npm - @azure/msal-browser - Versions diffs - 4.28.1 → 4.29.0 - Mend

@azure/msal-browser 4.28.1 → 4.29.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (297) hide show

package/lib/msal-browser.cjs CHANGED Viewed

@@ -1,8 +1,8 @@
-/*! @azure/msal-browser v4.28.1 2026-01-17 */
+/*! @azure/msal-browser v4.29.0 2026-02-23 */
 'use strict';
 'use strict';
-/*! @azure/msal-common v15.14.1 2026-01-17 */
+/*! @azure/msal-common v15.15.0 2026-02-23 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -279,7 +279,7 @@ const JsonWebTokenTypes = {
 // Token renewal offset default in seconds
 const DEFAULT_TOKEN_RENEWAL_OFFSET_SEC = 300;
-/*! @azure/msal-common v15.14.1 2026-01-17 */
+/*! @azure/msal-common v15.15.0 2026-02-23 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -296,7 +296,7 @@ var AuthErrorCodes = /*#__PURE__*/Object.freeze({
     unexpectedError: unexpectedError
 });
-/*! @azure/msal-common v15.14.1 2026-01-17 */
+/*! @azure/msal-common v15.15.0 2026-02-23 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -345,7 +345,7 @@ function createAuthError(code, additionalMessage) {
         : AuthErrorMessages[code]);
 }
-/*! @azure/msal-common v15.14.1 2026-01-17 */
+/*! @azure/msal-common v15.15.0 2026-02-23 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -445,7 +445,7 @@ var ClientAuthErrorCodes = /*#__PURE__*/Object.freeze({
     userTimeoutReached: userTimeoutReached
 });
-/*! @azure/msal-common v15.14.1 2026-01-17 */
+/*! @azure/msal-common v15.15.0 2026-02-23 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -702,7 +702,7 @@ function createClientAuthError(errorCode, additionalMessage) {
     return new ClientAuthError(errorCode, additionalMessage);
 }
-/*! @azure/msal-common v15.14.1 2026-01-17 */
+/*! @azure/msal-common v15.15.0 2026-02-23 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -741,7 +741,7 @@ const DEFAULT_CRYPTO_IMPLEMENTATION = {
     },
 };
-/*! @azure/msal-common v15.14.1 2026-01-17 */
+/*! @azure/msal-common v15.15.0 2026-02-23 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -932,12 +932,12 @@ class Logger {
     }
 }
-/*! @azure/msal-common v15.14.1 2026-01-17 */
+/*! @azure/msal-common v15.15.0 2026-02-23 */
 /* eslint-disable header/header */
 const name$1 = "@azure/msal-common";
-const version$1 = "15.14.1";
+const version$1 = "15.15.0";
-/*! @azure/msal-common v15.14.1 2026-01-17 */
+/*! @azure/msal-common v15.15.0 2026-02-23 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -957,7 +957,7 @@ const AzureCloudInstance = {
     AzureUsGovernment: "https://login.microsoftonline.us",
 };
-/*! @azure/msal-common v15.14.1 2026-01-17 */
+/*! @azure/msal-common v15.15.0 2026-02-23 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -1015,7 +1015,7 @@ var ClientConfigurationErrorCodes = /*#__PURE__*/Object.freeze({
     urlParseError: urlParseError
 });
-/*! @azure/msal-common v15.14.1 2026-01-17 */
+/*! @azure/msal-common v15.15.0 2026-02-23 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1163,7 +1163,7 @@ function createClientConfigurationError(errorCode) {
     return new ClientConfigurationError(errorCode);
 }
-/*! @azure/msal-common v15.14.1 2026-01-17 */
+/*! @azure/msal-common v15.15.0 2026-02-23 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -1260,7 +1260,7 @@ class StringUtils {
     }
 }
-/*! @azure/msal-common v15.14.1 2026-01-17 */
+/*! @azure/msal-common v15.15.0 2026-02-23 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1455,7 +1455,7 @@ class ScopeSet {
     }
 }
-/*! @azure/msal-common v15.14.1 2026-01-17 */
+/*! @azure/msal-common v15.15.0 2026-02-23 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1495,7 +1495,7 @@ function buildClientInfoFromHomeAccountId(homeAccountId) {
     };
 }
-/*! @azure/msal-common v15.14.1 2026-01-17 */
+/*! @azure/msal-common v15.15.0 2026-02-23 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -1577,7 +1577,7 @@ function updateAccountTenantProfileData(baseAccountInfo, tenantProfile, idTokenC
     return updatedAccountInfo;
 }
-/*! @azure/msal-common v15.14.1 2026-01-17 */
+/*! @azure/msal-common v15.15.0 2026-02-23 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -1592,7 +1592,7 @@ const AuthorityType = {
     Ciam: 3,
 };
-/*! @azure/msal-common v15.14.1 2026-01-17 */
+/*! @azure/msal-common v15.15.0 2026-02-23 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -1614,7 +1614,7 @@ function getTenantIdFromIdTokenClaims(idTokenClaims) {
     return null;
 }
-/*! @azure/msal-common v15.14.1 2026-01-17 */
+/*! @azure/msal-common v15.15.0 2026-02-23 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -1638,7 +1638,7 @@ const ProtocolMode = {
     EAR: "EAR",
 };
-/*! @azure/msal-common v15.14.1 2026-01-17 */
+/*! @azure/msal-common v15.15.0 2026-02-23 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1873,7 +1873,7 @@ class AccountEntity {
     }
 }
-/*! @azure/msal-common v15.14.1 2026-01-17 */
+/*! @azure/msal-common v15.15.0 2026-02-23 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1954,7 +1954,7 @@ function checkMaxAge(authTime, maxAge) {
     }
 }
-/*! @azure/msal-common v15.14.1 2026-01-17 */
+/*! @azure/msal-common v15.15.0 2026-02-23 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2070,7 +2070,7 @@ function normalizeUrlForComparison(url) {
     }
 }
-/*! @azure/msal-common v15.14.1 2026-01-17 */
+/*! @azure/msal-common v15.15.0 2026-02-23 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2234,7 +2234,7 @@ class UrlString {
     }
 }
-/*! @azure/msal-common v15.14.1 2026-01-17 */
+/*! @azure/msal-common v15.15.0 2026-02-23 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2263,6 +2263,27 @@ const rawMetdataJSON = {
             authorization_endpoint: "https://login.microsoftonline.us/{tenantid}/oauth2/v2.0/authorize",
             end_session_endpoint: "https://login.microsoftonline.us/{tenantid}/oauth2/v2.0/logout",
         },
+        "login.sovcloud-identity.fr": {
+            token_endpoint: "https://login.sovcloud-identity.fr/{tenantid}/oauth2/v2.0/token",
+            jwks_uri: "https://login.sovcloud-identity.fr/{tenantid}/discovery/v2.0/keys",
+            issuer: "https://login.sovcloud-identity.fr/{tenantid}/v2.0",
+            authorization_endpoint: "https://login.sovcloud-identity.fr/{tenantid}/oauth2/v2.0/authorize",
+            end_session_endpoint: "https://login.sovcloud-identity.fr/{tenantid}/oauth2/v2.0/logout",
+        },
+        "login.sovcloud-identity.de": {
+            token_endpoint: "https://login.sovcloud-identity.de/{tenantid}/oauth2/v2.0/token",
+            jwks_uri: "https://login.sovcloud-identity.de/{tenantid}/discovery/v2.0/keys",
+            issuer: "https://login.sovcloud-identity.de/{tenantid}/v2.0",
+            authorization_endpoint: "https://login.sovcloud-identity.de/{tenantid}/oauth2/v2.0/authorize",
+            end_session_endpoint: "https://login.sovcloud-identity.de/{tenantid}/oauth2/v2.0/logout",
+        },
+        "login.sovcloud-identity.sg": {
+            token_endpoint: "https://login.sovcloud-identity.sg/common/oauth2/v2.0/token",
+            jwks_uri: "https://login.sovcloud-identity.sg/common/discovery/v2.0/keys",
+            issuer: "https://login.sovcloud-identity.sg/{tenantid}/v2.0",
+            authorization_endpoint: "https://login.sovcloud-identity.sg/common/oauth2/v2.0/authorize",
+            end_session_endpoint: "https://login.sovcloud-identity.sg/common/oauth2/v2.0/logout",
+        },
     },
     instanceDiscoveryMetadata: {
         metadata: [
@@ -2302,6 +2323,21 @@ const rawMetdataJSON = {
                 preferred_cache: "login-us.microsoftonline.com",
                 aliases: ["login-us.microsoftonline.com"],
             },
+            {
+                preferred_network: "login.sovcloud-identity.fr",
+                preferred_cache: "login.sovcloud-identity.fr",
+                aliases: ["login.sovcloud-identity.fr"],
+            },
+            {
+                preferred_network: "login.sovcloud-identity.de",
+                preferred_cache: "login.sovcloud-identity.de",
+                aliases: ["login.sovcloud-identity.de"],
+            },
+            {
+                preferred_network: "login.sovcloud-identity.sg",
+                preferred_cache: "login.sovcloud-identity.sg",
+                aliases: ["login.sovcloud-identity.sg"],
+            },
         ],
     },
 };
@@ -2373,7 +2409,7 @@ function getCloudDiscoveryMetadataFromNetworkResponse(response, authorityHost) {
     return null;
 }
-/*! @azure/msal-common v15.14.1 2026-01-17 */
+/*! @azure/msal-common v15.15.0 2026-02-23 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -2381,7 +2417,7 @@ function getCloudDiscoveryMetadataFromNetworkResponse(response, authorityHost) {
 const cacheQuotaExceeded = "cache_quota_exceeded";
 const cacheErrorUnknown = "cache_error_unknown";
-/*! @azure/msal-common v15.14.1 2026-01-17 */
+/*! @azure/msal-common v15.15.0 2026-02-23 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2426,7 +2462,7 @@ function createCacheError(e) {
     }
 }
-/*! @azure/msal-common v15.14.1 2026-01-17 */
+/*! @azure/msal-common v15.15.0 2026-02-23 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3537,7 +3573,7 @@ class DefaultStorageClass extends CacheManager {
     }
 }
-/*! @azure/msal-common v15.14.1 2026-01-17 */
+/*! @azure/msal-common v15.15.0 2026-02-23 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -3799,6 +3835,11 @@ const PerformanceEvents = {
     LoadIdToken: "loadIdToken",
     LoadAccessToken: "loadAccessToken",
     LoadRefreshToken: "loadRefreshToken",
+    /**
+     * SSO capability verification call (msal-browser).
+     * Fire-and-forget SSO verification call made after interactive authentication completes.
+     */
+    SsoCapable: "ssoCapable",
 };
 const PerformanceEventAbbreviations = new Map([
     [PerformanceEvents.AcquireTokenByCode, "ATByCode"],
@@ -4026,6 +4067,7 @@ const PerformanceEventAbbreviations = new Map([
     [PerformanceEvents.Decrypt, "decrypt"],
     [PerformanceEvents.GenerateEarKey, "genEarKey"],
     [PerformanceEvents.DecryptEarResponse, "decryptEarResp"],
+    [PerformanceEvents.SsoCapable, "SsoCapable"],
 ]);
 /**
  * State of the performance event.
@@ -4064,7 +4106,7 @@ const IntFields = new Set([
     "upgradedCacheCount",
 ]);
-/*! @azure/msal-common v15.14.1 2026-01-17 */
+/*! @azure/msal-common v15.15.0 2026-02-23 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4143,7 +4185,7 @@ class StubPerformanceClient {
     }
 }
-/*! @azure/msal-common v15.14.1 2026-01-17 */
+/*! @azure/msal-common v15.15.0 2026-02-23 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4243,7 +4285,7 @@ function isOidcProtocolMode(config) {
     return (config.authOptions.authority.options.protocolMode === ProtocolMode.OIDC);
 }
-/*! @azure/msal-common v15.14.1 2026-01-17 */
+/*! @azure/msal-common v15.15.0 2026-02-23 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -4253,7 +4295,7 @@ const CcsCredentialType = {
     UPN: "UPN",
 };
-/*! @azure/msal-common v15.14.1 2026-01-17 */
+/*! @azure/msal-common v15.15.0 2026-02-23 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -4303,7 +4345,7 @@ const INSTANCE_AWARE = "instance_aware";
 const EAR_JWK = "ear_jwk";
 const EAR_JWE_CRYPTO = "ear_jwe_crypto";
-/*! @azure/msal-common v15.14.1 2026-01-17 */
+/*! @azure/msal-common v15.15.0 2026-02-23 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4683,7 +4725,7 @@ function addPostBodyParameters(parameters, bodyParameters) {
     });
 }
-/*! @azure/msal-common v15.14.1 2026-01-17 */
+/*! @azure/msal-common v15.15.0 2026-02-23 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -4695,7 +4737,7 @@ function isOpenIdConfigResponse(response) {
         response.hasOwnProperty("jwks_uri"));
 }
-/*! @azure/msal-common v15.14.1 2026-01-17 */
+/*! @azure/msal-common v15.15.0 2026-02-23 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -4705,7 +4747,7 @@ function isCloudInstanceDiscoveryResponse(response) {
         response.hasOwnProperty("metadata"));
 }
-/*! @azure/msal-common v15.14.1 2026-01-17 */
+/*! @azure/msal-common v15.15.0 2026-02-23 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -4715,7 +4757,7 @@ function isCloudInstanceDiscoveryErrorResponse(response) {
         response.hasOwnProperty("error_description"));
 }
-/*! @azure/msal-common v15.14.1 2026-01-17 */
+/*! @azure/msal-common v15.15.0 2026-02-23 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -4811,7 +4853,7 @@ const invokeAsync = (callback, eventName, logger, telemetryClient, correlationId
     };
 };
-/*! @azure/msal-common v15.14.1 2026-01-17 */
+/*! @azure/msal-common v15.15.0 2026-02-23 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4917,7 +4959,7 @@ RegionDiscovery.IMDS_OPTIONS = {
     },
 };
-/*! @azure/msal-common v15.14.1 2026-01-17 */
+/*! @azure/msal-common v15.15.0 2026-02-23 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -4982,7 +5024,7 @@ function wasClockTurnedBack(cachedAt) {
     return cachedAtSec > nowSeconds();
 }
-/*! @azure/msal-common v15.14.1 2026-01-17 */
+/*! @azure/msal-common v15.15.0 2026-02-23 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5244,7 +5286,7 @@ function isAuthorityMetadataExpired(metadata) {
     return metadata.expiresAt <= nowSeconds();
 }
-/*! @azure/msal-common v15.14.1 2026-01-17 */
+/*! @azure/msal-common v15.15.0 2026-02-23 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6083,7 +6125,7 @@ function buildStaticAuthorityOptions(authOptions) {
     };
 }
-/*! @azure/msal-common v15.14.1 2026-01-17 */
+/*! @azure/msal-common v15.15.0 2026-02-23 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6114,7 +6156,7 @@ async function createDiscoveredInstance(authorityUri, networkClient, cacheManage
     }
 }
-/*! @azure/msal-common v15.14.1 2026-01-17 */
+/*! @azure/msal-common v15.15.0 2026-02-23 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6133,7 +6175,7 @@ class ServerError extends AuthError {
     }
 }
-/*! @azure/msal-common v15.14.1 2026-01-17 */
+/*! @azure/msal-common v15.15.0 2026-02-23 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -6154,7 +6196,7 @@ function getRequestThumbprint(clientId, request, homeAccountId) {
     };
 }
-/*! @azure/msal-common v15.14.1 2026-01-17 */
+/*! @azure/msal-common v15.15.0 2026-02-23 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6241,7 +6283,7 @@ class ThrottlingUtils {
     }
 }
-/*! @azure/msal-common v15.14.1 2026-01-17 */
+/*! @azure/msal-common v15.15.0 2026-02-23 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6272,7 +6314,7 @@ function createNetworkError(error, httpStatus, responseHeaders, additionalError)
     return new NetworkError(error, httpStatus, responseHeaders);
 }
-/*! @azure/msal-common v15.14.1 2026-01-17 */
+/*! @azure/msal-common v15.15.0 2026-02-23 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6420,27 +6462,63 @@ class BaseClient {
     }
 }
-/*! @azure/msal-common v15.14.1 2026-01-17 */
+/*! @azure/msal-common v15.15.0 2026-02-23 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
  */
-// Codes defined by MSAL
+/**
+ * MSAL-defined interaction required error code indicating no tokens are found in cache.
+ * @public
+ */
 const noTokensFound = "no_tokens_found";
+/**
+ * MSAL-defined error code indicating a native account is unavailable on the platform.
+ * @public
+ */
 const nativeAccountUnavailable = "native_account_unavailable";
+/**
+ * MSAL-defined error code indicating the refresh token has expired and user interaction is needed.
+ * @public
+ */
 const refreshTokenExpired = "refresh_token_expired";
+/**
+ * MSAL-defined error code indicating UI/UX is not allowed (e.g., blocked by policy), requiring alternate interaction.
+ * @public
+ */
 const uxNotAllowed = "ux_not_allowed";
-// Codes potentially returned by server
+/**
+ * Server-originated error code indicating interaction is required to complete the request.
+ * @public
+ */
 const interactionRequired = "interaction_required";
+/**
+ * Server-originated error code indicating user consent is required.
+ * @public
+ */
 const consentRequired = "consent_required";
+/**
+ * Server-originated error code indicating user login is required.
+ * @public
+ */
 const loginRequired = "login_required";
-const badToken = "bad_token";
+/**
+ * Server-originated error code indicating the token is invalid or corrupted.
+ * @public
+ */
+const badToken = "bad_token";
+/**
+ * Server-originated error code indicating the user was interrupted and must reattempt the flow.
+ * @public
+ */
+const interruptedUser = "interrupted_user";
 var InteractionRequiredAuthErrorCodes = /*#__PURE__*/Object.freeze({
     __proto__: null,
     badToken: badToken,
     consentRequired: consentRequired,
     interactionRequired: interactionRequired,
+    interruptedUser: interruptedUser,
     loginRequired: loginRequired,
     nativeAccountUnavailable: nativeAccountUnavailable,
     noTokensFound: noTokensFound,
@@ -6448,7 +6526,7 @@ var InteractionRequiredAuthErrorCodes = /*#__PURE__*/Object.freeze({
     uxNotAllowed: uxNotAllowed
 });
-/*! @azure/msal-common v15.14.1 2026-01-17 */
+/*! @azure/msal-common v15.15.0 2026-02-23 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6463,6 +6541,7 @@ const InteractionRequiredServerErrorMessage = [
     loginRequired,
     badToken,
     uxNotAllowed,
+    interruptedUser,
 ];
 const InteractionRequiredAuthSubErrorMessage = [
     "message_only",
@@ -6471,6 +6550,7 @@ const InteractionRequiredAuthSubErrorMessage = [
     "user_password_expired",
     "consent_required",
     "bad_token",
+    "interrupted_user",
 ];
 const InteractionRequiredAuthErrorMessages = {
     [noTokensFound]: "No refresh token found in the cache. Please sign-in.",
@@ -6478,6 +6558,7 @@ const InteractionRequiredAuthErrorMessages = {
     [refreshTokenExpired]: "Refresh token has expired.",
     [badToken]: "Identity provider returned bad_token due to an expired or invalid refresh token. Please invoke an interactive API to resolve.",
     [uxNotAllowed]: "`canShowUI` flag in Edge was set to false. User interaction required on web page. Please invoke an interactive API to resolve.",
+    [interruptedUser]: "The user could not be authenticated due to an interrupted state. Please invoke an interactive API to resolve.",
 };
 /**
  * Interaction required errors defined by the SDK
@@ -6496,6 +6577,10 @@ const InteractionRequiredAuthErrorMessage = {
         code: badToken,
         desc: InteractionRequiredAuthErrorMessages[badToken],
     },
+    interrupted_user: {
+        code: interruptedUser,
+        desc: InteractionRequiredAuthErrorMessages[interruptedUser],
+    },
 };
 /**
  * Error thrown when user interaction is required.
@@ -6538,7 +6623,7 @@ function createInteractionRequiredAuthError(errorCode) {
     return new InteractionRequiredAuthError(errorCode, InteractionRequiredAuthErrorMessages[errorCode]);
 }
-/*! @azure/msal-common v15.14.1 2026-01-17 */
+/*! @azure/msal-common v15.15.0 2026-02-23 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6610,7 +6695,7 @@ class ProtocolUtils {
     }
 }
-/*! @azure/msal-common v15.14.1 2026-01-17 */
+/*! @azure/msal-common v15.15.0 2026-02-23 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6692,7 +6777,7 @@ class PopTokenGenerator {
     }
 }
-/*! @azure/msal-common v15.14.1 2026-01-17 */
+/*! @azure/msal-common v15.15.0 2026-02-23 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -6719,7 +6804,7 @@ class PopTokenGenerator {
     }
 }
-/*! @azure/msal-common v15.14.1 2026-01-17 */
+/*! @azure/msal-common v15.15.0 2026-02-23 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7058,7 +7143,7 @@ function buildAccountToCache(cacheStorage, authority, homeAccountId, base64Decod
     return baseAccount;
 }
-/*! @azure/msal-common v15.14.1 2026-01-17 */
+/*! @azure/msal-common v15.15.0 2026-02-23 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -7076,7 +7161,7 @@ async function getClientAssertion(clientAssertion, clientId, tokenEndpoint) {
     }
 }
-/*! @azure/msal-common v15.14.1 2026-01-17 */
+/*! @azure/msal-common v15.15.0 2026-02-23 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7312,7 +7397,7 @@ class AuthorizationCodeClient extends BaseClient {
     }
 }
-/*! @azure/msal-common v15.14.1 2026-01-17 */
+/*! @azure/msal-common v15.15.0 2026-02-23 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7524,7 +7609,7 @@ class RefreshTokenClient extends BaseClient {
     }
 }
-/*! @azure/msal-common v15.14.1 2026-01-17 */
+/*! @azure/msal-common v15.15.0 2026-02-23 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7622,7 +7707,7 @@ class SilentFlowClient extends BaseClient {
     }
 }
-/*! @azure/msal-common v15.14.1 2026-01-17 */
+/*! @azure/msal-common v15.15.0 2026-02-23 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7637,7 +7722,7 @@ const StubbedNetworkModule = {
     },
 };
-/*! @azure/msal-common v15.14.1 2026-01-17 */
+/*! @azure/msal-common v15.15.0 2026-02-23 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7861,7 +7946,7 @@ function extractLoginHint(account) {
     return account.loginHint || account.idTokenClaims?.login_hint || null;
 }
-/*! @azure/msal-common v15.14.1 2026-01-17 */
+/*! @azure/msal-common v15.15.0 2026-02-23 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7919,7 +8004,7 @@ class AuthenticationHeaderParser {
     }
 }
-/*! @azure/msal-common v15.14.1 2026-01-17 */
+/*! @azure/msal-common v15.15.0 2026-02-23 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -8182,7 +8267,7 @@ class ServerTelemetryManager {
     }
 }
-/*! @azure/msal-common v15.14.1 2026-01-17 */
+/*! @azure/msal-common v15.15.0 2026-02-23 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -8190,7 +8275,7 @@ class ServerTelemetryManager {
 const missingKidError = "missing_kid_error";
 const missingAlgError = "missing_alg_error";
-/*! @azure/msal-common v15.14.1 2026-01-17 */
+/*! @azure/msal-common v15.15.0 2026-02-23 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -8215,7 +8300,7 @@ function createJoseHeaderError(code) {
     return new JoseHeaderError(code, JoseHeaderErrorMessages[code]);
 }
-/*! @azure/msal-common v15.14.1 2026-01-17 */
+/*! @azure/msal-common v15.15.0 2026-02-23 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -8255,7 +8340,7 @@ class JoseHeader {
     }
 }
-/*! @azure/msal-common v15.14.1 2026-01-17 */
+/*! @azure/msal-common v15.15.0 2026-02-23 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -10308,6 +10393,7 @@ function buildConfiguration({ auth: userInputAuth, cache: userInputCache, system
         supportsNestedAppAuth: false,
         instanceAware: false,
         encodeExtraQueryParams: false,
+        verifySSO: false,
     };
     // Default cache options for browser
     const DEFAULT_CACHE_OPTIONS = {
@@ -10396,7 +10482,7 @@ function buildConfiguration({ auth: userInputAuth, cache: userInputCache, system
 /* eslint-disable header/header */
 const name = "@azure/msal-browser";
-const version = "4.28.1";
+const version = "4.29.0";
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -14893,6 +14979,8 @@ async function getEARForm(frame, config, authority, request, logger, performance
     addCodeChallengeParams(parameters, request.codeChallenge, Constants.S256_CODE_CHALLENGE_METHOD);
     const queryParams = new Map();
     addExtraQueryParameters(queryParams, request.extraQueryParameters || {});
+    // Add correlationId to query params so gateway can propagate it to IDPs
+    addCorrelationId(queryParams, request.correlationId);
     const url = getAuthorizeUrl(authority, queryParams, config.auth.encodeExtraQueryParams, request.extraQueryParameters);
     return createForm(frame, url, parameters);
 }
@@ -14906,6 +14994,8 @@ async function getCodeForm(frame, config, authority, request, logger, performanc
     addPostBodyParameters(parameters, request.authorizePostBodyParameters || {});
     const queryParams = new Map();
     addExtraQueryParameters(queryParams, request.extraQueryParameters || {});
+    // Add correlationId to query params so gateway can propagate it to IDPs
+    addCorrelationId(queryParams, request.correlationId);
     const url = getAuthorizeUrl(authority, queryParams, config.auth.encodeExtraQueryParams, request.extraQueryParameters);
     return createForm(frame, url, parameters);
 }
@@ -16777,6 +16867,52 @@ class SilentIframeClient extends StandardInteractionClient {
             return invokeAsync(handleResponseEAR, PerformanceEvents.HandleResponseEar, this.logger, this.performanceClient, correlationId)(silentRequest, serverParams, this.apiId, this.config, discoveredAuthority, this.browserStorage, this.nativeStorage, this.eventHandler, this.logger, this.performanceClient, this.platformAuthProvider);
         }
     }
+    /**
+     * Verifies SSO capability by making an iframe request to /authorize without exchanging the code for tokens.
+     * This is useful for verifying SSO capability in the background without the overhead of a full token exchange.
+     * @param request - The SSO silent request
+     * @returns true if SSO verification was successful with a valid authorization code, false otherwise
+     */
+    async verifySso(request) {
+        this.performanceClient.addQueueMeasurement(PerformanceEvents.SilentIframeClientAcquireToken, request.correlationId);
+        const inputRequest = { ...request };
+        if (!inputRequest.prompt) {
+            inputRequest.prompt = PromptValue.NONE;
+        }
+        // Create silent request
+        const silentRequest = await invokeAsync(this.initializeAuthorizationRequest.bind(this), PerformanceEvents.StandardInteractionClientInitializeAuthorizationRequest, this.logger, this.performanceClient, request.correlationId)(inputRequest, exports.InteractionType.Silent);
+        const authClient = await invokeAsync(this.createAuthCodeClient.bind(this), PerformanceEvents.StandardInteractionClientCreateAuthCodeClient, this.logger, this.performanceClient, request.correlationId)({
+            serverTelemetryManager: this.initializeServerTelemetryManager(this.apiId),
+            requestAuthority: silentRequest.authority,
+            requestAzureCloudOptions: silentRequest.azureCloudOptions,
+            requestExtraQueryParameters: silentRequest.extraQueryParameters,
+            account: silentRequest.account,
+        });
+        const correlationId = silentRequest.correlationId;
+        const pkceCodes = await invokeAsync(generatePkceCodes, PerformanceEvents.GeneratePkceCodes, this.logger, this.performanceClient, correlationId)(this.performanceClient, this.logger, correlationId);
+        const requestWithPkce = {
+            ...silentRequest,
+            codeChallenge: pkceCodes.challenge,
+        };
+        // Create authorize request url
+        const navigateUrl = await invokeAsync(getAuthCodeRequestUrl, PerformanceEvents.GetAuthCodeUrl, this.logger, this.performanceClient, correlationId)(this.config, authClient.authority, requestWithPkce, this.logger, this.performanceClient);
+        // Get the frame handle for the silent request - this triggers the SSO verification
+        const msalFrame = await invokeAsync(initiateCodeRequest, PerformanceEvents.SilentHandlerInitiateAuthRequest, this.logger, this.performanceClient, correlationId)(navigateUrl, this.performanceClient, this.logger, correlationId, this.config.system.navigateFrameWait);
+        const responseType = this.config.auth.OIDCOptions.serverResponseType;
+        // Monitor the iframe for the response
+        const responseString = await invokeAsync(monitorIframeForHash, PerformanceEvents.SilentHandlerMonitorIframeForHash, this.logger, this.performanceClient, correlationId)(msalFrame, this.config.system.iframeHashTimeout, this.config.system.pollIntervalMilliseconds, this.performanceClient, this.logger, correlationId, responseType);
+        // Deserialize the response
+        const serverParams = invoke(deserializeResponse, PerformanceEvents.DeserializeResponse, this.logger, this.performanceClient, correlationId)(responseString, responseType, this.logger);
+        // Validate the response - this checks for errors and validates state
+        validateAuthorizationResponse(serverParams, silentRequest.state);
+        // Verify a valid authorization code is present
+        if (!serverParams.code) {
+            this.logger.warning("SSO verification response did not contain an authorization code", correlationId);
+            return false;
+        }
+        this.logger.verbose("SSO verification completed successfully with valid authorization code - skipped token exchange", correlationId);
+        return true;
+    }
     /**
      * Currently Unsupported
      */
@@ -17427,6 +17563,8 @@ class StandardController {
                 rootMeasurement.end({
                     success: true,
                 }, undefined, result.account);
+                // Fire-and-forget SSO capability verification in background
+                this.verifySsoCapability(result.account, exports.InteractionType.Redirect);
             }
             else {
                 /*
@@ -17659,6 +17797,8 @@ class StandardController {
                 accessTokenSize: result.accessToken.length,
                 idTokenSize: result.idToken.length,
             }, undefined, result.account);
+            // SSO capability verification in background
+            this.verifySsoCapability(result.account, exports.InteractionType.Popup);
             return result;
         })
             .catch((e) => {
@@ -17692,6 +17832,53 @@ class StandardController {
             visibilityChangeCount: 1,
         });
     }
+    /**
+     * SSO capability verification in the background.
+     * This method makes an iframe request to /authorize to verify SSO capability without calling /token.
+     * This method does not block the caller and tracks telemetry for success/failure.
+     * This method only executes if verifySSO is set to true in the auth configuration.
+     * @param account - The account to use for the SSO verification
+     * @param parentApi - The API ID of the parent operation for logging purposes
+     */
+    verifySsoCapability(account, parentApi) {
+        // Check if SSO capability verification is enabled
+        if (!this.config.auth.verifySSO) {
+            return;
+        }
+        const correlationId = this.browserCrypto.createNewGuid();
+        const ssoCapableMeasurement = this.performanceClient.startMeasurement(PerformanceEvents.SsoCapable, correlationId);
+        ssoCapableMeasurement.add({
+            parentApi: parentApi,
+        });
+        this.logger.verbose(`SSO capability verification initiated after ${parentApi}`, correlationId);
+        /*
+         * Use setTimeout to ensure this runs in a separate macrotask after the current call stack completes
+         * This ensures the result is returned to the caller before the SSO verification starts and doesn't affect performance
+         */
+        setTimeout(() => {
+            const ssoVerificationRequest = {
+                account: account,
+                correlationId: correlationId,
+            };
+            const silentIframeClient = this.createSilentIframeClient(correlationId);
+            silentIframeClient
+                .verifySso(ssoVerificationRequest)
+                .then((success) => {
+                this.logger.verbose(`SSO capability verification completed after ${parentApi}, success: ${success}`, correlationId);
+                ssoCapableMeasurement.end({
+                    fromCache: false,
+                    success: success,
+                }, undefined, account);
+            })
+                .catch((error) => {
+                this.logger.warning(`SSO capability verification failed after ${parentApi}: ${error.message}`, correlationId);
+                ssoCapableMeasurement.end({
+                    fromCache: false,
+                    success: false,
+                }, error, account);
+            });
+        }, 0);
+    }
     // #endregion
     // #region Silent Flow
     /**
@@ -18457,6 +18644,10 @@ class StandardController {
         const result = this.acquireTokenSilentNoIframe(silentRequest, cacheLookupPolicy).catch(async (refreshTokenError) => {
             const shouldTryToResolveSilently = checkIfRefreshTokenErrorCanBeResolvedSilently(refreshTokenError, cacheLookupPolicy);
             if (shouldTryToResolveSilently) {
+                const silentRefreshReason = `${refreshTokenError.errorCode}${refreshTokenError.subError
+                    ? `|${refreshTokenError.subError}`
+                    : ""}`;
+                this.performanceClient.addFields({ silentRefreshReason }, silentRequest.correlationId);
                 if (!this.activeIframeRequest) {
                     let _resolve;
                     // Always set the active request tracker immediately after checking it to prevent races