npm - @azure/msal-browser - Versions diffs - 5.0.2 → 5.2.0 - Mend

@azure/msal-browser 5.0.2 → 5.2.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (453) hide show

package/lib/custom-auth-path/msal-custom-auth.cjs CHANGED Viewed

@@ -1,8 +1,8 @@
-/*! @azure/msal-browser v5.0.2 2026-01-17 */
+/*! @azure/msal-browser v5.2.0 2026-02-10 */
 'use strict';
 'use strict';
-/*! @azure/msal-common v16.0.2 2026-01-17 */
+/*! @azure/msal-common v16.0.4 2026-02-10 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -229,7 +229,7 @@ const JsonWebTokenTypes = {
 // Token renewal offset default in seconds
 const DEFAULT_TOKEN_RENEWAL_OFFSET_SEC = 300;
-/*! @azure/msal-common v16.0.2 2026-01-17 */
+/*! @azure/msal-common v16.0.4 2026-02-10 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -279,7 +279,7 @@ const INSTANCE_AWARE = "instance_aware";
 const EAR_JWK = "ear_jwk";
 const EAR_JWE_CRYPTO = "ear_jwe_crypto";
-/*! @azure/msal-common v16.0.2 2026-01-17 */
+/*! @azure/msal-common v16.0.4 2026-02-10 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -310,7 +310,7 @@ function createAuthError(code, additionalMessage) {
     return new AuthError(code, additionalMessage || getDefaultErrorMessage$1(code));
 }
-/*! @azure/msal-common v16.0.2 2026-01-17 */
+/*! @azure/msal-common v16.0.4 2026-02-10 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -330,7 +330,7 @@ function createClientConfigurationError(errorCode) {
     return new ClientConfigurationError(errorCode);
 }
-/*! @azure/msal-common v16.0.2 2026-01-17 */
+/*! @azure/msal-common v16.0.4 2026-02-10 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -427,7 +427,7 @@ class StringUtils {
     }
 }
-/*! @azure/msal-common v16.0.2 2026-01-17 */
+/*! @azure/msal-common v16.0.4 2026-02-10 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -450,7 +450,7 @@ function createClientAuthError(errorCode, additionalMessage) {
     return new ClientAuthError(errorCode, additionalMessage);
 }
-/*! @azure/msal-common v16.0.2 2026-01-17 */
+/*! @azure/msal-common v16.0.4 2026-02-10 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -474,7 +474,7 @@ const cannotAllowPlatformBroker = "cannot_allow_platform_broker";
 const authorityMismatch = "authority_mismatch";
 const invalidRequestMethodForEAR = "invalid_request_method_for_EAR";
-/*! @azure/msal-common v16.0.2 2026-01-17 */
+/*! @azure/msal-common v16.0.4 2026-02-10 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -511,7 +511,7 @@ const endSessionEndpointNotSupported = "end_session_endpoint_not_supported";
 const keyIdMissing = "key_id_missing";
 const methodNotImplemented = "method_not_implemented";
-/*! @azure/msal-common v16.0.2 2026-01-17 */
+/*! @azure/msal-common v16.0.4 2026-02-10 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -706,7 +706,7 @@ class ScopeSet {
     }
 }
-/*! @azure/msal-common v16.0.2 2026-01-17 */
+/*! @azure/msal-common v16.0.4 2026-02-10 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1073,7 +1073,7 @@ function addEARParameters(parameters, jwk) {
     parameters.set(EAR_JWE_CRYPTO, jweCryptoB64Encoded);
 }
-/*! @azure/msal-common v16.0.2 2026-01-17 */
+/*! @azure/msal-common v16.0.4 2026-02-10 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1182,7 +1182,7 @@ function normalizeUrlForComparison(url) {
     }
 }
-/*! @azure/msal-common v16.0.2 2026-01-17 */
+/*! @azure/msal-common v16.0.4 2026-02-10 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1221,7 +1221,7 @@ const DEFAULT_CRYPTO_IMPLEMENTATION = {
     },
 };
-/*! @azure/msal-common v16.0.2 2026-01-17 */
+/*! @azure/msal-common v16.0.4 2026-02-10 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -1482,12 +1482,12 @@ class Logger {
     }
 }
-/*! @azure/msal-common v16.0.2 2026-01-17 */
+/*! @azure/msal-common v16.0.4 2026-02-10 */
 /* eslint-disable header/header */
 const name$1 = "@azure/msal-common";
-const version$1 = "16.0.2";
+const version$1 = "16.0.4";
-/*! @azure/msal-common v16.0.2 2026-01-17 */
+/*! @azure/msal-common v16.0.4 2026-02-10 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -1496,7 +1496,7 @@ const AzureCloudInstance = {
     // AzureCloudInstance is not specified.
     None: "none"};
-/*! @azure/msal-common v16.0.2 2026-01-17 */
+/*! @azure/msal-common v16.0.4 2026-02-10 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -1578,7 +1578,7 @@ function updateAccountTenantProfileData(baseAccountInfo, tenantProfile, idTokenC
     return updatedAccountInfo;
 }
-/*! @azure/msal-common v16.0.2 2026-01-17 */
+/*! @azure/msal-common v16.0.4 2026-02-10 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1658,7 +1658,7 @@ function checkMaxAge(authTime, maxAge) {
     }
 }
-/*! @azure/msal-common v16.0.2 2026-01-17 */
+/*! @azure/msal-common v16.0.4 2026-02-10 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1815,7 +1815,7 @@ class UrlString {
     }
 }
-/*! @azure/msal-common v16.0.2 2026-01-17 */
+/*! @azure/msal-common v16.0.4 2026-02-10 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1886,6 +1886,21 @@ const rawMetdataJSON = {
                 preferred_cache: "login-us.microsoftonline.com",
                 aliases: ["login-us.microsoftonline.com"],
             },
+            {
+                preferred_network: "login.sovcloud-identity.fr",
+                preferred_cache: "login.sovcloud-identity.fr",
+                aliases: ["login.sovcloud-identity.fr"],
+            },
+            {
+                preferred_network: "login.sovcloud-identity.de",
+                preferred_cache: "login.sovcloud-identity.de",
+                aliases: ["login.sovcloud-identity.de"],
+            },
+            {
+                preferred_network: "login.sovcloud-identity.sg",
+                preferred_cache: "login.sovcloud-identity.sg",
+                aliases: ["login.sovcloud-identity.sg"],
+            },
         ],
     },
 };
@@ -1957,7 +1972,7 @@ function getCloudDiscoveryMetadataFromNetworkResponse(response, authorityHost) {
     return null;
 }
-/*! @azure/msal-common v16.0.2 2026-01-17 */
+/*! @azure/msal-common v16.0.4 2026-02-10 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -1965,7 +1980,7 @@ function getCloudDiscoveryMetadataFromNetworkResponse(response, authorityHost) {
 const cacheQuotaExceeded = "cache_quota_exceeded";
 const cacheErrorUnknown = "cache_error_unknown";
-/*! @azure/msal-common v16.0.2 2026-01-17 */
+/*! @azure/msal-common v16.0.4 2026-02-10 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2003,7 +2018,7 @@ function createCacheError(e) {
     }
 }
-/*! @azure/msal-common v16.0.2 2026-01-17 */
+/*! @azure/msal-common v16.0.4 2026-02-10 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2041,7 +2056,7 @@ function buildClientInfoFromHomeAccountId(homeAccountId) {
     };
 }
-/*! @azure/msal-common v16.0.2 2026-01-17 */
+/*! @azure/msal-common v16.0.4 2026-02-10 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -2056,7 +2071,7 @@ const AuthorityType = {
     Ciam: 3,
 };
-/*! @azure/msal-common v16.0.2 2026-01-17 */
+/*! @azure/msal-common v16.0.4 2026-02-10 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -2078,7 +2093,7 @@ function getTenantIdFromIdTokenClaims(idTokenClaims) {
     return null;
 }
-/*! @azure/msal-common v16.0.2 2026-01-17 */
+/*! @azure/msal-common v16.0.4 2026-02-10 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -2102,11 +2117,18 @@ const ProtocolMode = {
     EAR: "EAR",
 };
-/*! @azure/msal-common v16.0.2 2026-01-17 */
+/*! @azure/msal-common v16.0.4 2026-02-10 */
 /**
  * Returns the AccountInfo interface for this account.
  */
 function getAccountInfo(accountEntity) {
+    const tenantProfiles = accountEntity.tenantProfiles || [];
+    // Ensure at least the home tenant profile exists
+    if (tenantProfiles.length === 0 &&
+        accountEntity.realm &&
+        accountEntity.localAccountId) {
+        tenantProfiles.push(buildTenantProfile(accountEntity.homeAccountId, accountEntity.localAccountId, accountEntity.realm));
+    }
     return {
         homeAccountId: accountEntity.homeAccountId,
         environment: accountEntity.environment,
@@ -2118,7 +2140,7 @@ function getAccountInfo(accountEntity) {
         nativeAccountId: accountEntity.nativeAccountId,
         authorityType: accountEntity.authorityType,
         // Deserialize tenant profiles array into a Map
-        tenantProfiles: new Map((accountEntity.tenantProfiles || []).map((tenantProfile) => {
+        tenantProfiles: new Map(tenantProfiles.map((tenantProfile) => {
             return [tenantProfile.tenantId, tenantProfile];
         })),
         dataBoundary: accountEntity.dataBoundary,
@@ -2207,6 +2229,14 @@ function createAccountEntity(accountDetails, authority, base64Decode) {
  * @returns
  */
 function createAccountEntityFromAccountInfo(accountInfo, cloudGraphHostName, msGraphHost) {
+    // Serialize tenant profiles map into an array
+    const tenantProfiles = Array.from(accountInfo.tenantProfiles?.values() || []);
+    // Ensure at least the home tenant profile exists
+    if (tenantProfiles.length === 0 &&
+        accountInfo.tenantId &&
+        accountInfo.localAccountId) {
+        tenantProfiles.push(buildTenantProfile(accountInfo.homeAccountId, accountInfo.localAccountId, accountInfo.tenantId, accountInfo.idTokenClaims));
+    }
     return {
         authorityType: accountInfo.authorityType || CACHE_ACCOUNT_TYPE_GENERIC,
         homeAccountId: accountInfo.homeAccountId,
@@ -2219,7 +2249,7 @@ function createAccountEntityFromAccountInfo(accountInfo, cloudGraphHostName, msG
         name: accountInfo.name,
         cloudGraphHostName: cloudGraphHostName,
         msGraphHost: msGraphHost,
-        tenantProfiles: Array.from(accountInfo.tenantProfiles?.values() || []),
+        tenantProfiles: tenantProfiles,
         dataBoundary: accountInfo.dataBoundary,
     };
 }
@@ -2262,7 +2292,7 @@ function isAccountEntity(entity) {
         entity.hasOwnProperty("authorityType"));
 }
-/*! @azure/msal-common v16.0.2 2026-01-17 */
+/*! @azure/msal-common v16.0.4 2026-02-10 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2428,13 +2458,13 @@ class CacheManager {
      * @param storeInCache {?StoreInCache}
      * @param correlationId {?string} correlation id
      */
-    async saveCacheRecord(cacheRecord, correlationId, kmsi, storeInCache) {
+    async saveCacheRecord(cacheRecord, correlationId, kmsi, apiId, storeInCache) {
         if (!cacheRecord) {
             throw createClientAuthError(invalidCacheRecord);
         }
         try {
             if (!!cacheRecord.account) {
-                await this.setAccount(cacheRecord.account, correlationId, kmsi);
+                await this.setAccount(cacheRecord.account, correlationId, kmsi, apiId);
             }
             if (!!cacheRecord.idToken && storeInCache?.idToken !== false) {
                 await this.setIdTokenCredential(cacheRecord.idToken, correlationId, kmsi);
@@ -3358,7 +3388,7 @@ class DefaultStorageClass extends CacheManager {
     }
 }
-/*! @azure/msal-common v16.0.2 2026-01-17 */
+/*! @azure/msal-common v16.0.4 2026-02-10 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -3372,7 +3402,7 @@ class DefaultStorageClass extends CacheManager {
 const PerformanceEventStatus = {
     InProgress: 1};
-/*! @azure/msal-common v16.0.2 2026-01-17 */
+/*! @azure/msal-common v16.0.4 2026-02-10 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3427,7 +3457,7 @@ class StubPerformanceClient {
     }
 }
-/*! @azure/msal-common v16.0.2 2026-01-17 */
+/*! @azure/msal-common v16.0.4 2026-02-10 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3521,7 +3551,7 @@ function isOidcProtocolMode(config) {
     return (config.authOptions.authority.options.protocolMode === ProtocolMode.OIDC);
 }
-/*! @azure/msal-common v16.0.2 2026-01-17 */
+/*! @azure/msal-common v16.0.4 2026-02-10 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3540,7 +3570,7 @@ class ServerError extends AuthError {
     }
 }
-/*! @azure/msal-common v16.0.2 2026-01-17 */
+/*! @azure/msal-common v16.0.4 2026-02-10 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -3556,7 +3586,7 @@ const consentRequired = "consent_required";
 const loginRequired = "login_required";
 const badToken = "bad_token";
-/*! @azure/msal-common v16.0.2 2026-01-17 */
+/*! @azure/msal-common v16.0.4 2026-02-10 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3622,7 +3652,7 @@ function createInteractionRequiredAuthError(errorCode, errorMessage) {
     return new InteractionRequiredAuthError(errorCode, errorMessage);
 }
-/*! @azure/msal-common v16.0.2 2026-01-17 */
+/*! @azure/msal-common v16.0.4 2026-02-10 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3690,7 +3720,7 @@ function parseRequestState(base64Decode, state) {
     }
 }
-/*! @azure/msal-common v16.0.2 2026-01-17 */
+/*! @azure/msal-common v16.0.4 2026-02-10 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -3755,7 +3785,7 @@ function wasClockTurnedBack(cachedAt) {
     return cachedAtSec > nowSeconds();
 }
-/*! @azure/msal-common v16.0.2 2026-01-17 */
+/*! @azure/msal-common v16.0.4 2026-02-10 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -3826,7 +3856,7 @@ const RegionDiscoveryGetCurrentVersion = "regionDiscoveryGetCurrentVersion";
 const CacheManagerGetRefreshToken = "cacheManagerGetRefreshToken";
 const SetUserData = "setUserData";
-/*! @azure/msal-common v16.0.2 2026-01-17 */
+/*! @azure/msal-common v16.0.4 2026-02-10 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -3921,7 +3951,7 @@ const invokeAsync = (callback, eventName, logger, telemetryClient, correlationId
     };
 };
-/*! @azure/msal-common v16.0.2 2026-01-17 */
+/*! @azure/msal-common v16.0.4 2026-02-10 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4001,7 +4031,7 @@ class PopTokenGenerator {
     }
 }
-/*! @azure/msal-common v16.0.2 2026-01-17 */
+/*! @azure/msal-common v16.0.4 2026-02-10 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -4028,7 +4058,7 @@ class PopTokenGenerator {
     }
 }
-/*! @azure/msal-common v16.0.2 2026-01-17 */
+/*! @azure/msal-common v16.0.4 2026-02-10 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4287,7 +4317,7 @@ function isAuthorityMetadataExpired(metadata) {
     return metadata.expiresAt <= nowSeconds();
 }
-/*! @azure/msal-common v16.0.2 2026-01-17 */
+/*! @azure/msal-common v16.0.4 2026-02-10 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4354,7 +4384,7 @@ class ResponseHandler {
      * @param serverTokenResponse
      * @param authority
      */
-    async handleServerTokenResponse(serverTokenResponse, authority, reqTimestamp, request, authCodePayload, userAssertionHash, handlingRefreshTokenResponse, forceCacheRefreshTokenResponse, serverRequestId) {
+    async handleServerTokenResponse(serverTokenResponse, authority, reqTimestamp, request, apiId, authCodePayload, userAssertionHash, handlingRefreshTokenResponse, forceCacheRefreshTokenResponse, serverRequestId) {
         // create an idToken object (not entity)
         let idTokenClaims;
         if (serverTokenResponse.id_token) {
@@ -4401,14 +4431,19 @@ class ResponseHandler {
             if (handlingRefreshTokenResponse &&
                 !forceCacheRefreshTokenResponse &&
                 cacheRecord.account) {
-                const key = this.cacheStorage.generateAccountKey(getAccountInfo(cacheRecord.account));
-                const account = this.cacheStorage.getAccount(key, request.correlationId);
-                if (!account) {
+                const cachedAccounts = this.cacheStorage.getAllAccounts({
+                    homeAccountId: cacheRecord.account.homeAccountId,
+                    environment: cacheRecord.account.environment,
+                }, request.correlationId);
+                if (cachedAccounts.length < 1) {
                     this.logger.warning("1gmt66", request.correlationId);
+                    this.performanceClient?.addFields({
+                        acntLoggedOut: true,
+                    }, request.correlationId);
                     return await ResponseHandler.generateAuthenticationResult(this.cryptoObj, authority, cacheRecord, false, request, this.performanceClient, idTokenClaims, requestStateObj, undefined, serverRequestId);
                 }
             }
-            await this.cacheStorage.saveCacheRecord(cacheRecord, request.correlationId, isKmsi(idTokenClaims || {}), request.storeInCache);
+            await this.cacheStorage.saveCacheRecord(cacheRecord, request.correlationId, isKmsi(idTokenClaims || {}), apiId, request.storeInCache);
         }
         finally {
             if (this.persistencePlugin &&
@@ -4618,7 +4653,7 @@ function buildAccountToCache(cacheStorage, authority, homeAccountId, base64Decod
     return baseAccount;
 }
-/*! @azure/msal-common v16.0.2 2026-01-17 */
+/*! @azure/msal-common v16.0.4 2026-02-10 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -4628,7 +4663,7 @@ const CcsCredentialType = {
     UPN: "UPN",
 };
-/*! @azure/msal-common v16.0.2 2026-01-17 */
+/*! @azure/msal-common v16.0.4 2026-02-10 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -4646,7 +4681,7 @@ async function getClientAssertion(clientAssertion, clientId, tokenEndpoint) {
     }
 }
-/*! @azure/msal-common v16.0.2 2026-01-17 */
+/*! @azure/msal-common v16.0.4 2026-02-10 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -4667,7 +4702,7 @@ function getRequestThumbprint(clientId, request, homeAccountId) {
     };
 }
-/*! @azure/msal-common v16.0.2 2026-01-17 */
+/*! @azure/msal-common v16.0.4 2026-02-10 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4753,7 +4788,7 @@ class ThrottlingUtils {
     }
 }
-/*! @azure/msal-common v16.0.2 2026-01-17 */
+/*! @azure/msal-common v16.0.4 2026-02-10 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4784,7 +4819,7 @@ function createNetworkError(error, httpStatus, responseHeaders, additionalError)
     return new NetworkError(error, httpStatus, responseHeaders);
 }
-/*! @azure/msal-common v16.0.2 2026-01-17 */
+/*! @azure/msal-common v16.0.4 2026-02-10 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4898,7 +4933,7 @@ async function sendPostRequest(thumbprint, tokenEndpoint, options, correlationId
     return response;
 }
-/*! @azure/msal-common v16.0.2 2026-01-17 */
+/*! @azure/msal-common v16.0.4 2026-02-10 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -4910,7 +4945,7 @@ function isOpenIdConfigResponse(response) {
         response.hasOwnProperty("jwks_uri"));
 }
-/*! @azure/msal-common v16.0.2 2026-01-17 */
+/*! @azure/msal-common v16.0.4 2026-02-10 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -4920,7 +4955,7 @@ function isCloudInstanceDiscoveryResponse(response) {
         response.hasOwnProperty("metadata"));
 }
-/*! @azure/msal-common v16.0.2 2026-01-17 */
+/*! @azure/msal-common v16.0.4 2026-02-10 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -4930,7 +4965,7 @@ function isCloudInstanceDiscoveryErrorResponse(response) {
         response.hasOwnProperty("error_description"));
 }
-/*! @azure/msal-common v16.0.2 2026-01-17 */
+/*! @azure/msal-common v16.0.4 2026-02-10 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5035,7 +5070,7 @@ RegionDiscovery.IMDS_OPTIONS = {
     },
 };
-/*! @azure/msal-common v16.0.2 2026-01-17 */
+/*! @azure/msal-common v16.0.4 2026-02-10 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5855,7 +5890,7 @@ function buildStaticAuthorityOptions(authOptions) {
     };
 }
-/*! @azure/msal-common v16.0.2 2026-01-17 */
+/*! @azure/msal-common v16.0.4 2026-02-10 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5889,7 +5924,7 @@ async function createDiscoveredInstance(authorityUri, networkClient, cacheManage
     }
 }
-/*! @azure/msal-common v16.0.2 2026-01-17 */
+/*! @azure/msal-common v16.0.4 2026-02-10 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5927,7 +5962,7 @@ class AuthorizationCodeClient {
      * authorization_code_grant
      * @param request
      */
-    async acquireToken(request, authCodePayload) {
+    async acquireToken(request, apiId, authCodePayload) {
         if (!request.code) {
             throw createClientAuthError(requestCannotBeMade);
         }
@@ -5942,7 +5977,7 @@ class AuthorizationCodeClient {
         const responseHandler = new ResponseHandler(this.config.authOptions.clientId, this.cacheManager, this.cryptoUtils, this.logger, this.performanceClient, this.config.serializableCache, this.config.persistencePlugin);
         // Validate response. This function throws a server error if an error is returned by the server.
         responseHandler.validateTokenResponse(response.body, request.correlationId);
-        return invokeAsync(responseHandler.handleServerTokenResponse.bind(responseHandler), HandleServerTokenResponse, this.logger, this.performanceClient, request.correlationId)(response.body, this.authority, reqTimestamp, request, authCodePayload, undefined, undefined, undefined, requestId);
+        return invokeAsync(responseHandler.handleServerTokenResponse.bind(responseHandler), HandleServerTokenResponse, this.logger, this.performanceClient, request.correlationId)(response.body, this.authority, reqTimestamp, request, apiId, authCodePayload, undefined, undefined, undefined, requestId);
     }
     /**
      * Used to log out the current user, and redirect the user to the postLogoutRedirectUri.
@@ -6149,7 +6184,7 @@ class AuthorizationCodeClient {
     }
 }
-/*! @azure/msal-common v16.0.2 2026-01-17 */
+/*! @azure/msal-common v16.0.4 2026-02-10 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6179,20 +6214,20 @@ class RefreshTokenClient {
         // set performance telemetry client
         this.performanceClient = performanceClient;
     }
-    async acquireToken(request) {
+    async acquireToken(request, apiId) {
         const reqTimestamp = nowSeconds();
         const response = await invokeAsync(this.executeTokenRequest.bind(this), RefreshTokenClientExecuteTokenRequest, this.logger, this.performanceClient, request.correlationId)(request, this.authority);
         // Retrieve requestId from response headers
         const requestId = response.headers?.[HeaderNames.X_MS_REQUEST_ID];
         const responseHandler = new ResponseHandler(this.config.authOptions.clientId, this.cacheManager, this.cryptoUtils, this.logger, this.performanceClient, this.config.serializableCache, this.config.persistencePlugin);
         responseHandler.validateTokenResponse(response.body, request.correlationId);
-        return invokeAsync(responseHandler.handleServerTokenResponse.bind(responseHandler), HandleServerTokenResponse, this.logger, this.performanceClient, request.correlationId)(response.body, this.authority, reqTimestamp, request, undefined, undefined, true, request.forceCache, requestId);
+        return invokeAsync(responseHandler.handleServerTokenResponse.bind(responseHandler), HandleServerTokenResponse, this.logger, this.performanceClient, request.correlationId)(response.body, this.authority, reqTimestamp, request, apiId, undefined, undefined, true, request.forceCache, requestId);
     }
     /**
      * Gets cached refresh token and attaches to request, then calls acquireToken API
      * @param request
      */
-    async acquireTokenByRefreshToken(request) {
+    async acquireTokenByRefreshToken(request, apiId) {
         // Cannot renew token if no request object is given.
         if (!request) {
             throw createClientConfigurationError(tokenRequestEmpty);
@@ -6206,7 +6241,7 @@ class RefreshTokenClient {
         // if the app is part of the family, retrive a Family refresh token if present and make a refreshTokenRequest
         if (isFOCI) {
             try {
-                return await invokeAsync(this.acquireTokenWithCachedRefreshToken.bind(this), RefreshTokenClientAcquireTokenWithCachedRefreshToken, this.logger, this.performanceClient, request.correlationId)(request, true);
+                return await invokeAsync(this.acquireTokenWithCachedRefreshToken.bind(this), RefreshTokenClientAcquireTokenWithCachedRefreshToken, this.logger, this.performanceClient, request.correlationId)(request, true, apiId);
             }
             catch (e) {
                 const noFamilyRTInCache = e instanceof InteractionRequiredAuthError &&
@@ -6217,7 +6252,7 @@ class RefreshTokenClient {
                     e.subError === CLIENT_MISMATCH_ERROR;
                 // if family Refresh Token (FRT) cache acquisition fails or if client_mismatch error is seen with FRT, reattempt with application Refresh Token (ART)
                 if (noFamilyRTInCache || clientMismatchErrorWithFamilyRT) {
-                    return invokeAsync(this.acquireTokenWithCachedRefreshToken.bind(this), RefreshTokenClientAcquireTokenWithCachedRefreshToken, this.logger, this.performanceClient, request.correlationId)(request, false);
+                    return invokeAsync(this.acquireTokenWithCachedRefreshToken.bind(this), RefreshTokenClientAcquireTokenWithCachedRefreshToken, this.logger, this.performanceClient, request.correlationId)(request, false, apiId);
                     // throw in all other cases
                 }
                 else {
@@ -6226,13 +6261,13 @@ class RefreshTokenClient {
             }
         }
         // fall back to application refresh token acquisition
-        return invokeAsync(this.acquireTokenWithCachedRefreshToken.bind(this), RefreshTokenClientAcquireTokenWithCachedRefreshToken, this.logger, this.performanceClient, request.correlationId)(request, false);
+        return invokeAsync(this.acquireTokenWithCachedRefreshToken.bind(this), RefreshTokenClientAcquireTokenWithCachedRefreshToken, this.logger, this.performanceClient, request.correlationId)(request, false, apiId);
     }
     /**
      * makes a network call to acquire tokens by exchanging RefreshToken available in userCache; throws if refresh token is not cached
      * @param request
      */
-    async acquireTokenWithCachedRefreshToken(request, foci) {
+    async acquireTokenWithCachedRefreshToken(request, foci, apiId) {
         // fetches family RT or application RT based on FOCI value
         const refreshToken = invoke(this.cacheManager.getRefreshToken.bind(this.cacheManager), CacheManagerGetRefreshToken, this.logger, this.performanceClient, request.correlationId)(request.account, foci, request.correlationId, undefined);
         if (!refreshToken) {
@@ -6261,7 +6296,7 @@ class RefreshTokenClient {
             },
         };
         try {
-            return await invokeAsync(this.acquireToken.bind(this), RefreshTokenClientAcquireToken, this.logger, this.performanceClient, request.correlationId)(refreshTokenRequest);
+            return await invokeAsync(this.acquireToken.bind(this), RefreshTokenClientAcquireToken, this.logger, this.performanceClient, request.correlationId)(refreshTokenRequest, apiId);
         }
         catch (e) {
             if (e instanceof InteractionRequiredAuthError) {
@@ -6374,7 +6409,7 @@ class RefreshTokenClient {
     }
 }
-/*! @azure/msal-common v16.0.2 2026-01-17 */
+/*! @azure/msal-common v16.0.4 2026-02-10 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6483,7 +6518,7 @@ class SilentFlowClient {
     }
 }
-/*! @azure/msal-common v16.0.2 2026-01-17 */
+/*! @azure/msal-common v16.0.4 2026-02-10 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6498,7 +6533,7 @@ const StubbedNetworkModule = {
     },
 };
-/*! @azure/msal-common v16.0.2 2026-01-17 */
+/*! @azure/msal-common v16.0.4 2026-02-10 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6722,7 +6757,7 @@ function extractLoginHint(account) {
     return account.loginHint || account.idTokenClaims?.login_hint || null;
 }
-/*! @azure/msal-common v16.0.2 2026-01-17 */
+/*! @azure/msal-common v16.0.4 2026-02-10 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -6732,7 +6767,7 @@ function extractLoginHint(account) {
  */
 const unexpectedError = "unexpected_error";
-/*! @azure/msal-common v16.0.2 2026-01-17 */
+/*! @azure/msal-common v16.0.4 2026-02-10 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6993,7 +7028,7 @@ class ServerTelemetryManager {
     }
 }
-/*! @azure/msal-common v16.0.2 2026-01-17 */
+/*! @azure/msal-common v16.0.4 2026-02-10 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7014,7 +7049,7 @@ function createJoseHeaderError(code) {
     return new JoseHeaderError(code);
 }
-/*! @azure/msal-common v16.0.2 2026-01-17 */
+/*! @azure/msal-common v16.0.4 2026-02-10 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -7022,7 +7057,7 @@ function createJoseHeaderError(code) {
 const missingKidError = "missing_kid_error";
 const missingAlgError = "missing_alg_error";
-/*! @azure/msal-common v16.0.2 2026-01-17 */
+/*! @azure/msal-common v16.0.4 2026-02-10 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7457,7 +7492,7 @@ function ensureArgumentIsJSONString(argName, argValue, correlationId) {
 /* eslint-disable header/header */
 const name = "@azure/msal-browser";
-const version = "5.0.2";
+const version = "5.2.0";
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -8162,6 +8197,7 @@ const InMemoryCacheKeys = {
  * Before adding a new code you must claim it in the MSAL Telemetry tracker as these number spaces are shared across all MSALs
  * 0-99 Silent Flow
  * 800-899 Auth Code Flow
+ * 900-999 Misc
  */
 const ApiId = {
     acquireTokenRedirect: 861,
@@ -8173,6 +8209,30 @@ const ApiId = {
     acquireTokenSilent_silentFlow: 61,
     logout: 961,
     logoutPopup: 962,
+    hydrateCache: 963,
+    loadExternalTokens: 964,
+};
+/**
+ * API Names for Telemetry purposes.
+ */
+const ApiName = {
+    861: "acquireTokenRedirect",
+    862: "acquireTokenPopup",
+    863: "ssoSilent",
+    864: "acquireTokenSilent_authCode",
+    865: "handleRedirectPromise",
+    866: "acquireTokenByCode",
+    61: "acquireTokenSilent_silentFlow",
+    961: "logout",
+    962: "logoutPopup",
+    963: "hydrateCache",
+    964: "loadExternalTokens",
+};
+const apiIdToName = (id) => {
+    if (typeof id === "number" && id in ApiName) {
+        return ApiName[id];
+    }
+    return "unknown";
 };
 /*
  * Interaction type of the API - used for state and telemetry
@@ -9453,7 +9513,7 @@ class CustomAuthInteractionClientBase extends StandardInteractionClient {
      * @param correlationId Correlation ID for logging
      * @returns Authentication result from the token response
      */
-    async handleTokenResponse(tokenResponse, requestScopes, correlationId) {
+    async handleTokenResponse(tokenResponse, requestScopes, correlationId, apiId) {
         this.logger.verbose("04a00a", correlationId);
         const requestTimestamp = Math.round(new Date().getTime() / 1000.0);
         // Save tokens and create authentication result
@@ -9461,7 +9521,7 @@ class CustomAuthInteractionClientBase extends StandardInteractionClient {
             authority: this.customAuthAuthority.canonicalAuthority,
             correlationId: tokenResponse.correlation_id ?? correlationId,
             scopes: requestScopes,
-        });
+        }, apiId);
         return result;
     }
     // It is not necessary to implement this method from base class.
@@ -9640,7 +9700,7 @@ class SignInClient extends CustomAuthInteractionClientBase {
                 claims: parameters.claims,
             }),
         };
-        return this.performTokenRequest(() => this.customAuthApiClient.signInApi.requestTokensWithOob(request), scopes, correlationId, telemetryManager);
+        return this.performTokenRequest(() => this.customAuthApiClient.signInApi.requestTokensWithOob(request), scopes, correlationId, telemetryManager, apiId);
     }
     /**
      * Submits the password for sign-in flow.
@@ -9663,7 +9723,7 @@ class SignInClient extends CustomAuthInteractionClientBase {
                 claims: parameters.claims,
             }),
         };
-        return this.performTokenRequest(() => this.customAuthApiClient.signInApi.requestTokensWithPassword(request), scopes, correlationId, telemetryManager);
+        return this.performTokenRequest(() => this.customAuthApiClient.signInApi.requestTokensWithPassword(request), scopes, correlationId, telemetryManager, apiId);
     }
     /**
      * Signs in with continuation token.
@@ -9687,7 +9747,7 @@ class SignInClient extends CustomAuthInteractionClientBase {
             }),
         };
         // Call token endpoint.
-        return this.performTokenRequest(() => this.customAuthApiClient.signInApi.requestTokenWithContinuationToken(request), scopes, correlationId, telemetryManager);
+        return this.performTokenRequest(() => this.customAuthApiClient.signInApi.requestTokenWithContinuationToken(request), scopes, correlationId, telemetryManager, apiId);
     }
     /**
      * Common method to handle token endpoint calls and create sign-in results.
@@ -9697,12 +9757,12 @@ class SignInClient extends CustomAuthInteractionClientBase {
      * @param telemetryManager Telemetry manager for telemetry logging
      * @returns SignInCompletedResult | SignInJitRequiredResult | SignInMfaRequiredResult with authentication result
      */
-    async performTokenRequest(tokenEndpointCaller, scopes, correlationId, telemetryManager) {
+    async performTokenRequest(tokenEndpointCaller, scopes, correlationId, telemetryManager, apiId) {
         this.logger.verbose("14tes8", correlationId);
         try {
             const tokenResponse = await tokenEndpointCaller();
             this.logger.verbose("11zi01", tokenResponse.correlation_id || correlationId);
-            const authResult = await this.handleTokenResponse(tokenResponse, scopes, tokenResponse.correlation_id || correlationId);
+            const authResult = await this.handleTokenResponse(tokenResponse, scopes, tokenResponse.correlation_id || correlationId, apiId);
             return createSignInCompleteResult({
                 correlationId: tokenResponse.correlation_id || correlationId,
                 authenticationResult: authResult,
@@ -11332,7 +11392,7 @@ class JitClient extends CustomAuthInteractionClientBase {
         const tokenResponse = await this.customAuthApiClient.signInApi.requestTokenWithContinuationToken(tokenRequest);
         const authResult = await this.handleTokenResponse(tokenResponse, scopes, tokenResponse.correlation_id ||
             continueResponse.correlation_id ||
-            correlationId);
+            correlationId, apiId);
         return createJitCompletedResult({
             correlationId: continueResponse.correlation_id || correlationId,
             authenticationResult: authResult,
@@ -11427,7 +11487,7 @@ class MfaClient extends CustomAuthInteractionClientBase {
         this.logger.verbose("1rkonv", correlationId);
         const tokenResponse = await this.customAuthApiClient.signInApi.requestTokensWithOob(request);
         // Save tokens and create authentication result
-        const result = await this.handleTokenResponse(tokenResponse, scopes, tokenResponse.correlation_id || correlationId);
+        const result = await this.handleTokenResponse(tokenResponse, scopes, tokenResponse.correlation_id || correlationId, apiId);
         return createMfaCompletedResult({
             correlationId: tokenResponse.correlation_id || correlationId,
             authenticationResult: result,
@@ -11478,7 +11538,7 @@ class CustomAuthSilentCacheClient extends CustomAuthInteractionClientBase {
                 this.logger.verbose("05sqvp", correlationId);
                 const refreshTokenClient = new RefreshTokenClient(clientConfig, this.performanceClient);
                 this.logger.verbose("0ogm3j", correlationId);
-                const refreshTokenResult = await refreshTokenClient.acquireTokenByRefreshToken(silentRequest);
+                const refreshTokenResult = await refreshTokenClient.acquireTokenByRefreshToken(silentRequest, ACCOUNT_GET_ACCESS_TOKEN);
                 this.logger.verbose("0vydnd", correlationId);
                 return refreshTokenResult;
             }
@@ -15073,17 +15133,22 @@ class BrowserCacheManager extends CacheManager {
             !isAccountEntity(parsedAccount)) {
             return null;
         }
-        return CacheManager.toObject({}, parsedAccount);
+        const account = CacheManager.toObject({}, parsedAccount);
+        this.performanceClient.addFields({
+            accountCachedBy: apiIdToName(account.cachedByApiId),
+        }, correlationId);
+        return account;
     }
     /**
      * set account entity in the platform cache
      * @param account
      */
-    async setAccount(account, correlationId, kmsi) {
+    async setAccount(account, correlationId, kmsi, apiId) {
         this.logger.trace("1bz3wr", correlationId);
         const key = this.generateAccountKey(getAccountInfo(account));
         const timestamp = Date.now().toString();
         account.lastUpdatedAt = timestamp;
+        account.cachedByApiId = apiId;
         await this.setUserData(key, JSON.stringify(account), correlationId, timestamp, kmsi);
         this.addAccountKeyToMap(key, correlationId);
         this.performanceClient.addFields({ kmsi: kmsi }, correlationId);
@@ -15509,7 +15574,7 @@ class BrowserCacheManager extends CacheManager {
             this.logger.verbose("1bp5z5", correlationId);
             this.browserStorage.removeItem(activeAccountKey);
         }
-        this.eventHandler.emitEvent(EventType.ACTIVE_ACCOUNT_CHANGED);
+        this.eventHandler.emitEvent(EventType.ACTIVE_ACCOUNT_CHANGED, correlationId);
     }
     /**
      * fetch throttling entity from the platform cache
@@ -15794,7 +15859,7 @@ class BrowserCacheManager extends CacheManager {
      * @param request
      */
     async hydrateCache(result, request) {
-        const idTokenEntity = createIdTokenEntity(result.account?.homeAccountId, result.account?.environment, result.idToken, this.clientId, result.tenantId);
+        const idTokenEntity = createIdTokenEntity(result.account.homeAccountId, result.account.environment, result.idToken, this.clientId, result.tenantId);
         /**
          * meta data for cache stores time in seconds from epoch
          * AuthenticationResult returns expiresOn and extExpiresOn in milliseconds (as a Date object which is in ms)
@@ -15802,7 +15867,7 @@ class BrowserCacheManager extends CacheManager {
          *
          * The next MSAL VFuture should map these both to same value if possible
          */
-        const accessTokenEntity = createAccessTokenEntity(result.account?.homeAccountId, result.account.environment, result.accessToken, this.clientId, result.tenantId, result.scopes.join(" "),
+        const accessTokenEntity = createAccessTokenEntity(result.account.homeAccountId, result.account.environment, result.accessToken, this.clientId, result.tenantId, result.scopes.join(" "),
         // Access token expiresOn stored in seconds, converting from AuthenticationResult expiresOn stored as Date
         result.expiresOn
             ? toSecondsFromDate(result.expiresOn)
@@ -15815,7 +15880,7 @@ class BrowserCacheManager extends CacheManager {
             idToken: idTokenEntity,
             accessToken: accessTokenEntity,
         };
-        return this.saveCacheRecord(cacheRecord, result.correlationId, isKmsi(extractTokenClaims(result.idToken, base64Decode)));
+        return this.saveCacheRecord(cacheRecord, result.correlationId, isKmsi(extractTokenClaims(result.idToken, base64Decode)), ApiId.hydrateCache);
     }
     /**
      * saves a cache record
@@ -15823,9 +15888,9 @@ class BrowserCacheManager extends CacheManager {
      * @param storeInCache {?StoreInCache}
      * @param correlationId {?string} correlation id
      */
-    async saveCacheRecord(cacheRecord, correlationId, kmsi, storeInCache) {
+    async saveCacheRecord(cacheRecord, correlationId, kmsi, apiId, storeInCache) {
         try {
-            await super.saveCacheRecord(cacheRecord, correlationId, kmsi, storeInCache);
+            await super.saveCacheRecord(cacheRecord, correlationId, kmsi, apiId, storeInCache);
         }
         catch (e) {
             if (e instanceof CacheError &&
@@ -15972,12 +16037,13 @@ class EventHandler {
      * @param payload
      * @param error
      */
-    emitEvent(eventType, interactionType, payload, error) {
+    emitEvent(eventType, correlationId, interactionType, payload, error) {
         const message = {
             eventType: eventType,
             interactionType: interactionType || null,
             payload: payload || null,
             error: error || null,
+            correlationId: correlationId,
             timestamp: Date.now(),
         };
         switch (eventType) {
@@ -16103,7 +16169,7 @@ class InteractionHandler {
      * Function to handle response parameters from hash.
      * @param locationHash
      */
-    async handleCodeResponse(response, request) {
+    async handleCodeResponse(response, request, apiId) {
         let authCodeResponse;
         try {
             authCodeResponse = getAuthorizationCodePayload(response, request.state);
@@ -16118,7 +16184,7 @@ class InteractionHandler {
                 throw e;
             }
         }
-        return invokeAsync(this.handleCodeResponseFromServer.bind(this), HandleCodeResponseFromServer, this.logger, this.performanceClient, request.correlationId)(authCodeResponse, request);
+        return invokeAsync(this.handleCodeResponseFromServer.bind(this), HandleCodeResponseFromServer, this.logger, this.performanceClient, request.correlationId)(authCodeResponse, request, apiId);
     }
     /**
      * Process auth code response from AAD
@@ -16127,7 +16193,7 @@ class InteractionHandler {
      * @param validateNonce
      * @returns
      */
-    async handleCodeResponseFromServer(authCodeResponse, request, validateNonce = true) {
+    async handleCodeResponseFromServer(authCodeResponse, request, apiId, validateNonce = true) {
         this.logger.trace("0mf2hb", request.correlationId);
         // Assign code to request
         this.authCodeRequest.code = authCodeResponse.code;
@@ -16148,7 +16214,7 @@ class InteractionHandler {
             }
         }
         // Acquire token with retrieved code.
-        const tokenResponse = (await invokeAsync(this.authModule.acquireToken.bind(this.authModule), AuthClientAcquireToken, this.logger, this.performanceClient, request.correlationId)(this.authCodeRequest, authCodeResponse));
+        const tokenResponse = (await invokeAsync(this.authModule.acquireToken.bind(this.authModule), AuthClientAcquireToken, this.logger, this.performanceClient, request.correlationId)(this.authCodeRequest, apiId, authCodeResponse));
         return tokenResponse;
     }
     /**
@@ -16681,7 +16747,7 @@ class PlatformAuthInteractionClient extends BaseInteractionClient {
      */
     async cacheAccount(accountEntity, kmsi) {
         // Store the account info and hence `nativeAccountId` in browser cache
-        await this.browserStorage.setAccount(accountEntity, this.correlationId, kmsi);
+        await this.browserStorage.setAccount(accountEntity, this.correlationId, kmsi, this.apiId);
         // Remove any existing cached tokens for this account in browser storage
         this.browserStorage.removeAccountContext(getAccountInfo(accountEntity), this.correlationId);
     }
@@ -16710,7 +16776,7 @@ class PlatformAuthInteractionClient extends BaseInteractionClient {
             idToken: cachedIdToken,
             accessToken: cachedAccessToken,
         };
-        return this.nativeStorageManager.saveCacheRecord(nativeCacheRecord, this.correlationId, isKmsi(idTokenClaims), request.storeInCache);
+        return this.nativeStorageManager.saveCacheRecord(nativeCacheRecord, this.correlationId, isKmsi(idTokenClaims), this.apiId, request.storeInCache);
     }
     getExpiresInValue(tokenType, expiresIn) {
         return tokenType === AuthenticationScheme.POP
@@ -16995,6 +17061,8 @@ async function getEARForm(frame, config, authority, request, logger, performance
     });
     const queryParams = new Map();
     addExtraParameters(queryParams, request.extraQueryParameters || {});
+    // Add correlationId to query params so gateway can propagate it to IDPs
+    addCorrelationId(queryParams, request.correlationId);
     const url = getAuthorizeUrl(authority, queryParams);
     return createForm(frame, url, parameters);
 }
@@ -17012,6 +17080,8 @@ async function getCodeForm(frame, config, authority, request, logger, performanc
     // Add extraQueryParameters to be appended to request URL
     const queryParams = new Map();
     addExtraParameters(queryParams, request.extraQueryParameters || {});
+    // Add correlationId to query params so gateway can propagate it to IDPs
+    addCorrelationId(queryParams, request.correlationId);
     const url = getAuthorizeUrl(authority, queryParams);
     return createForm(frame, url, parameters);
 }
@@ -17089,7 +17159,7 @@ async function handleResponseCode(request, response, codeVerifier, apiId, config
     // Create popup interaction handler.
     const interactionHandler = new InteractionHandler(authClient, browserStorage, authCodeRequest, logger, performanceClient);
     // Handle response from hash string.
-    const result = await invokeAsync(interactionHandler.handleCodeResponse.bind(interactionHandler), HandleCodeResponse, logger, performanceClient, request.correlationId)(response, request);
+    const result = await invokeAsync(interactionHandler.handleCodeResponse.bind(interactionHandler), HandleCodeResponse, logger, performanceClient, request.correlationId)(response, request, apiId);
     return result;
 }
 /**
@@ -17136,7 +17206,7 @@ async function handleResponseEAR(request, response, apiId, config, authority, br
         cloud_instance_name: decryptedData.cloud_instance_name,
         msgraph_host: decryptedData.msgraph_host,
     };
-    return (await invokeAsync(responseHandler.handleServerTokenResponse.bind(responseHandler), HandleServerTokenResponse, logger, performanceClient, request.correlationId)(decryptedData, authority, nowSeconds(), request, additionalData, undefined, undefined, undefined, undefined));
+    return (await invokeAsync(responseHandler.handleServerTokenResponse.bind(responseHandler), HandleServerTokenResponse, logger, performanceClient, request.correlationId)(decryptedData, authority, nowSeconds(), request, apiId, additionalData, undefined, undefined, undefined, undefined));
 }
 /*
@@ -18081,7 +18151,7 @@ class PopupClient extends StandardInteractionClient {
                 const navigateUrl = await invokeAsync(getAuthCodeRequestUrl, GetAuthCodeUrl, this.logger, this.performanceClient, correlationId)(this.config, authClient.authority, popupRequest, this.logger, this.performanceClient);
                 // Show the UI once the url has been created. Get the window handle for the popup.
                 const popupWindow = this.initiateAuthRequest(navigateUrl, popupParams);
-                this.eventHandler.emitEvent(EventType.POPUP_OPENED, InteractionType.Popup, { popupWindow }, null);
+                this.eventHandler.emitEvent(EventType.POPUP_OPENED, correlationId, InteractionType.Popup, { popupWindow }, null);
                 // Wait for the redirect bridge response
                 const responseString = await waitForBridgeResponse(this.config.system.popupBridgeTimeout, this.logger, this.browserCrypto, request);
                 const serverParams = invoke(deserializeResponse, DeserializeResponse, this.logger, this.performanceClient, this.correlationId)(responseString, this.config.auth.OIDCOptions.responseMode, this.logger, this.correlationId);
@@ -18158,7 +18228,7 @@ class PopupClient extends StandardInteractionClient {
      */
     async logoutPopupAsync(validRequest, popupParams, requestAuthority, mainWindowRedirectUri) {
         this.logger.verbose("0b7yrk", this.correlationId);
-        this.eventHandler.emitEvent(EventType.LOGOUT_START, InteractionType.Popup, validRequest);
+        this.eventHandler.emitEvent(EventType.LOGOUT_START, this.correlationId, InteractionType.Popup, validRequest);
         const serverTelemetryManager = initializeServerTelemetryManager(ApiId.logoutPopup, this.config.auth.clientId, this.correlationId, this.browserStorage, this.logger);
         try {
             // Clear cache on logout
@@ -18176,7 +18246,7 @@ class PopupClient extends StandardInteractionClient {
                 if (validRequest.account?.homeAccountId &&
                     validRequest.postLogoutRedirectUri &&
                     authClient.authority.protocolMode === ProtocolMode.OIDC) {
-                    this.eventHandler.emitEvent(EventType.LOGOUT_SUCCESS, InteractionType.Popup, validRequest);
+                    this.eventHandler.emitEvent(EventType.LOGOUT_SUCCESS, validRequest.correlationId, InteractionType.Popup, validRequest);
                     if (mainWindowRedirectUri) {
                         const navigationOptions = {
                             apiId: ApiId.logoutPopup,
@@ -18192,10 +18262,10 @@ class PopupClient extends StandardInteractionClient {
             }
             // Create logout string and navigate user window to logout.
             const logoutUri = authClient.getLogoutUri(validRequest);
-            this.eventHandler.emitEvent(EventType.LOGOUT_SUCCESS, InteractionType.Popup, validRequest);
+            this.eventHandler.emitEvent(EventType.LOGOUT_SUCCESS, validRequest.correlationId, InteractionType.Popup, validRequest);
             // Open the popup window to requestUrl.
             const popupWindow = this.openPopup(logoutUri, popupParams);
-            this.eventHandler.emitEvent(EventType.POPUP_OPENED, InteractionType.Popup, { popupWindow }, null);
+            this.eventHandler.emitEvent(EventType.POPUP_OPENED, validRequest.correlationId, InteractionType.Popup, { popupWindow }, null);
             await waitForBridgeResponse(this.config.system.popupBridgeTimeout, this.logger, this.browserCrypto, validRequest).catch(() => {
                 // Swallow any errors related to monitoring the window. Server logout is best effort
             });
@@ -18221,11 +18291,11 @@ class PopupClient extends StandardInteractionClient {
                 e.setCorrelationId(this.correlationId);
                 serverTelemetryManager.cacheFailedRequest(e);
             }
-            this.eventHandler.emitEvent(EventType.LOGOUT_FAILURE, InteractionType.Popup, null, e);
-            this.eventHandler.emitEvent(EventType.LOGOUT_END, InteractionType.Popup);
+            this.eventHandler.emitEvent(EventType.LOGOUT_FAILURE, this.correlationId, InteractionType.Popup, null, e);
+            this.eventHandler.emitEvent(EventType.LOGOUT_END, this.correlationId, InteractionType.Popup);
             throw e;
         }
-        this.eventHandler.emitEvent(EventType.LOGOUT_END, InteractionType.Popup);
+        this.eventHandler.emitEvent(EventType.LOGOUT_END, this.correlationId, InteractionType.Popup);
     }
     /**
      * Opens a popup window with given request Url.
@@ -18388,7 +18458,7 @@ class RedirectClient extends StandardInteractionClient {
             if (event.persisted) {
                 this.logger.verbose("0udvtt", this.correlationId);
                 this.browserStorage.resetRequestCache(this.correlationId);
-                this.eventHandler.emitEvent(EventType.RESTORE_FROM_BFCACHE, InteractionType.Redirect);
+                this.eventHandler.emitEvent(EventType.RESTORE_FROM_BFCACHE, this.correlationId, InteractionType.Redirect);
             }
         };
         const redirectStartPage = this.getRedirectStartPage(request.redirectStartPage);
@@ -18705,7 +18775,7 @@ class RedirectClient extends StandardInteractionClient {
         const validLogoutRequest = this.initializeLogoutRequest(logoutRequest);
         const serverTelemetryManager = initializeServerTelemetryManager(ApiId.logout, this.config.auth.clientId, this.correlationId, this.browserStorage, this.logger);
         try {
-            this.eventHandler.emitEvent(EventType.LOGOUT_START, InteractionType.Redirect, logoutRequest);
+            this.eventHandler.emitEvent(EventType.LOGOUT_START, this.correlationId, InteractionType.Redirect, logoutRequest);
             // Clear cache on logout
             await clearCacheOnLogout(this.browserStorage, this.browserCrypto, this.logger, this.correlationId, validLogoutRequest.account);
             const navigationOptions = {
@@ -18725,7 +18795,7 @@ class RedirectClient extends StandardInteractionClient {
                 }
                 catch {
                     if (validLogoutRequest.account?.homeAccountId) {
-                        this.eventHandler.emitEvent(EventType.LOGOUT_SUCCESS, InteractionType.Redirect, validLogoutRequest);
+                        this.eventHandler.emitEvent(EventType.LOGOUT_SUCCESS, this.correlationId, InteractionType.Redirect, validLogoutRequest);
                         return;
                     }
                 }
@@ -18733,7 +18803,7 @@ class RedirectClient extends StandardInteractionClient {
             // Create logout string and navigate user window to logout.
             const logoutUri = authClient.getLogoutUri(validLogoutRequest);
             if (validLogoutRequest.account?.homeAccountId) {
-                this.eventHandler.emitEvent(EventType.LOGOUT_SUCCESS, InteractionType.Redirect, validLogoutRequest);
+                this.eventHandler.emitEvent(EventType.LOGOUT_SUCCESS, this.correlationId, InteractionType.Redirect, validLogoutRequest);
             }
             // Check if onRedirectNavigate is implemented, and invoke it if so
             const onRedirectNavigate = this.config.auth.onRedirectNavigate;
@@ -18768,11 +18838,11 @@ class RedirectClient extends StandardInteractionClient {
                 e.setCorrelationId(this.correlationId);
                 serverTelemetryManager.cacheFailedRequest(e);
             }
-            this.eventHandler.emitEvent(EventType.LOGOUT_FAILURE, InteractionType.Redirect, null, e);
-            this.eventHandler.emitEvent(EventType.LOGOUT_END, InteractionType.Redirect);
+            this.eventHandler.emitEvent(EventType.LOGOUT_FAILURE, this.correlationId, InteractionType.Redirect, null, e);
+            this.eventHandler.emitEvent(EventType.LOGOUT_END, this.correlationId, InteractionType.Redirect);
             throw e;
         }
-        this.eventHandler.emitEvent(EventType.LOGOUT_END, InteractionType.Redirect);
+        this.eventHandler.emitEvent(EventType.LOGOUT_END, this.correlationId, InteractionType.Redirect);
     }
     /**
      * Use to get the redirectStartPage either from request or use current window
@@ -19026,7 +19096,7 @@ class SilentRefreshClient extends StandardInteractionClient {
             account: silentRequest.account,
         });
         // Send request to renew token. Auth module will throw errors if token cannot be renewed.
-        return invokeAsync(refreshTokenClient.acquireTokenByRefreshToken.bind(refreshTokenClient), RefreshTokenClientAcquireTokenByRefreshToken, this.logger, this.performanceClient, request.correlationId)(silentRequest).catch((e) => {
+        return invokeAsync(refreshTokenClient.acquireTokenByRefreshToken.bind(refreshTokenClient), RefreshTokenClientAcquireTokenByRefreshToken, this.logger, this.performanceClient, request.correlationId)(silentRequest, ApiId.acquireTokenSilent_silentFlow).catch((e) => {
             e.setCorrelationId(this.correlationId);
             serverTelemetryManager.cacheFailedRequest(e);
             throw e;
@@ -19123,7 +19193,7 @@ class SilentAuthCodeClient extends StandardInteractionClient {
                 msgraph_host: request.msGraphHost,
                 cloud_graph_host_name: request.cloudGraphHostName,
                 cloud_instance_host_name: request.cloudInstanceHostName,
-            }, silentRequest, false);
+            }, silentRequest, this.apiId, false);
         }
         catch (e) {
             if (e instanceof AuthError) {
@@ -19263,23 +19333,22 @@ class StandardController {
         if (!this.isBrowserEnvironment) {
             this.logger.info("19fvpi", correlationId);
             this.initialized = true;
-            this.eventHandler.emitEvent(EventType.INITIALIZE_END);
+            this.eventHandler.emitEvent(EventType.INITIALIZE_END, correlationId);
             return;
         }
-        const initCorrelationId = request?.correlationId || this.getRequestCorrelationId();
         const allowPlatformBroker = this.config.system.allowPlatformBroker;
-        const initMeasurement = this.performanceClient.startMeasurement(InitializeClientApplication, initCorrelationId);
-        this.eventHandler.emitEvent(EventType.INITIALIZE_START);
+        const initMeasurement = this.performanceClient.startMeasurement(InitializeClientApplication, correlationId);
+        this.eventHandler.emitEvent(EventType.INITIALIZE_START, correlationId);
         // Broker applications are initialized twice, so we avoid double-counting it
-        this.logMultipleInstances(initMeasurement, initCorrelationId);
-        await invokeAsync(this.browserStorage.initialize.bind(this.browserStorage), InitializeCache, this.logger, this.performanceClient, initCorrelationId)(initCorrelationId);
+        this.logMultipleInstances(initMeasurement, correlationId);
+        await invokeAsync(this.browserStorage.initialize.bind(this.browserStorage), InitializeCache, this.logger, this.performanceClient, correlationId)(correlationId);
         if (allowPlatformBroker) {
             try {
                 // check if platform authentication is available via DOM or browser extension and create relevant handlers
-                this.platformAuthProvider = await getPlatformAuthProvider(this.logger, this.performanceClient, initCorrelationId, this.config.system.nativeBrokerHandshakeTimeout);
+                this.platformAuthProvider = await getPlatformAuthProvider(this.logger, this.performanceClient, correlationId, this.config.system.nativeBrokerHandshakeTimeout);
             }
             catch (e) {
-                this.logger.verbose(e, initCorrelationId);
+                this.logger.verbose(e, correlationId);
             }
         }
         if (this.config.cache.cacheLocation ===
@@ -19287,9 +19356,9 @@ class StandardController {
             this.eventHandler.subscribeCrossTab();
         }
         !this.config.system.navigatePopups &&
-            (await this.preGeneratePkceCodes(initCorrelationId));
+            (await this.preGeneratePkceCodes(correlationId));
         this.initialized = true;
-        this.eventHandler.emitEvent(EventType.INITIALIZE_END);
+        this.eventHandler.emitEvent(EventType.INITIALIZE_END, correlationId);
         initMeasurement.end({
             allowPlatformBroker: allowPlatformBroker,
             success: true,
@@ -19351,11 +19420,11 @@ class StandardController {
             this.platformAuthProvider &&
             !options?.hash;
         let rootMeasurement;
-        this.eventHandler.emitEvent(EventType.HANDLE_REDIRECT_START, InteractionType.Redirect);
         let redirectResponse;
         try {
             if (useNative && this.platformAuthProvider) {
                 const correlationId = platformBrokerRequest?.correlationId || "";
+                this.eventHandler.emitEvent(EventType.HANDLE_REDIRECT_START, correlationId, InteractionType.Redirect);
                 rootMeasurement = this.performanceClient.startMeasurement(AcquireTokenRedirect, correlationId);
                 this.logger.trace("12v7is", correlationId);
                 const nativeClient = new PlatformAuthInteractionClient(this.config, this.browserStorage, this.browserCrypto, this.logger, this.eventHandler, this.navigationClient, ApiId.handleRedirectPromise, this.performanceClient, this.platformAuthProvider, platformBrokerRequest.accountId, this.nativeInternalStorage, platformBrokerRequest.correlationId);
@@ -19364,6 +19433,7 @@ class StandardController {
             else {
                 const [standardRequest, codeVerifier] = this.browserStorage.getCachedRequest("");
                 const correlationId = standardRequest.correlationId;
+                this.eventHandler.emitEvent(EventType.HANDLE_REDIRECT_START, correlationId, InteractionType.Redirect);
                 // Reset rootMeasurement now that we have correlationId
                 rootMeasurement = this.performanceClient.startMeasurement(AcquireTokenRedirect, correlationId);
                 this.logger.trace("0znzs5", correlationId);
@@ -19379,12 +19449,12 @@ class StandardController {
             .then((result) => {
             if (result) {
                 this.browserStorage.resetRequestCache(result.correlationId);
-                this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_SUCCESS, InteractionType.Redirect, result);
+                this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_SUCCESS, result.correlationId, InteractionType.Redirect, result);
                 this.logger.verbose("0ui8f5", result.correlationId);
                 // Emit login event if number of accounts change
                 const isLoggingIn = loggedInAccounts.length < this.getAllAccounts().length;
                 if (isLoggingIn) {
-                    this.eventHandler.emitEvent(EventType.LOGIN_SUCCESS, InteractionType.Redirect, result.account);
+                    this.eventHandler.emitEvent(EventType.LOGIN_SUCCESS, result.correlationId, InteractionType.Redirect, result.account);
                     this.logger.verbose("16im3l", result.correlationId);
                 }
                 rootMeasurement.end({
@@ -19403,14 +19473,14 @@ class StandardController {
                     rootMeasurement.discard();
                 }
             }
-            this.eventHandler.emitEvent(EventType.HANDLE_REDIRECT_END, InteractionType.Redirect);
+            this.eventHandler.emitEvent(EventType.HANDLE_REDIRECT_END, rootMeasurement.event.correlationId, InteractionType.Redirect);
             return result;
         })
             .catch((e) => {
             this.browserStorage.resetRequestCache(rootMeasurement.event.correlationId);
             const eventError = e;
-            this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_FAILURE, InteractionType.Redirect, null, eventError);
-            this.eventHandler.emitEvent(EventType.HANDLE_REDIRECT_END, InteractionType.Redirect);
+            this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_FAILURE, rootMeasurement.event.correlationId, InteractionType.Redirect, null, eventError);
+            this.eventHandler.emitEvent(EventType.HANDLE_REDIRECT_END, rootMeasurement.event.correlationId, InteractionType.Redirect);
             rootMeasurement.end({
                 success: false,
             }, eventError);
@@ -19449,7 +19519,7 @@ class StandardController {
         try {
             redirectPreflightCheck(this.initialized, this.config);
             this.browserStorage.setInteractionInProgress(true, INTERACTION_TYPE.SIGNIN);
-            this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_START, InteractionType.Redirect, request);
+            this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_START, correlationId, InteractionType.Redirect, request);
             let result;
             if (this.platformAuthProvider &&
                 this.canUsePlatformBroker(request)) {
@@ -19491,7 +19561,7 @@ class StandardController {
             else {
                 atrMeasurement.end({ success: false }, e, request.account);
             }
-            this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_FAILURE, InteractionType.Redirect, null, e);
+            this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_FAILURE, correlationId, InteractionType.Redirect, null, e);
             throw e;
         }
     }
@@ -19521,7 +19591,7 @@ class StandardController {
         }
         // If logged in, emit acquire token events
         const loggedInAccounts = this.getAllAccounts();
-        this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_START, InteractionType.Popup, request);
+        this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_START, correlationId, InteractionType.Popup, request);
         let result;
         const pkce = this.getPreGeneratedPkceCodes(correlationId);
         if (this.canUsePlatformBroker(request)) {
@@ -19561,9 +19631,9 @@ class StandardController {
              *  If logged in, emit acquire token events
              */
             const isLoggingIn = loggedInAccounts.length < this.getAllAccounts().length;
-            this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_SUCCESS, InteractionType.Popup, result);
+            this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_SUCCESS, correlationId, InteractionType.Popup, result);
             if (isLoggingIn) {
-                this.eventHandler.emitEvent(EventType.LOGIN_SUCCESS, InteractionType.Popup, result.account);
+                this.eventHandler.emitEvent(EventType.LOGIN_SUCCESS, correlationId, InteractionType.Popup, result.account);
             }
             atPopupMeasurement.end({
                 success: true,
@@ -19573,7 +19643,7 @@ class StandardController {
             return result;
         })
             .catch((e) => {
-            this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_FAILURE, InteractionType.Popup, null, e);
+            this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_FAILURE, correlationId, InteractionType.Popup, null, e);
             atPopupMeasurement.end({
                 success: false,
             }, e, request.account);
@@ -19633,7 +19703,7 @@ class StandardController {
         document.addEventListener("visibilitychange", this.trackPageVisibilityWithMeasurement);
         const loggedInAccounts = this.getAllAccounts();
         this.logger.verbose("0w1b45", correlationId);
-        this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_START, InteractionType.Silent, validRequest);
+        this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_START, correlationId, InteractionType.Silent, validRequest);
         let result;
         if (this.canUsePlatformBroker(validRequest)) {
             result = this.acquireTokenNative(validRequest, ApiId.ssoSilent).catch((e) => {
@@ -19653,9 +19723,9 @@ class StandardController {
         return result
             .then((response) => {
             const isLoggingIn = loggedInAccounts.length < this.getAllAccounts().length;
-            this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_SUCCESS, InteractionType.Silent, response);
+            this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_SUCCESS, correlationId, InteractionType.Silent, response);
             if (isLoggingIn) {
-                this.eventHandler.emitEvent(EventType.LOGIN_SUCCESS, InteractionType.Silent, response.account);
+                this.eventHandler.emitEvent(EventType.LOGIN_SUCCESS, correlationId, InteractionType.Silent, response.account);
             }
             this.ssoSilentMeasurement?.end({
                 success: true,
@@ -19666,7 +19736,7 @@ class StandardController {
             return response;
         })
             .catch((e) => {
-            this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_FAILURE, InteractionType.Silent, null, e);
+            this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_FAILURE, correlationId, InteractionType.Silent, null, e);
             this.ssoSilentMeasurement?.end({
                 success: false,
             }, e, request.account);
@@ -19691,7 +19761,7 @@ class StandardController {
         this.logger.trace("0ch6ga", correlationId);
         const atbcMeasurement = this.performanceClient.startMeasurement(AcquireTokenByCode, correlationId);
         preflightCheck(this.initialized, atbcMeasurement);
-        this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_START, InteractionType.Silent, request);
+        this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_START, correlationId, InteractionType.Silent, request);
         atbcMeasurement.add({ scenarioId: request.scenarioId });
         try {
             if (request.code && request.nativeAccountId) {
@@ -19708,7 +19778,7 @@ class StandardController {
                         correlationId,
                     })
                         .then((result) => {
-                        this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_SUCCESS, InteractionType.Silent, result);
+                        this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_SUCCESS, correlationId, InteractionType.Silent, result);
                         this.hybridAuthCodeResponses.delete(hybridAuthCode);
                         atbcMeasurement.end({
                             success: true,
@@ -19720,7 +19790,7 @@ class StandardController {
                     })
                         .catch((error) => {
                         this.hybridAuthCodeResponses.delete(hybridAuthCode);
-                        this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_FAILURE, InteractionType.Silent, null, error);
+                        this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_FAILURE, correlationId, InteractionType.Silent, null, error);
                         atbcMeasurement.end({
                             success: false,
                         }, error);
@@ -19761,7 +19831,7 @@ class StandardController {
             }
         }
         catch (e) {
-            this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_FAILURE, InteractionType.Silent, null, e);
+            this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_FAILURE, correlationId, InteractionType.Silent, null, e);
             atbcMeasurement.end({
                 success: false,
             }, e);
@@ -19936,7 +20006,7 @@ class StandardController {
         this.logger.verbose("16jycr", result.correlationId);
         // Account gets saved to browser storage regardless of native or not
         const accountEntity = createAccountEntityFromAccountInfo(result.account, result.cloudGraphHostName, result.msGraphHost);
-        await this.browserStorage.setAccount(accountEntity, result.correlationId, isKmsi(result.idTokenClaims));
+        await this.browserStorage.setAccount(accountEntity, result.correlationId, isKmsi(result.idTokenClaims), ApiId.hydrateCache);
         if (result.fromPlatformBroker) {
             this.logger.verbose("1fxyu8", result.correlationId);
             // Tokens from native broker are stored in-memory
@@ -20263,7 +20333,7 @@ class StandardController {
      */
     async acquireTokenSilentAsync(request, account) {
         const trackPageVisibility = () => this.trackPageVisibility(request.correlationId);
-        this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_START, InteractionType.Silent, request);
+        this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_START, request.correlationId, InteractionType.Silent, request);
         if (request.correlationId) {
             this.performanceClient.incrementFields({ visibilityChangeCount: 0 }, request.correlationId);
         }
@@ -20331,7 +20401,7 @@ class StandardController {
         });
         return result
             .then((response) => {
-            this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_SUCCESS, InteractionType.Silent, response);
+            this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_SUCCESS, request.correlationId, InteractionType.Silent, response);
             if (request.correlationId) {
                 this.performanceClient.addFields({
                     fromCache: response.fromCache,
@@ -20341,7 +20411,7 @@ class StandardController {
             return response;
         })
             .catch((tokenRenewalError) => {
-            this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_FAILURE, InteractionType.Silent, null, tokenRenewalError);
+            this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_FAILURE, request.correlationId, InteractionType.Silent, null, tokenRenewalError);
             throw tokenRenewalError;
         })
             .finally(() => {
@@ -20380,7 +20450,7 @@ class StandardController {
                 if (cacheLookupPolicy === CacheLookupPolicy.AccessToken) {
                     throw cacheError;
                 }
-                this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_NETWORK_START, InteractionType.Silent, silentRequest);
+                this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_NETWORK_START, silentRequest.correlationId, InteractionType.Silent, silentRequest);
                 return invokeAsync(this.acquireTokenByRefreshToken.bind(this), AcquireTokenByRefreshToken, this.logger, this.performanceClient, silentRequest.correlationId)(silentRequest, cacheLookupPolicy);
             });
         }