokenResponse.correlation_id ?? correlationId,
+            scopes: requestScopes,
+        });
+        return result;
+    }
     // It is not necessary to implement this method from base class.
     acquireToken(
     // eslint-disable-next-line @typescript-eslint/no-unused-vars
@@ -10596,32 +11060,6 @@ class CustomAuthInteractionClientBase extends StandardInteractionClient {
     }
 }
-/*
- * Copyright (c) Microsoft Corporation. All rights reserved.
- * Licensed under the MIT License.
- */
-const SIGN_IN_CODE_SEND_RESULT_TYPE = "SignInCodeSendResult";
-const SIGN_IN_PASSWORD_REQUIRED_RESULT_TYPE = "SignInPasswordRequiredResult";
-const SIGN_IN_COMPLETED_RESULT_TYPE = "SignInCompletedResult";
-function createSignInCompleteResult(input) {
-    return {
-        type: SIGN_IN_COMPLETED_RESULT_TYPE,
-        ...input,
-    };
-}
-function createSignInPasswordRequiredResult(input) {
-    return {
-        type: SIGN_IN_PASSWORD_REQUIRED_RESULT_TYPE,
-        ...input,
-    };
-}
-function createSignInCodeSendResult(input) {
-    return {
-        type: SIGN_IN_CODE_SEND_RESULT_TYPE,
-        ...input,
-    };
-}
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -10650,17 +11088,16 @@ const PASSWORD_RESET_START = 100041;
 const PASSWORD_RESET_SUBMIT_CODE = 100042;
 const PASSWORD_RESET_SUBMIT_PASSWORD = 100043;
 const PASSWORD_RESET_RESEND_CODE = 100044;
-const ACCOUNT_GET_ACCESS_TOKEN = 100063;
+const ACCOUNT_GET_ACCESS_TOKEN = 100063;
+// JIT (Just-In-Time) Auth Method Registration
+const JIT_CHALLENGE_AUTH_METHOD = 100081;
+const JIT_SUBMIT_CHALLENGE = 100082;
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
  */
 class SignInClient extends CustomAuthInteractionClientBase {
-    constructor(config, storageImpl, browserCrypto, logger, eventHandler, navigationClient, performanceClient, customAuthApiClient, customAuthAuthority) {
-        super(config, storageImpl, browserCrypto, logger, eventHandler, navigationClient, performanceClient, customAuthApiClient, customAuthAuthority);
-        this.tokenResponseHandler = new ResponseHandler(this.config.auth.clientId, this.browserStorage, this.browserCrypto, this.logger, null, null);
-    }
     /**
      * Starts the signin flow.
      * @param parameters The parameters required to start the sign-in flow.
@@ -10722,6 +11159,7 @@ class SignInClient extends CustomAuthInteractionClientBase {
         const request = {
             continuation_token: parameters.continuationToken,
             oob: parameters.code,
+            grant_type: GrantType.OOB,
             scope: scopes.join(" "),
             correlationId: parameters.correlationId,
             telemetryManager: telemetryManager,
@@ -10729,7 +11167,7 @@ class SignInClient extends CustomAuthInteractionClientBase {
                 claims: parameters.claims,
             }),
         };
-        return this.performTokenRequest(() => this.customAuthApiClient.signInApi.requestTokensWithOob(request), scopes);
+        return this.performTokenRequest(() => this.customAuthApiClient.signInApi.requestTokensWithOob(request), scopes, parameters.correlationId, telemetryManager);
     }
     /**
      * Submits the password for sign-in flow.
@@ -10751,7 +11189,7 @@ class SignInClient extends CustomAuthInteractionClientBase {
                 claims: parameters.claims,
             }),
         };
-        return this.performTokenRequest(() => this.customAuthApiClient.signInApi.requestTokensWithPassword(request), scopes);
+        return this.performTokenRequest(() => this.customAuthApiClient.signInApi.requestTokensWithPassword(request), scopes, parameters.correlationId, telemetryManager);
     }
     /**
      * Signs in with continuation token.
@@ -10774,28 +11212,39 @@ class SignInClient extends CustomAuthInteractionClientBase {
             }),
         };
         // Call token endpoint.
-        return this.performTokenRequest(() => this.customAuthApiClient.signInApi.requestTokenWithContinuationToken(request), scopes);
+        return this.performTokenRequest(() => this.customAuthApiClient.signInApi.requestTokenWithContinuationToken(request), scopes, parameters.correlationId, telemetryManager);
     }
-    async performTokenRequest(tokenEndpointCaller, requestScopes) {
-        this.logger.verbose("Calling token endpoint for sign in.", this.correlationId);
-        const requestTimestamp = Math.round(new Date().getTime() / 1000.0);
-        const tokenResponse = await tokenEndpointCaller();
-        this.logger.verbose("Token endpoint called for sign in.", this.correlationId);
-        // Save tokens and create authentication result.
-        const result = await this.tokenResponseHandler.handleServerTokenResponse(tokenResponse, this.customAuthAuthority, requestTimestamp, {
-            authority: this.customAuthAuthority.canonicalAuthority,
-            correlationId: tokenResponse.correlation_id ?? "",
-            scopes: requestScopes,
-            storeInCache: {
-                idToken: true,
-                accessToken: true,
-                refreshToken: true,
-            },
-        });
-        return createSignInCompleteResult({
-            correlationId: tokenResponse.correlation_id ?? "",
-            authenticationResult: result,
-        });
+    /**
+     * Common method to handle token endpoint calls and create sign-in results.
+     * @param tokenEndpointCaller Function that calls the specific token endpoint
+     * @param scopes Scopes for the token request
+     * @param correlationId Correlation ID for logging and result
+     * @param telemetryManager Telemetry manager for telemetry logging
+     * @returns SignInCompletedResult | SignInJitRequiredResult | SignInMfaRequiredResult with authentication result
+     */
+    async performTokenRequest(tokenEndpointCaller, scopes, correlationId, telemetryManager) {
+        this.logger.verbose("Calling token endpoint for sign in.", correlationId);
+        try {
+            const tokenResponse = await tokenEndpointCaller();
+            this.logger.verbose("Token endpoint response received for sign in.", correlationId);
+            const authResult = await this.handleTokenResponse(tokenResponse, scopes, correlationId);
+            return createSignInCompleteResult({
+                correlationId: tokenResponse.correlation_id ?? correlationId,
+                authenticationResult: authResult,
+            });
+        }
+        catch (error) {
+            if (error instanceof CustomAuthApiError &&
+                error.subError === REGISTRATION_REQUIRED) {
+                return this.handleJitRequiredError(error, telemetryManager, correlationId);
+            }
+            else if (error instanceof CustomAuthApiError &&
+                error.subError === MFA_REQUIRED) {
+                return this.handleMfaRequiredError(error, telemetryManager, correlationId);
+            }
+            // Re-throw any other errors or JIT errors when handleJit is false
+            throw error;
+        }
     }
     async performChallengeRequest(request) {
         this.logger.verbose("Calling challenge endpoint for sign in.", request.correlationId);
@@ -10835,6 +11284,40 @@ class SignInClient extends CustomAuthInteractionClientBase {
                 throw new UnexpectedError(`Unsupported sign-in scenario '${scenario}'.`, correlationId);
         }
     }
+    async handleJitRequiredError(error, telemetryManager, correlationId) {
+        this.logger.verbose("Auth method registration required for sign in.", correlationId);
+        // Call register introspect endpoint to get available authentication methods
+        const introspectRequest = {
+            continuation_token: error.continuationToken ?? "",
+            correlationId: error.correlationId ?? correlationId,
+            telemetryManager,
+        };
+        this.logger.verbose("Calling introspect endpoint for getting auth methods.", correlationId);
+        const introspectResponse = await this.customAuthApiClient.registerApi.introspect(introspectRequest);
+        this.logger.verbose("Introspect endpoint called for getting auth methods.", introspectResponse.correlation_id ?? correlationId);
+        return createSignInJitRequiredResult({
+            correlationId: introspectResponse.correlation_id ?? correlationId,
+            continuationToken: introspectResponse.continuation_token ?? "",
+            authMethods: introspectResponse.methods,
+        });
+    }
+    async handleMfaRequiredError(error, telemetryManager, correlationId) {
+        this.logger.verbose("MFA required for sign in.", correlationId);
+        // Call sign-in introspect endpoint to get available MFA methods
+        const introspectRequest = {
+            continuation_token: error.continuationToken ?? "",
+            correlationId: error.correlationId ?? correlationId,
+            telemetryManager,
+        };
+        this.logger.verbose("Calling introspect endpoint for MFA auth methods.", correlationId);
+        const introspectResponse = await this.customAuthApiClient.signInApi.requestAuthMethods(introspectRequest);
+        this.logger.verbose("Introspect endpoint called for MFA auth methods.", introspectResponse.correlation_id ?? correlationId);
+        return createSignInMfaRequiredResult({
+            correlationId: introspectResponse.correlation_id ?? correlationId,
+            continuationToken: introspectResponse.continuation_token ?? "",
+            authMethods: introspectResponse.methods,
+        });
+    }
 }
 /*
@@ -11046,6 +11529,7 @@ class ResetPasswordPasswordRequiredState extends ResetPasswordState {
                 username: this.stateParameters.username,
                 signInClient: this.stateParameters.signInClient,
                 cacheClient: this.stateParameters.cacheClient,
+                jitClient: this.stateParameters.jitClient,
                 signInScenario: SignInScenario.SignInAfterPasswordReset,
             }));
         }
@@ -11130,6 +11614,7 @@ class ResetPasswordCodeRequiredState extends ResetPasswordState {
                 resetPasswordClient: this.stateParameters.resetPasswordClient,
                 signInClient: this.stateParameters.signInClient,
                 cacheClient: this.stateParameters.cacheClient,
+                jitClient: this.stateParameters.jitClient,
                 username: this.stateParameters.username,
             }));
         }
@@ -11162,6 +11647,7 @@ class ResetPasswordCodeRequiredState extends ResetPasswordState {
                 resetPasswordClient: this.stateParameters.resetPasswordClient,
                 signInClient: this.stateParameters.signInClient,
                 cacheClient: this.stateParameters.cacheClient,
+                jitClient: this.stateParameters.jitClient,
                 username: this.stateParameters.username,
                 codeLength: result.codeLength,
             }));
@@ -11226,6 +11712,7 @@ class ResetPasswordStartResult extends AuthFlowResultBase {
 const SIGNIN_INITIATE = "/oauth2/v2.0/initiate";
 const SIGNIN_CHALLENGE = "/oauth2/v2.0/challenge";
 const SIGNIN_TOKEN = "/oauth2/v2.0/token";
+const SIGNIN_INTROSPECT = "/oauth2/v2.0/introspect";
 const SIGNUP_START = "/signup/v1.0/start";
 const SIGNUP_CHALLENGE = "/signup/v1.0/challenge";
 const SIGNUP_CONTINUE = "/signup/v1.0/continue";
@@ -11233,7 +11720,10 @@ const RESET_PWD_START = "/resetpassword/v1.0/start";
 const RESET_PWD_CHALLENGE = "/resetpassword/v1.0/challenge";
 const RESET_PWD_CONTINUE = "/resetpassword/v1.0/continue";
 const RESET_PWD_SUBMIT = "/resetpassword/v1.0/submit";
-const RESET_PWD_POLL = "/resetpassword/v1.0/poll_completion";
+const RESET_PWD_POLL = "/resetpassword/v1.0/poll_completion";
+const REGISTER_INTROSPECT = "/register/v1.0/introspect";
+const REGISTER_CHALLENGE = "/register/v1.0/challenge";
+const REGISTER_CONTINUE = "/register/v1.0/continue";
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -11869,6 +12359,7 @@ class SignInApiClient extends BaseApiClient {
         const result = await this.request(SIGNIN_CHALLENGE, {
             continuation_token: params.continuation_token,
             challenge_type: params.challenge_type,
+            ...(params.id && { id: params.id }),
         }, params.telemetryManager, params.correlationId);
         this.ensureContinuationTokenIsValid(result.continuation_token, params.correlationId);
         return result;
@@ -11893,19 +12384,30 @@ class SignInApiClient extends BaseApiClient {
             continuation_token: params.continuation_token,
             scope: params.scope,
             oob: params.oob,
-            grant_type: GrantType.OOB,
+            grant_type: params.grant_type,
             ...(params.claims && { claims: params.claims }),
         }, params.telemetryManager, params.correlationId);
     }
     async requestTokenWithContinuationToken(params) {
         return this.requestTokens({
             continuation_token: params.continuation_token,
-            username: params.username,
             scope: params.scope,
             grant_type: GrantType.CONTINUATION_TOKEN,
             client_info: true,
             ...(params.claims && { claims: params.claims }),
+            ...(params.username && { username: params.username }),
+        }, params.telemetryManager, params.correlationId);
+    }
+    /**
+     * Requests available authentication methods for MFA
+     * @param continuationToken Token from previous response
+     */
+    async requestAuthMethods(params) {
+        const result = await this.request(SIGNIN_INTROSPECT, {
+            continuation_token: params.continuation_token,
         }, params.telemetryManager, params.correlationId);
+        this.ensureContinuationTokenIsValid(result.continuation_token, params.correlationId);
+        return result;
     }
     async requestTokens(requestData, telemetryManager, correlationId) {
         // The client_info parameter is required for MSAL to return the uid and utid in the response.
@@ -11948,6 +12450,50 @@ class SignInApiClient extends BaseApiClient {
     }
 }
+/*
+ * Copyright (c) Microsoft Corporation. All rights reserved.
+ * Licensed under the MIT License.
+ */
+class RegisterApiClient extends BaseApiClient {
+    /**
+     * Gets available authentication methods for registration
+     */
+    async introspect(params) {
+        const result = await this.request(REGISTER_INTROSPECT, {
+            continuation_token: params.continuation_token,
+        }, params.telemetryManager, params.correlationId);
+        this.ensureContinuationTokenIsValid(result.continuation_token, params.correlationId);
+        return result;
+    }
+    /**
+     * Sends challenge to specified authentication method
+     */
+    async challenge(params) {
+        const result = await this.request(REGISTER_CHALLENGE, {
+            continuation_token: params.continuation_token,
+            challenge_type: params.challenge_type,
+            challenge_target: params.challenge_target,
+            ...(params.challenge_channel && {
+                challenge_channel: params.challenge_channel,
+            }),
+        }, params.telemetryManager, params.correlationId);
+        this.ensureContinuationTokenIsValid(result.continuation_token, params.correlationId);
+        return result;
+    }
+    /**
+     * Submits challenge response and continues registration
+     */
+    async continue(params) {
+        const result = await this.request(REGISTER_CONTINUE, {
+            continuation_token: params.continuation_token,
+            grant_type: params.grant_type,
+            ...(params.oob && { oob: params.oob }),
+        }, params.telemetryManager, params.correlationId);
+        this.ensureContinuationTokenIsValid(result.continuation_token, params.correlationId);
+        return result;
+    }
+}
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -11957,6 +12503,7 @@ class CustomAuthApiClient {
         this.signInApi = new SignInApiClient(customAuthApiBaseUrl, clientId, httpClient, capabilities, customAuthApiQueryParams);
         this.signUpApi = new SignupApiClient(customAuthApiBaseUrl, clientId, httpClient, capabilities, customAuthApiQueryParams);
         this.resetPasswordApi = new ResetPasswordApiClient(customAuthApiBaseUrl, clientId, httpClient, capabilities, customAuthApiQueryParams);
+        this.registerApi = new RegisterApiClient(customAuthApiBaseUrl, clientId, httpClient);
     }
 }
@@ -12178,6 +12725,102 @@ class ResetPasswordClient extends CustomAuthInteractionClientBase {
     }
 }
+/*
+ * Copyright (c) Microsoft Corporation. All rights reserved.
+ * Licensed under the MIT License.
+ */
+/**
+ * JIT client for handling just-in-time authentication method registration flows.
+ */
+class JitClient extends CustomAuthInteractionClientBase {
+    /**
+     * Challenges an authentication method for JIT registration.
+     * @param parameters The parameters for challenging the auth method.
+     * @returns Promise that resolves to either JitVerificationRequiredResult or JitCompletedResult.
+     */
+    async challengeAuthMethod(parameters) {
+        const apiId = JIT_CHALLENGE_AUTH_METHOD;
+        const telemetryManager = this.initializeServerTelemetryManager(apiId);
+        this.logger.verbose("Calling challenge endpoint for getting auth method.", parameters.correlationId);
+        const challengeReq = {
+            continuation_token: parameters.continuationToken,
+            challenge_type: parameters.authMethod.challenge_type,
+            challenge_target: parameters.verificationContact,
+            challenge_channel: parameters.authMethod.challenge_channel,
+            correlationId: parameters.correlationId,
+            telemetryManager: telemetryManager,
+        };
+        const challengeResponse = await this.customAuthApiClient.registerApi.challenge(challengeReq);
+        this.logger.verbose("Challenge endpoint called for auth method registration.", parameters.correlationId);
+        /*
+         * Handle fast-pass scenario (preverified)
+         * This occurs when the user selects the same email used during sign-up
+         * Since the email was already verified during sign-up, no additional verification is needed
+         */
+        if (challengeResponse.challenge_type === ChallengeType.PREVERIFIED) {
+            this.logger.verbose("Fast-pass scenario detected - completing registration without additional verification.", challengeResponse.correlation_id);
+            // Use submitChallenge for fast-pass scenario with continuation_token grant type
+            const fastPassParams = {
+                correlationId: challengeResponse.correlation_id,
+                continuationToken: challengeResponse.continuation_token,
+                grantType: GrantType.CONTINUATION_TOKEN,
+                scopes: parameters.scopes,
+                username: parameters.username,
+                claims: parameters.claims,
+            };
+            const completedResult = await this.submitChallenge(fastPassParams);
+            return completedResult;
+        }
+        // Verification required
+        return createJitVerificationRequiredResult({
+            correlationId: challengeResponse.correlation_id,
+            continuationToken: challengeResponse.continuation_token,
+            challengeChannel: challengeResponse.challenge_channel,
+            challengeTargetLabel: challengeResponse.challenge_target,
+            codeLength: challengeResponse.code_length || DefaultCustomAuthApiCodeLength,
+        });
+    }
+    /**
+     * Submits challenge response and completes JIT registration.
+     * @param parameters The parameters for submitting the challenge.
+     * @returns Promise that resolves to JitCompletedResult.
+     */
+    async submitChallenge(parameters) {
+        const apiId = JIT_SUBMIT_CHALLENGE;
+        const telemetryManager = this.initializeServerTelemetryManager(apiId);
+        this.logger.verbose("Calling continue endpoint for auth method challenge submission.", parameters.correlationId);
+        // Submit challenge to complete registration
+        const continueReq = {
+            continuation_token: parameters.continuationToken,
+            grant_type: parameters.grantType,
+            ...(parameters.challenge && {
+                oob: parameters.challenge,
+            }),
+            correlationId: parameters.correlationId,
+            telemetryManager: telemetryManager,
+        };
+        const continueResponse = await this.customAuthApiClient.registerApi.continue(continueReq);
+        this.logger.verbose("Continue endpoint called for auth method challenge submission.", parameters.correlationId);
+        // Use continuation token to get authentication tokens
+        const scopes = this.getScopes(parameters.scopes);
+        const tokenRequest = {
+            continuation_token: continueResponse.continuation_token,
+            scope: scopes.join(" "),
+            correlationId: continueResponse.correlation_id,
+            telemetryManager: telemetryManager,
+            ...(parameters.claims && {
+                claims: parameters.claims,
+            }),
+        };
+        const tokenResponse = await this.customAuthApiClient.signInApi.requestTokenWithContinuationToken(tokenRequest);
+        const authResult = await this.handleTokenResponse(tokenResponse, scopes, tokenResponse.correlation_id || continueResponse.correlation_id);
+        return createJitCompletedResult({
+            correlationId: continueResponse.correlation_id,
+            authenticationResult: authResult,
+        });
+    }
+}
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -18291,25 +18934,12 @@ function collectInstanceStats(currentClientId, performanceEvent, logger) {
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
  */
-function getAccountType(account) {
-    const idTokenClaims = account?.idTokenClaims;
-    if (idTokenClaims?.tfp || idTokenClaims?.acr) {
-        return "B2C";
-    }
-    if (!idTokenClaims?.tid) {
-        return undefined;
-    }
-    else if (idTokenClaims?.tid === "9188040d-6c67-4c5b-b112-36a304b66dad") {
-        return "MSA";
-    }
-    return "AAD";
-}
-function preflightCheck(initialized, performanceEvent) {
+function preflightCheck(initialized, performanceEvent, account) {
     try {
         preflightCheck$1(initialized);
     }
     catch (e) {
-        performanceEvent.end({ success: false }, e);
+        performanceEvent.end({ success: false }, e, account);
         throw e;
     }
 }
@@ -18540,8 +19170,7 @@ class StandardController {
                 }
                 rootMeasurement.end({
                     success: true,
-                    accountType: getAccountType(result.account),
-                });
+                }, undefined, result.account);
             }
             else {
                 /*
@@ -18549,7 +19178,7 @@ class StandardController {
                  * is empty and the error code is missing.
                  */
                 if (rootMeasurement.event.errorCode) {
-                    rootMeasurement.end({ success: false });
+                    rootMeasurement.end({ success: false }, undefined);
                 }
                 else {
                     rootMeasurement.discard();
@@ -18590,7 +19219,6 @@ class StandardController {
         this.logger.verbose("acquireTokenRedirect called", correlationId);
         const atrMeasurement = this.performanceClient.startMeasurement(PerformanceEvents.AcquireTokenPreRedirect, correlationId);
         atrMeasurement.add({
-            accountType: getAccountType(request.account),
             scenarioId: request.scenarioId,
         });
         // Override on request only if set, as onRedirectNavigate field is deprecated
@@ -18604,8 +19232,7 @@ class StandardController {
                     navigateCallbackResult: navigate !== false,
                 });
                 atrMeasurement.event =
-                    atrMeasurement.end({ success: true }) ||
-                        atrMeasurement.event;
+                    atrMeasurement.end({ success: true }, undefined, request.account) || atrMeasurement.event;
                 return navigate;
             };
         }
@@ -18619,8 +19246,7 @@ class StandardController {
                     navigateCallbackResult: navigate !== false,
                 });
                 atrMeasurement.event =
-                    atrMeasurement.end({ success: true }) ||
-                        atrMeasurement.event;
+                    atrMeasurement.end({ success: true }, undefined, request.account) || atrMeasurement.event;
                 return navigate;
             };
         }
@@ -18675,10 +19301,10 @@ class StandardController {
             if (atrMeasurement.event.status === 2) {
                 this.performanceClient
                     .startMeasurement(PerformanceEvents.AcquireTokenRedirect, correlationId)
-                    .end({ success: false }, e);
+                    .end({ success: false }, e, request.account);
             }
             else {
-                atrMeasurement.end({ success: false }, e);
+                atrMeasurement.end({ success: false }, e, request.account);
             }
             if (isLoggedIn) {
                 this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_FAILURE, InteractionType.Redirect, null, e);
@@ -18703,11 +19329,10 @@ class StandardController {
         const atPopupMeasurement = this.performanceClient.startMeasurement(PerformanceEvents.AcquireTokenPopup, correlationId);
         atPopupMeasurement.add({
             scenarioId: request.scenarioId,
-            accountType: getAccountType(request.account),
         });
         try {
             this.logger.verbose("acquireTokenPopup called", correlationId);
-            preflightCheck(this.initialized, atPopupMeasurement);
+            preflightCheck(this.initialized, atPopupMeasurement, request.account);
             this.browserStorage.setInteractionInProgress(true, INTERACTION_TYPE.SIGNIN);
         }
         catch (e) {
@@ -18735,8 +19360,7 @@ class StandardController {
                 .then((response) => {
                 atPopupMeasurement.end({
                     success: true,
-                    accountType: getAccountType(response.account),
-                });
+                }, undefined, response.account);
                 return response;
             })
                 .catch((e) => {
@@ -18778,8 +19402,7 @@ class StandardController {
                 success: true,
                 accessTokenSize: result.accessToken.length,
                 idTokenSize: result.idToken.length,
-                accountType: getAccountType(result.account),
-            });
+            }, undefined, result.account);
             return result;
         })
             .catch((e) => {
@@ -18791,7 +19414,7 @@ class StandardController {
             }
             atPopupMeasurement.end({
                 success: false,
-            }, e);
+            }, e, request.account);
             // Since this function is syncronous we need to reject
             return Promise.reject(e);
         })
@@ -18841,9 +19464,8 @@ class StandardController {
         this.ssoSilentMeasurement = this.performanceClient.startMeasurement(PerformanceEvents.SsoSilent, correlationId);
         this.ssoSilentMeasurement?.add({
             scenarioId: request.scenarioId,
-            accountType: getAccountType(request.account),
         });
-        preflightCheck(this.initialized, this.ssoSilentMeasurement);
+        preflightCheck(this.initialized, this.ssoSilentMeasurement, request.account);
         this.ssoSilentMeasurement?.increment({
             visibilityChangeCount: 0,
         });
@@ -18880,15 +19502,14 @@ class StandardController {
                 success: true,
                 accessTokenSize: response.accessToken.length,
                 idTokenSize: response.idToken.length,
-                accountType: getAccountType(response.account),
-            });
+            }, undefined, response.account);
             return response;
         })
             .catch((e) => {
             this.eventHandler.emitEvent(EventType.SSO_SILENT_FAILURE, InteractionType.Silent, null, e);
             this.ssoSilentMeasurement?.end({
                 success: false,
-            }, e);
+            }, e, request.account);
             throw e;
         })
             .finally(() => {
@@ -18933,8 +19554,7 @@ class StandardController {
                             success: true,
                             accessTokenSize: result.accessToken.length,
                             idTokenSize: result.idToken.length,
-                            accountType: getAccountType(result.account),
-                        });
+                        }, undefined, result.account);
                         return result;
                     })
                         .catch((error) => {
@@ -18974,9 +19594,8 @@ class StandardController {
                         throw e;
                     });
                     atbcMeasurement.end({
-                        accountType: getAccountType(result.account),
                         success: true,
-                    });
+                    }, undefined, result.account);
                     return result;
                 }
                 else {
@@ -19500,13 +20119,12 @@ class StandardController {
             cacheLookupPolicy: request.cacheLookupPolicy,
             scenarioId: request.scenarioId,
         });
-        preflightCheck(this.initialized, atsMeasurement);
+        preflightCheck(this.initialized, atsMeasurement, request.account);
         this.logger.verbose("acquireTokenSilent called", correlationId);
         const account = request.account || this.getActiveAccount();
         if (!account) {
             throw createBrowserAuthError(noAccountError);
         }
-        atsMeasurement.add({ accountType: getAccountType(account) });
         return this.acquireTokenSilentDeduped(request, account, correlationId)
             .then((result) => {
             atsMeasurement.end({
@@ -19514,7 +20132,7 @@ class StandardController {
                 fromCache: result.fromCache,
                 accessTokenSize: result.accessToken.length,
                 idTokenSize: result.idToken.length,
-            });
+            }, undefined, result.account);
             return {
                 ...result,
                 state: request.state,
@@ -19528,7 +20146,7 @@ class StandardController {
             }
             atsMeasurement.end({
                 success: false,
-            }, error);
+            }, error, account);
             throw error;
         });
     }
@@ -19641,11 +20259,9 @@ class StandardController {
         return result
             .then((response) => {
             this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_SUCCESS, InteractionType.Silent, response);
-            if (request.correlationId) {
-                this.performanceClient.addFields({
-                    fromCache: response.fromCache,
-                }, request.correlationId);
-            }
+            this.performanceClient.addFields({
+                fromCache: response.fromCache,
+            }, request.correlationId);
             return response;
         })
             .catch((tokenRenewalError) => {
@@ -19792,6 +20408,7 @@ class CustomAuthStandardController extends StandardController {
         this.signUpClient = interactionClientFactory.create(SignUpClient);
         this.resetPasswordClient =
             interactionClientFactory.create(ResetPasswordClient);
+        this.jitClient = interactionClientFactory.create(JitClient);
         this.cacheClient = interactionClientFactory.create(CustomAuthSilentCacheClient);
     }
     /*
@@ -19850,6 +20467,7 @@ class CustomAuthStandardController extends StandardController {
                     config: this.customAuthConfig,
                     signInClient: this.signInClient,
                     cacheClient: this.cacheClient,
+                    jitClient: this.jitClient,
                     username: signInInputs.username,
                     codeLength: startResult.codeLength,
                     scopes: signInInputs.scopes ?? [],
@@ -19868,6 +20486,7 @@ class CustomAuthStandardController extends StandardController {
                         config: this.customAuthConfig,
                         signInClient: this.signInClient,
                         cacheClient: this.cacheClient,
+                        jitClient: this.jitClient,
                         username: signInInputs.username,
                         scopes: signInInputs.scopes ?? [],
                         claims: signInInputs.claims,
@@ -19885,10 +20504,35 @@ class CustomAuthStandardController extends StandardController {
                     username: signInInputs.username,
                     claims: signInInputs.claims,
                 };
-                const completedResult = await this.signInClient.submitPassword(submitPasswordParams);
+                const submitPasswordResult = await this.signInClient.submitPassword(submitPasswordParams);
                 this.logger.verbose("Sign-in flow completed.", correlationId);
-                const accountInfo = new CustomAuthAccountData(completedResult.authenticationResult.account, this.customAuthConfig, this.cacheClient, this.logger, correlationId);
-                return new SignInResult(new SignInCompletedState(), accountInfo);
+                if (submitPasswordResult.type === SIGN_IN_COMPLETED_RESULT_TYPE) {
+                    const accountInfo = new CustomAuthAccountData(submitPasswordResult.authenticationResult.account, this.customAuthConfig, this.cacheClient, this.logger, correlationId);
+                    return new SignInResult(new SignInCompletedState(), accountInfo);
+                }
+                else if (submitPasswordResult.type ===
+                    SIGN_IN_JIT_REQUIRED_RESULT_TYPE) {
+                    // Authentication method registration is required - create AuthMethodRegistrationRequiredState
+                    this.logger.verbose("Authentication method registration required for sign-in.", correlationId);
+                    return new SignInResult(new AuthMethodRegistrationRequiredState({
+                        correlationId: correlationId,
+                        continuationToken: submitPasswordResult.continuationToken,
+                        logger: this.logger,
+                        config: this.customAuthConfig,
+                        jitClient: this.jitClient,
+                        cacheClient: this.cacheClient,
+                        authMethods: submitPasswordResult.authMethods,
+                        username: signInInputs.username,
+                        scopes: signInInputs.scopes ?? [],
+                        claims: signInInputs.claims,
+                    }));
+                }
+                else {
+                    // Unexpected result type
+                    const result = submitPasswordResult;
+                    const error = new Error(`Unexpected result type: ${result.type}`);
+                    return SignInResult.createWithError(error);
+                }
             }
             this.logger.error("Unexpected sign-in result type. Returning error.", correlationId);
             throw new UnexpectedError("Unknow sign-in result type", correlationId);
@@ -19934,6 +20578,7 @@ class CustomAuthStandardController extends StandardController {
                     signInClient: this.signInClient,
                     signUpClient: this.signUpClient,
                     cacheClient: this.cacheClient,
+                    jitClient: this.jitClient,
                     username: signUpInputs.username,
                     codeLength: startResult.codeLength,
                     codeResendInterval: startResult.interval,
@@ -19950,6 +20595,7 @@ class CustomAuthStandardController extends StandardController {
                     signInClient: this.signInClient,
                     signUpClient: this.signUpClient,
                     cacheClient: this.cacheClient,
+                    jitClient: this.jitClient,
                     username: signUpInputs.username,
                 }));
             }
@@ -19988,6 +20634,7 @@ class CustomAuthStandardController extends StandardController {
                 signInClient: this.signInClient,
                 resetPasswordClient: this.resetPasswordClient,
                 cacheClient: this.cacheClient,
+                jitClient: this.jitClient,
                 username: resetPasswordInputs.username,
                 codeLength: startResult.codeLength,
             }));
@@ -20874,6 +21521,14 @@ class UserAccountAttributeError extends CustomAuthError {
 exports.AuthFlowActionRequiredStateBase = AuthFlowActionRequiredStateBase;
 exports.AuthFlowStateBase = AuthFlowStateBase;
+exports.AuthMethodRegistrationChallengeMethodError = AuthMethodRegistrationChallengeMethodError;
+exports.AuthMethodRegistrationChallengeMethodResult = AuthMethodRegistrationChallengeMethodResult;
+exports.AuthMethodRegistrationCompletedState = AuthMethodRegistrationCompletedState;
+exports.AuthMethodRegistrationFailedState = AuthMethodRegistrationFailedState;
+exports.AuthMethodRegistrationRequiredState = AuthMethodRegistrationRequiredState;
+exports.AuthMethodRegistrationSubmitChallengeError = AuthMethodRegistrationSubmitChallengeError;
+exports.AuthMethodRegistrationSubmitChallengeResult = AuthMethodRegistrationSubmitChallengeResult;
+exports.AuthMethodVerificationRequiredState = AuthMethodVerificationRequiredState;
 exports.CustomAuthAccountData = CustomAuthAccountData;
 exports.CustomAuthApiError = CustomAuthApiError;
 exports.CustomAuthError = CustomAuthError;