@azure/msal-browser 5.1.0 → 5.3.0

package/lib/msal-browser.cjs

@@ -1,8 +1,8 @@
-/*! @azure/msal-browser v5.1.0 2026-01-28 */
+/*! @azure/msal-browser v5.3.0 2026-02-24 */
 'use strict';
 'use strict';
 
-/*! @azure/msal-common v16.0.3 2026-01-28 */
+/*! @azure/msal-common v16.1.0 2026-02-24 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -234,7 +234,7 @@ const JsonWebTokenTypes$1 = {
 // Token renewal offset default in seconds
 const DEFAULT_TOKEN_RENEWAL_OFFSET_SEC = 300;
 
-/*! @azure/msal-common v16.0.3 2026-01-28 */
+/*! @azure/msal-common v16.1.0 2026-02-24 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -284,7 +284,7 @@ const INSTANCE_AWARE = "instance_aware";
 const EAR_JWK = "ear_jwk";
 const EAR_JWE_CRYPTO = "ear_jwe_crypto";
 
-/*! @azure/msal-common v16.0.3 2026-01-28 */
+/*! @azure/msal-common v16.1.0 2026-02-24 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -315,7 +315,7 @@ function createAuthError(code, additionalMessage) {
     return new AuthError(code, additionalMessage || getDefaultErrorMessage$1(code));
 }
 
-/*! @azure/msal-common v16.0.3 2026-01-28 */
+/*! @azure/msal-common v16.1.0 2026-02-24 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -335,7 +335,7 @@ function createClientConfigurationError(errorCode) {
     return new ClientConfigurationError(errorCode);
 }
 
-/*! @azure/msal-common v16.0.3 2026-01-28 */
+/*! @azure/msal-common v16.1.0 2026-02-24 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -413,26 +413,9 @@ class StringUtils {
             return null;
         }
     }
-    /**
-     * Tests if a given string matches a given pattern, with support for wildcards and queries.
-     * @param pattern Wildcard pattern to string match. Supports "*" for wildcards and "?" for queries
-     * @param input String to match against
-     */
-    static matchPattern(pattern, input) {
-        /**
-         * Wildcard support: https://stackoverflow.com/a/3117248/4888559
-         * Queries: replaces "?" in string with escaped "\?" for regex test
-         */
-        // eslint-disable-next-line security/detect-non-literal-regexp
-        const regex = new RegExp(pattern
-            .replace(/\\/g, "\\\\")
-            .replace(/\*/g, "[^ ]*")
-            .replace(/\?/g, "\\?"));
-        return regex.test(input);
-    }
 }
 
-/*! @azure/msal-common v16.0.3 2026-01-28 */
+/*! @azure/msal-common v16.1.0 2026-02-24 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -455,7 +438,7 @@ function createClientAuthError(errorCode, additionalMessage) {
     return new ClientAuthError(errorCode, additionalMessage);
 }
 
-/*! @azure/msal-common v16.0.3 2026-01-28 */
+/*! @azure/msal-common v16.1.0 2026-02-24 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -509,7 +492,7 @@ var ClientConfigurationErrorCodes = /*#__PURE__*/Object.freeze({
     urlParseError: urlParseError
 });
 
-/*! @azure/msal-common v16.0.3 2026-01-28 */
+/*! @azure/msal-common v16.1.0 2026-02-24 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -593,7 +576,7 @@ var ClientAuthErrorCodes = /*#__PURE__*/Object.freeze({
     userCanceled: userCanceled
 });
 
-/*! @azure/msal-common v16.0.3 2026-01-28 */
+/*! @azure/msal-common v16.1.0 2026-02-24 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -788,7 +771,7 @@ class ScopeSet {
     }
 }
 
-/*! @azure/msal-common v16.0.3 2026-01-28 */
+/*! @azure/msal-common v16.1.0 2026-02-24 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1155,7 +1138,7 @@ function addEARParameters(parameters, jwk) {
     parameters.set(EAR_JWE_CRYPTO, jweCryptoB64Encoded);
 }
 
-/*! @azure/msal-common v16.0.3 2026-01-28 */
+/*! @azure/msal-common v16.1.0 2026-02-24 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1264,7 +1247,7 @@ function normalizeUrlForComparison(url) {
     }
 }
 
-/*! @azure/msal-common v16.0.3 2026-01-28 */
+/*! @azure/msal-common v16.1.0 2026-02-24 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1303,7 +1286,7 @@ const DEFAULT_CRYPTO_IMPLEMENTATION = {
     },
 };
 
-/*! @azure/msal-common v16.0.3 2026-01-28 */
+/*! @azure/msal-common v16.1.0 2026-02-24 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -1578,12 +1561,12 @@ class Logger {
     }
 }
 
-/*! @azure/msal-common v16.0.3 2026-01-28 */
+/*! @azure/msal-common v16.1.0 2026-02-24 */
 /* eslint-disable header/header */
 const name$1 = "@azure/msal-common";
-const version$1 = "16.0.3";
+const version$1 = "16.1.0";
 
-/*! @azure/msal-common v16.0.3 2026-01-28 */
+/*! @azure/msal-common v16.1.0 2026-02-24 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -1603,7 +1586,7 @@ const AzureCloudInstance = {
     AzureUsGovernment: "https://login.microsoftonline.us",
 };
 
-/*! @azure/msal-common v16.0.3 2026-01-28 */
+/*! @azure/msal-common v16.1.0 2026-02-24 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -1685,7 +1668,7 @@ function updateAccountTenantProfileData(baseAccountInfo, tenantProfile, idTokenC
     return updatedAccountInfo;
 }
 
-/*! @azure/msal-common v16.0.3 2026-01-28 */
+/*! @azure/msal-common v16.1.0 2026-02-24 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1765,7 +1748,7 @@ function checkMaxAge(authTime, maxAge) {
     }
 }
 
-/*! @azure/msal-common v16.0.3 2026-01-28 */
+/*! @azure/msal-common v16.1.0 2026-02-24 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1922,7 +1905,7 @@ class UrlString {
     }
 }
 
-/*! @azure/msal-common v16.0.3 2026-01-28 */
+/*! @azure/msal-common v16.1.0 2026-02-24 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1993,6 +1976,21 @@ const rawMetdataJSON = {
                 preferred_cache: "login-us.microsoftonline.com",
                 aliases: ["login-us.microsoftonline.com"],
             },
+            {
+                preferred_network: "login.sovcloud-identity.fr",
+                preferred_cache: "login.sovcloud-identity.fr",
+                aliases: ["login.sovcloud-identity.fr"],
+            },
+            {
+                preferred_network: "login.sovcloud-identity.de",
+                preferred_cache: "login.sovcloud-identity.de",
+                aliases: ["login.sovcloud-identity.de"],
+            },
+            {
+                preferred_network: "login.sovcloud-identity.sg",
+                preferred_cache: "login.sovcloud-identity.sg",
+                aliases: ["login.sovcloud-identity.sg"],
+            },
         ],
     },
 };
@@ -2064,7 +2062,7 @@ function getCloudDiscoveryMetadataFromNetworkResponse(response, authorityHost) {
     return null;
 }
 
-/*! @azure/msal-common v16.0.3 2026-01-28 */
+/*! @azure/msal-common v16.1.0 2026-02-24 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -2072,7 +2070,7 @@ function getCloudDiscoveryMetadataFromNetworkResponse(response, authorityHost) {
 const cacheQuotaExceeded = "cache_quota_exceeded";
 const cacheErrorUnknown = "cache_error_unknown";
 
-/*! @azure/msal-common v16.0.3 2026-01-28 */
+/*! @azure/msal-common v16.1.0 2026-02-24 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2110,7 +2108,7 @@ function createCacheError(e) {
     }
 }
 
-/*! @azure/msal-common v16.0.3 2026-01-28 */
+/*! @azure/msal-common v16.1.0 2026-02-24 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2148,7 +2146,7 @@ function buildClientInfoFromHomeAccountId(homeAccountId) {
     };
 }
 
-/*! @azure/msal-common v16.0.3 2026-01-28 */
+/*! @azure/msal-common v16.1.0 2026-02-24 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -2163,7 +2161,7 @@ const AuthorityType = {
     Ciam: 3,
 };
 
-/*! @azure/msal-common v16.0.3 2026-01-28 */
+/*! @azure/msal-common v16.1.0 2026-02-24 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -2185,7 +2183,7 @@ function getTenantIdFromIdTokenClaims(idTokenClaims) {
     return null;
 }
 
-/*! @azure/msal-common v16.0.3 2026-01-28 */
+/*! @azure/msal-common v16.1.0 2026-02-24 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -2209,7 +2207,7 @@ const ProtocolMode = {
     EAR: "EAR",
 };
 
-/*! @azure/msal-common v16.0.3 2026-01-28 */
+/*! @azure/msal-common v16.1.0 2026-02-24 */
 /**
  * Returns the AccountInfo interface for this account.
  */
@@ -2384,7 +2382,7 @@ function isAccountEntity(entity) {
         entity.hasOwnProperty("authorityType"));
 }
 
-/*! @azure/msal-common v16.0.3 2026-01-28 */
+/*! @azure/msal-common v16.1.0 2026-02-24 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3481,7 +3479,7 @@ class DefaultStorageClass extends CacheManager {
     }
 }
 
-/*! @azure/msal-common v16.0.3 2026-01-28 */
+/*! @azure/msal-common v16.1.0 2026-02-24 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -3522,7 +3520,7 @@ const IntFields = new Set([
     "upgradedCacheCount",
 ]);
 
-/*! @azure/msal-common v16.0.3 2026-01-28 */
+/*! @azure/msal-common v16.1.0 2026-02-24 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3577,7 +3575,7 @@ class StubPerformanceClient {
     }
 }
 
-/*! @azure/msal-common v16.0.3 2026-01-28 */
+/*! @azure/msal-common v16.1.0 2026-02-24 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3671,7 +3669,7 @@ function isOidcProtocolMode(config) {
     return (config.authOptions.authority.options.protocolMode === ProtocolMode.OIDC);
 }
 
-/*! @azure/msal-common v16.0.3 2026-01-28 */
+/*! @azure/msal-common v16.1.0 2026-02-24 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3690,27 +3688,63 @@ class ServerError extends AuthError {
     }
 }
 
-/*! @azure/msal-common v16.0.3 2026-01-28 */
+/*! @azure/msal-common v16.1.0 2026-02-24 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
  */
-// Codes defined by MSAL
+/**
+ * MSAL-defined interaction required error code indicating no tokens are found in cache.
+ * @public
+ */
 const noTokensFound = "no_tokens_found";
+/**
+ * MSAL-defined error code indicating a native account is unavailable on the platform.
+ * @public
+ */
 const nativeAccountUnavailable = "native_account_unavailable";
+/**
+ * MSAL-defined error code indicating the refresh token has expired and user interaction is needed.
+ * @public
+ */
 const refreshTokenExpired = "refresh_token_expired";
+/**
+ * MSAL-defined error code indicating UI/UX is not allowed (e.g., blocked by policy), requiring alternate interaction.
+ * @public
+ */
 const uxNotAllowed = "ux_not_allowed";
-// Codes potentially returned by server
+/**
+ * Server-originated error code indicating interaction is required to complete the request.
+ * @public
+ */
 const interactionRequired = "interaction_required";
+/**
+ * Server-originated error code indicating user consent is required.
+ * @public
+ */
 const consentRequired = "consent_required";
+/**
+ * Server-originated error code indicating user login is required.
+ * @public
+ */
 const loginRequired = "login_required";
-const badToken = "bad_token";
+/**
+ * Server-originated error code indicating the token is invalid or corrupted.
+ * @public
+ */
+const badToken = "bad_token";
+/**
+ * Server-originated error code indicating the user is in an interrupted state and interaction is required.
+ * @public
+ */
+const interruptedUser = "interrupted_user";
 
 var InteractionRequiredAuthErrorCodes = /*#__PURE__*/Object.freeze({
     __proto__: null,
     badToken: badToken,
     consentRequired: consentRequired,
     interactionRequired: interactionRequired,
+    interruptedUser: interruptedUser,
     loginRequired: loginRequired,
     nativeAccountUnavailable: nativeAccountUnavailable,
     noTokensFound: noTokensFound,
@@ -3718,7 +3752,7 @@ var InteractionRequiredAuthErrorCodes = /*#__PURE__*/Object.freeze({
     uxNotAllowed: uxNotAllowed
 });
 
-/*! @azure/msal-common v16.0.3 2026-01-28 */
+/*! @azure/msal-common v16.1.0 2026-02-24 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3733,6 +3767,7 @@ const InteractionRequiredServerErrorMessage = [
     loginRequired,
     badToken,
     uxNotAllowed,
+    interruptedUser,
 ];
 const InteractionRequiredAuthSubErrorMessage = [
     "message_only",
@@ -3742,6 +3777,7 @@ const InteractionRequiredAuthSubErrorMessage = [
     "consent_required",
     "bad_token",
     "ux_not_allowed",
+    "interrupted_user",
 ];
 /**
  * Error thrown when user interaction is required.
@@ -3784,7 +3820,7 @@ function createInteractionRequiredAuthError(errorCode, errorMessage) {
     return new InteractionRequiredAuthError(errorCode, errorMessage);
 }
 
-/*! @azure/msal-common v16.0.3 2026-01-28 */
+/*! @azure/msal-common v16.1.0 2026-02-24 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3852,7 +3888,7 @@ function parseRequestState(base64Decode, state) {
     }
 }
 
-/*! @azure/msal-common v16.0.3 2026-01-28 */
+/*! @azure/msal-common v16.1.0 2026-02-24 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -3917,7 +3953,7 @@ function wasClockTurnedBack(cachedAt) {
     return cachedAtSec > nowSeconds();
 }
 
-/*! @azure/msal-common v16.0.3 2026-01-28 */
+/*! @azure/msal-common v16.1.0 2026-02-24 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -3988,7 +4024,7 @@ const RegionDiscoveryGetCurrentVersion = "regionDiscoveryGetCurrentVersion";
 const CacheManagerGetRefreshToken = "cacheManagerGetRefreshToken";
 const SetUserData = "setUserData";
 
-/*! @azure/msal-common v16.0.3 2026-01-28 */
+/*! @azure/msal-common v16.1.0 2026-02-24 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -4083,7 +4119,7 @@ const invokeAsync = (callback, eventName, logger, telemetryClient, correlationId
     };
 };
 
-/*! @azure/msal-common v16.0.3 2026-01-28 */
+/*! @azure/msal-common v16.1.0 2026-02-24 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4163,7 +4199,7 @@ class PopTokenGenerator {
     }
 }
 
-/*! @azure/msal-common v16.0.3 2026-01-28 */
+/*! @azure/msal-common v16.1.0 2026-02-24 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -4190,7 +4226,7 @@ class PopTokenGenerator {
     }
 }
 
-/*! @azure/msal-common v16.0.3 2026-01-28 */
+/*! @azure/msal-common v16.1.0 2026-02-24 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4449,7 +4485,7 @@ function isAuthorityMetadataExpired(metadata) {
     return metadata.expiresAt <= nowSeconds();
 }
 
-/*! @azure/msal-common v16.0.3 2026-01-28 */
+/*! @azure/msal-common v16.1.0 2026-02-24 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4785,7 +4821,7 @@ function buildAccountToCache(cacheStorage, authority, homeAccountId, base64Decod
     return baseAccount;
 }
 
-/*! @azure/msal-common v16.0.3 2026-01-28 */
+/*! @azure/msal-common v16.1.0 2026-02-24 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -4795,7 +4831,7 @@ const CcsCredentialType = {
     UPN: "UPN",
 };
 
-/*! @azure/msal-common v16.0.3 2026-01-28 */
+/*! @azure/msal-common v16.1.0 2026-02-24 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -4813,7 +4849,7 @@ async function getClientAssertion(clientAssertion, clientId, tokenEndpoint) {
     }
 }
 
-/*! @azure/msal-common v16.0.3 2026-01-28 */
+/*! @azure/msal-common v16.1.0 2026-02-24 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -4834,7 +4870,7 @@ function getRequestThumbprint(clientId, request, homeAccountId) {
     };
 }
 
-/*! @azure/msal-common v16.0.3 2026-01-28 */
+/*! @azure/msal-common v16.1.0 2026-02-24 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4920,7 +4956,7 @@ class ThrottlingUtils {
     }
 }
 
-/*! @azure/msal-common v16.0.3 2026-01-28 */
+/*! @azure/msal-common v16.1.0 2026-02-24 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4951,7 +4987,7 @@ function createNetworkError(error, httpStatus, responseHeaders, additionalError)
     return new NetworkError(error, httpStatus, responseHeaders);
 }
 
-/*! @azure/msal-common v16.0.3 2026-01-28 */
+/*! @azure/msal-common v16.1.0 2026-02-24 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5065,7 +5101,7 @@ async function sendPostRequest(thumbprint, tokenEndpoint, options, correlationId
     return response;
 }
 
-/*! @azure/msal-common v16.0.3 2026-01-28 */
+/*! @azure/msal-common v16.1.0 2026-02-24 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -5077,7 +5113,7 @@ function isOpenIdConfigResponse(response) {
         response.hasOwnProperty("jwks_uri"));
 }
 
-/*! @azure/msal-common v16.0.3 2026-01-28 */
+/*! @azure/msal-common v16.1.0 2026-02-24 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -5087,7 +5123,7 @@ function isCloudInstanceDiscoveryResponse(response) {
         response.hasOwnProperty("metadata"));
 }
 
-/*! @azure/msal-common v16.0.3 2026-01-28 */
+/*! @azure/msal-common v16.1.0 2026-02-24 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -5097,7 +5133,7 @@ function isCloudInstanceDiscoveryErrorResponse(response) {
         response.hasOwnProperty("error_description"));
 }
 
-/*! @azure/msal-common v16.0.3 2026-01-28 */
+/*! @azure/msal-common v16.1.0 2026-02-24 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5202,7 +5238,7 @@ RegionDiscovery.IMDS_OPTIONS = {
     },
 };
 
-/*! @azure/msal-common v16.0.3 2026-01-28 */
+/*! @azure/msal-common v16.1.0 2026-02-24 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6022,7 +6058,7 @@ function buildStaticAuthorityOptions(authOptions) {
     };
 }
 
-/*! @azure/msal-common v16.0.3 2026-01-28 */
+/*! @azure/msal-common v16.1.0 2026-02-24 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6056,7 +6092,7 @@ async function createDiscoveredInstance(authorityUri, networkClient, cacheManage
     }
 }
 
-/*! @azure/msal-common v16.0.3 2026-01-28 */
+/*! @azure/msal-common v16.1.0 2026-02-24 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6316,7 +6352,7 @@ class AuthorizationCodeClient {
     }
 }
 
-/*! @azure/msal-common v16.0.3 2026-01-28 */
+/*! @azure/msal-common v16.1.0 2026-02-24 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6541,7 +6577,7 @@ class RefreshTokenClient {
     }
 }
 
-/*! @azure/msal-common v16.0.3 2026-01-28 */
+/*! @azure/msal-common v16.1.0 2026-02-24 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6650,7 +6686,7 @@ class SilentFlowClient {
     }
 }
 
-/*! @azure/msal-common v16.0.3 2026-01-28 */
+/*! @azure/msal-common v16.1.0 2026-02-24 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6665,7 +6701,7 @@ const StubbedNetworkModule = {
     },
 };
 
-/*! @azure/msal-common v16.0.3 2026-01-28 */
+/*! @azure/msal-common v16.1.0 2026-02-24 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6889,7 +6925,7 @@ function extractLoginHint(account) {
     return account.loginHint || account.idTokenClaims?.login_hint || null;
 }
 
-/*! @azure/msal-common v16.0.3 2026-01-28 */
+/*! @azure/msal-common v16.1.0 2026-02-24 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6947,7 +6983,7 @@ class AuthenticationHeaderParser {
     }
 }
 
-/*! @azure/msal-common v16.0.3 2026-01-28 */
+/*! @azure/msal-common v16.1.0 2026-02-24 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -6964,7 +7000,7 @@ var AuthErrorCodes = /*#__PURE__*/Object.freeze({
     unexpectedError: unexpectedError
 });
 
-/*! @azure/msal-common v16.0.3 2026-01-28 */
+/*! @azure/msal-common v16.1.0 2026-02-24 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7225,7 +7261,7 @@ class ServerTelemetryManager {
     }
 }
 
-/*! @azure/msal-common v16.0.3 2026-01-28 */
+/*! @azure/msal-common v16.1.0 2026-02-24 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7246,7 +7282,7 @@ function createJoseHeaderError(code) {
     return new JoseHeaderError(code);
 }
 
-/*! @azure/msal-common v16.0.3 2026-01-28 */
+/*! @azure/msal-common v16.1.0 2026-02-24 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -7254,7 +7290,7 @@ function createJoseHeaderError(code) {
 const missingKidError = "missing_kid_error";
 const missingAlgError = "missing_alg_error";
 
-/*! @azure/msal-common v16.0.3 2026-01-28 */
+/*! @azure/msal-common v16.1.0 2026-02-24 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7294,7 +7330,7 @@ class JoseHeader {
     }
 }
 
-/*! @azure/msal-common v16.0.3 2026-01-28 */
+/*! @azure/msal-common v16.1.0 2026-02-24 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -10120,7 +10156,7 @@ const EventType = {
 
 /* eslint-disable header/header */
 const name = "@azure/msal-browser";
-const version = "5.1.0";
+const version = "5.3.0";
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -11133,7 +11169,7 @@ class BrowserCacheManager extends CacheManager {
             this.logger.verbose("1bp5z5", correlationId);
             this.browserStorage.removeItem(activeAccountKey);
         }
-        this.eventHandler.emitEvent(EventType.ACTIVE_ACCOUNT_CHANGED);
+        this.eventHandler.emitEvent(EventType.ACTIVE_ACCOUNT_CHANGED, correlationId);
     }
     /**
      * fetch throttling entity from the platform cache
@@ -11596,12 +11632,13 @@ class EventHandler {
      * @param payload
      * @param error
      */
-    emitEvent(eventType, interactionType, payload, error) {
+    emitEvent(eventType, correlationId, interactionType, payload, error) {
         const message = {
             eventType: eventType,
             interactionType: interactionType || null,
             payload: payload || null,
             error: error || null,
+            correlationId: correlationId,
             timestamp: Date.now(),
         };
         switch (eventType) {
@@ -13026,6 +13063,8 @@ async function getEARForm(frame, config, authority, request, logger, performance
     });
     const queryParams = new Map();
     addExtraParameters(queryParams, request.extraQueryParameters || {});
+    // Add correlationId to query params so gateway can propagate it to IDPs
+    addCorrelationId(queryParams, request.correlationId);
     const url = getAuthorizeUrl(authority, queryParams);
     return createForm(frame, url, parameters);
 }
@@ -13043,6 +13082,8 @@ async function getCodeForm(frame, config, authority, request, logger, performanc
     // Add extraQueryParameters to be appended to request URL
     const queryParams = new Map();
     addExtraParameters(queryParams, request.extraQueryParameters || {});
+    // Add correlationId to query params so gateway can propagate it to IDPs
+    addCorrelationId(queryParams, request.correlationId);
     const url = getAuthorizeUrl(authority, queryParams);
     return createForm(frame, url, parameters);
 }
@@ -14130,7 +14171,7 @@ class PopupClient extends StandardInteractionClient {
                 const navigateUrl = await invokeAsync(getAuthCodeRequestUrl, GetAuthCodeUrl, this.logger, this.performanceClient, correlationId)(this.config, authClient.authority, popupRequest, this.logger, this.performanceClient);
                 // Show the UI once the url has been created. Get the window handle for the popup.
                 const popupWindow = this.initiateAuthRequest(navigateUrl, popupParams);
-                this.eventHandler.emitEvent(EventType.POPUP_OPENED, exports.InteractionType.Popup, { popupWindow }, null);
+                this.eventHandler.emitEvent(EventType.POPUP_OPENED, correlationId, exports.InteractionType.Popup, { popupWindow }, null);
                 // Wait for the redirect bridge response
                 const responseString = await waitForBridgeResponse(this.config.system.popupBridgeTimeout, this.logger, this.browserCrypto, request);
                 const serverParams = invoke(deserializeResponse, DeserializeResponse, this.logger, this.performanceClient, this.correlationId)(responseString, this.config.auth.OIDCOptions.responseMode, this.logger, this.correlationId);
@@ -14207,7 +14248,7 @@ class PopupClient extends StandardInteractionClient {
      */
     async logoutPopupAsync(validRequest, popupParams, requestAuthority, mainWindowRedirectUri) {
         this.logger.verbose("0b7yrk", this.correlationId);
-        this.eventHandler.emitEvent(EventType.LOGOUT_START, exports.InteractionType.Popup, validRequest);
+        this.eventHandler.emitEvent(EventType.LOGOUT_START, this.correlationId, exports.InteractionType.Popup, validRequest);
         const serverTelemetryManager = initializeServerTelemetryManager(ApiId.logoutPopup, this.config.auth.clientId, this.correlationId, this.browserStorage, this.logger);
         try {
             // Clear cache on logout
@@ -14225,7 +14266,7 @@ class PopupClient extends StandardInteractionClient {
                 if (validRequest.account?.homeAccountId &&
                     validRequest.postLogoutRedirectUri &&
                     authClient.authority.protocolMode === ProtocolMode.OIDC) {
-                    this.eventHandler.emitEvent(EventType.LOGOUT_SUCCESS, exports.InteractionType.Popup, validRequest);
+                    this.eventHandler.emitEvent(EventType.LOGOUT_SUCCESS, validRequest.correlationId, exports.InteractionType.Popup, validRequest);
                     if (mainWindowRedirectUri) {
                         const navigationOptions = {
                             apiId: ApiId.logoutPopup,
@@ -14241,10 +14282,10 @@ class PopupClient extends StandardInteractionClient {
             }
             // Create logout string and navigate user window to logout.
             const logoutUri = authClient.getLogoutUri(validRequest);
-            this.eventHandler.emitEvent(EventType.LOGOUT_SUCCESS, exports.InteractionType.Popup, validRequest);
+            this.eventHandler.emitEvent(EventType.LOGOUT_SUCCESS, validRequest.correlationId, exports.InteractionType.Popup, validRequest);
             // Open the popup window to requestUrl.
             const popupWindow = this.openPopup(logoutUri, popupParams);
-            this.eventHandler.emitEvent(EventType.POPUP_OPENED, exports.InteractionType.Popup, { popupWindow }, null);
+            this.eventHandler.emitEvent(EventType.POPUP_OPENED, validRequest.correlationId, exports.InteractionType.Popup, { popupWindow }, null);
             await waitForBridgeResponse(this.config.system.popupBridgeTimeout, this.logger, this.browserCrypto, validRequest).catch(() => {
                 // Swallow any errors related to monitoring the window. Server logout is best effort
             });
@@ -14270,11 +14311,11 @@ class PopupClient extends StandardInteractionClient {
                 e.setCorrelationId(this.correlationId);
                 serverTelemetryManager.cacheFailedRequest(e);
             }
-            this.eventHandler.emitEvent(EventType.LOGOUT_FAILURE, exports.InteractionType.Popup, null, e);
-            this.eventHandler.emitEvent(EventType.LOGOUT_END, exports.InteractionType.Popup);
+            this.eventHandler.emitEvent(EventType.LOGOUT_FAILURE, this.correlationId, exports.InteractionType.Popup, null, e);
+            this.eventHandler.emitEvent(EventType.LOGOUT_END, this.correlationId, exports.InteractionType.Popup);
             throw e;
         }
-        this.eventHandler.emitEvent(EventType.LOGOUT_END, exports.InteractionType.Popup);
+        this.eventHandler.emitEvent(EventType.LOGOUT_END, this.correlationId, exports.InteractionType.Popup);
     }
     /**
      * Opens a popup window with given request Url.
@@ -14437,7 +14478,7 @@ class RedirectClient extends StandardInteractionClient {
             if (event.persisted) {
                 this.logger.verbose("0udvtt", this.correlationId);
                 this.browserStorage.resetRequestCache(this.correlationId);
-                this.eventHandler.emitEvent(EventType.RESTORE_FROM_BFCACHE, exports.InteractionType.Redirect);
+                this.eventHandler.emitEvent(EventType.RESTORE_FROM_BFCACHE, this.correlationId, exports.InteractionType.Redirect);
             }
         };
         const redirectStartPage = this.getRedirectStartPage(request.redirectStartPage);
@@ -14754,7 +14795,7 @@ class RedirectClient extends StandardInteractionClient {
         const validLogoutRequest = this.initializeLogoutRequest(logoutRequest);
         const serverTelemetryManager = initializeServerTelemetryManager(ApiId.logout, this.config.auth.clientId, this.correlationId, this.browserStorage, this.logger);
         try {
-            this.eventHandler.emitEvent(EventType.LOGOUT_START, exports.InteractionType.Redirect, logoutRequest);
+            this.eventHandler.emitEvent(EventType.LOGOUT_START, this.correlationId, exports.InteractionType.Redirect, logoutRequest);
             // Clear cache on logout
             await clearCacheOnLogout(this.browserStorage, this.browserCrypto, this.logger, this.correlationId, validLogoutRequest.account);
             const navigationOptions = {
@@ -14774,7 +14815,7 @@ class RedirectClient extends StandardInteractionClient {
                 }
                 catch {
                     if (validLogoutRequest.account?.homeAccountId) {
-                        this.eventHandler.emitEvent(EventType.LOGOUT_SUCCESS, exports.InteractionType.Redirect, validLogoutRequest);
+                        this.eventHandler.emitEvent(EventType.LOGOUT_SUCCESS, this.correlationId, exports.InteractionType.Redirect, validLogoutRequest);
                         return;
                     }
                 }
@@ -14782,7 +14823,7 @@ class RedirectClient extends StandardInteractionClient {
             // Create logout string and navigate user window to logout.
             const logoutUri = authClient.getLogoutUri(validLogoutRequest);
             if (validLogoutRequest.account?.homeAccountId) {
-                this.eventHandler.emitEvent(EventType.LOGOUT_SUCCESS, exports.InteractionType.Redirect, validLogoutRequest);
+                this.eventHandler.emitEvent(EventType.LOGOUT_SUCCESS, this.correlationId, exports.InteractionType.Redirect, validLogoutRequest);
             }
             // Check if onRedirectNavigate is implemented, and invoke it if so
             const onRedirectNavigate = this.config.auth.onRedirectNavigate;
@@ -14817,11 +14858,11 @@ class RedirectClient extends StandardInteractionClient {
                 e.setCorrelationId(this.correlationId);
                 serverTelemetryManager.cacheFailedRequest(e);
             }
-            this.eventHandler.emitEvent(EventType.LOGOUT_FAILURE, exports.InteractionType.Redirect, null, e);
-            this.eventHandler.emitEvent(EventType.LOGOUT_END, exports.InteractionType.Redirect);
+            this.eventHandler.emitEvent(EventType.LOGOUT_FAILURE, this.correlationId, exports.InteractionType.Redirect, null, e);
+            this.eventHandler.emitEvent(EventType.LOGOUT_END, this.correlationId, exports.InteractionType.Redirect);
             throw e;
         }
-        this.eventHandler.emitEvent(EventType.LOGOUT_END, exports.InteractionType.Redirect);
+        this.eventHandler.emitEvent(EventType.LOGOUT_END, this.correlationId, exports.InteractionType.Redirect);
     }
     /**
      * Use to get the redirectStartPage either from request or use current window
@@ -15312,23 +15353,22 @@ class StandardController {
         if (!this.isBrowserEnvironment) {
             this.logger.info("19fvpi", correlationId);
             this.initialized = true;
-            this.eventHandler.emitEvent(EventType.INITIALIZE_END);
+            this.eventHandler.emitEvent(EventType.INITIALIZE_END, correlationId);
             return;
         }
-        const initCorrelationId = request?.correlationId || this.getRequestCorrelationId();
         const allowPlatformBroker = this.config.system.allowPlatformBroker;
-        const initMeasurement = this.performanceClient.startMeasurement(InitializeClientApplication, initCorrelationId);
-        this.eventHandler.emitEvent(EventType.INITIALIZE_START);
+        const initMeasurement = this.performanceClient.startMeasurement(InitializeClientApplication, correlationId);
+        this.eventHandler.emitEvent(EventType.INITIALIZE_START, correlationId);
         // Broker applications are initialized twice, so we avoid double-counting it
-        this.logMultipleInstances(initMeasurement, initCorrelationId);
-        await invokeAsync(this.browserStorage.initialize.bind(this.browserStorage), InitializeCache, this.logger, this.performanceClient, initCorrelationId)(initCorrelationId);
+        this.logMultipleInstances(initMeasurement, correlationId);
+        await invokeAsync(this.browserStorage.initialize.bind(this.browserStorage), InitializeCache, this.logger, this.performanceClient, correlationId)(correlationId);
         if (allowPlatformBroker) {
             try {
                 // check if platform authentication is available via DOM or browser extension and create relevant handlers
-                this.platformAuthProvider = await getPlatformAuthProvider(this.logger, this.performanceClient, initCorrelationId, this.config.system.nativeBrokerHandshakeTimeout);
+                this.platformAuthProvider = await getPlatformAuthProvider(this.logger, this.performanceClient, correlationId, this.config.system.nativeBrokerHandshakeTimeout);
             }
             catch (e) {
-                this.logger.verbose(e, initCorrelationId);
+                this.logger.verbose(e, correlationId);
             }
         }
         if (this.config.cache.cacheLocation ===
@@ -15336,9 +15376,9 @@ class StandardController {
             this.eventHandler.subscribeCrossTab();
         }
         !this.config.system.navigatePopups &&
-            (await this.preGeneratePkceCodes(initCorrelationId));
+            (await this.preGeneratePkceCodes(correlationId));
         this.initialized = true;
-        this.eventHandler.emitEvent(EventType.INITIALIZE_END);
+        this.eventHandler.emitEvent(EventType.INITIALIZE_END, correlationId);
         initMeasurement.end({
             allowPlatformBroker: allowPlatformBroker,
             success: true,
@@ -15400,11 +15440,11 @@ class StandardController {
             this.platformAuthProvider &&
             !options?.hash;
         let rootMeasurement;
-        this.eventHandler.emitEvent(EventType.HANDLE_REDIRECT_START, exports.InteractionType.Redirect);
         let redirectResponse;
         try {
             if (useNative && this.platformAuthProvider) {
                 const correlationId = platformBrokerRequest?.correlationId || "";
+                this.eventHandler.emitEvent(EventType.HANDLE_REDIRECT_START, correlationId, exports.InteractionType.Redirect);
                 rootMeasurement = this.performanceClient.startMeasurement(AcquireTokenRedirect, correlationId);
                 this.logger.trace("12v7is", correlationId);
                 const nativeClient = new PlatformAuthInteractionClient(this.config, this.browserStorage, this.browserCrypto, this.logger, this.eventHandler, this.navigationClient, ApiId.handleRedirectPromise, this.performanceClient, this.platformAuthProvider, platformBrokerRequest.accountId, this.nativeInternalStorage, platformBrokerRequest.correlationId);
@@ -15413,6 +15453,7 @@ class StandardController {
             else {
                 const [standardRequest, codeVerifier] = this.browserStorage.getCachedRequest("");
                 const correlationId = standardRequest.correlationId;
+                this.eventHandler.emitEvent(EventType.HANDLE_REDIRECT_START, correlationId, exports.InteractionType.Redirect);
                 // Reset rootMeasurement now that we have correlationId
                 rootMeasurement = this.performanceClient.startMeasurement(AcquireTokenRedirect, correlationId);
                 this.logger.trace("0znzs5", correlationId);
@@ -15428,12 +15469,12 @@ class StandardController {
             .then((result) => {
             if (result) {
                 this.browserStorage.resetRequestCache(result.correlationId);
-                this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_SUCCESS, exports.InteractionType.Redirect, result);
+                this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_SUCCESS, result.correlationId, exports.InteractionType.Redirect, result);
                 this.logger.verbose("0ui8f5", result.correlationId);
                 // Emit login event if number of accounts change
                 const isLoggingIn = loggedInAccounts.length < this.getAllAccounts().length;
                 if (isLoggingIn) {
-                    this.eventHandler.emitEvent(EventType.LOGIN_SUCCESS, exports.InteractionType.Redirect, result.account);
+                    this.eventHandler.emitEvent(EventType.LOGIN_SUCCESS, result.correlationId, exports.InteractionType.Redirect, result.account);
                     this.logger.verbose("16im3l", result.correlationId);
                 }
                 rootMeasurement.end({
@@ -15452,14 +15493,14 @@ class StandardController {
                     rootMeasurement.discard();
                 }
             }
-            this.eventHandler.emitEvent(EventType.HANDLE_REDIRECT_END, exports.InteractionType.Redirect);
+            this.eventHandler.emitEvent(EventType.HANDLE_REDIRECT_END, rootMeasurement.event.correlationId, exports.InteractionType.Redirect);
             return result;
         })
             .catch((e) => {
             this.browserStorage.resetRequestCache(rootMeasurement.event.correlationId);
             const eventError = e;
-            this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_FAILURE, exports.InteractionType.Redirect, null, eventError);
-            this.eventHandler.emitEvent(EventType.HANDLE_REDIRECT_END, exports.InteractionType.Redirect);
+            this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_FAILURE, rootMeasurement.event.correlationId, exports.InteractionType.Redirect, null, eventError);
+            this.eventHandler.emitEvent(EventType.HANDLE_REDIRECT_END, rootMeasurement.event.correlationId, exports.InteractionType.Redirect);
             rootMeasurement.end({
                 success: false,
             }, eventError);
@@ -15498,7 +15539,7 @@ class StandardController {
         try {
             redirectPreflightCheck(this.initialized, this.config);
             this.browserStorage.setInteractionInProgress(true, INTERACTION_TYPE.SIGNIN);
-            this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_START, exports.InteractionType.Redirect, request);
+            this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_START, correlationId, exports.InteractionType.Redirect, request);
             let result;
             if (this.platformAuthProvider &&
                 this.canUsePlatformBroker(request)) {
@@ -15540,7 +15581,7 @@ class StandardController {
             else {
                 atrMeasurement.end({ success: false }, e, request.account);
             }
-            this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_FAILURE, exports.InteractionType.Redirect, null, e);
+            this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_FAILURE, correlationId, exports.InteractionType.Redirect, null, e);
             throw e;
         }
     }
@@ -15570,7 +15611,7 @@ class StandardController {
         }
         // If logged in, emit acquire token events
         const loggedInAccounts = this.getAllAccounts();
-        this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_START, exports.InteractionType.Popup, request);
+        this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_START, correlationId, exports.InteractionType.Popup, request);
         let result;
         const pkce = this.getPreGeneratedPkceCodes(correlationId);
         if (this.canUsePlatformBroker(request)) {
@@ -15610,9 +15651,9 @@ class StandardController {
              *  If logged in, emit acquire token events
              */
             const isLoggingIn = loggedInAccounts.length < this.getAllAccounts().length;
-            this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_SUCCESS, exports.InteractionType.Popup, result);
+            this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_SUCCESS, correlationId, exports.InteractionType.Popup, result);
             if (isLoggingIn) {
-                this.eventHandler.emitEvent(EventType.LOGIN_SUCCESS, exports.InteractionType.Popup, result.account);
+                this.eventHandler.emitEvent(EventType.LOGIN_SUCCESS, correlationId, exports.InteractionType.Popup, result.account);
             }
             atPopupMeasurement.end({
                 success: true,
@@ -15622,7 +15663,7 @@ class StandardController {
             return result;
         })
             .catch((e) => {
-            this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_FAILURE, exports.InteractionType.Popup, null, e);
+            this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_FAILURE, correlationId, exports.InteractionType.Popup, null, e);
             atPopupMeasurement.end({
                 success: false,
             }, e, request.account);
@@ -15682,7 +15723,7 @@ class StandardController {
         document.addEventListener("visibilitychange", this.trackPageVisibilityWithMeasurement);
         const loggedInAccounts = this.getAllAccounts();
         this.logger.verbose("0w1b45", correlationId);
-        this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_START, exports.InteractionType.Silent, validRequest);
+        this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_START, correlationId, exports.InteractionType.Silent, validRequest);
         let result;
         if (this.canUsePlatformBroker(validRequest)) {
             result = this.acquireTokenNative(validRequest, ApiId.ssoSilent).catch((e) => {
@@ -15702,9 +15743,9 @@ class StandardController {
         return result
             .then((response) => {
             const isLoggingIn = loggedInAccounts.length < this.getAllAccounts().length;
-            this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_SUCCESS, exports.InteractionType.Silent, response);
+            this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_SUCCESS, correlationId, exports.InteractionType.Silent, response);
             if (isLoggingIn) {
-                this.eventHandler.emitEvent(EventType.LOGIN_SUCCESS, exports.InteractionType.Silent, response.account);
+                this.eventHandler.emitEvent(EventType.LOGIN_SUCCESS, correlationId, exports.InteractionType.Silent, response.account);
             }
             this.ssoSilentMeasurement?.end({
                 success: true,
@@ -15715,7 +15756,7 @@ class StandardController {
             return response;
         })
             .catch((e) => {
-            this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_FAILURE, exports.InteractionType.Silent, null, e);
+            this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_FAILURE, correlationId, exports.InteractionType.Silent, null, e);
             this.ssoSilentMeasurement?.end({
                 success: false,
             }, e, request.account);
@@ -15740,7 +15781,7 @@ class StandardController {
         this.logger.trace("0ch6ga", correlationId);
         const atbcMeasurement = this.performanceClient.startMeasurement(AcquireTokenByCode, correlationId);
         preflightCheck(this.initialized, atbcMeasurement);
-        this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_START, exports.InteractionType.Silent, request);
+        this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_START, correlationId, exports.InteractionType.Silent, request);
         atbcMeasurement.add({ scenarioId: request.scenarioId });
         try {
             if (request.code && request.nativeAccountId) {
@@ -15757,7 +15798,7 @@ class StandardController {
                         correlationId,
                     })
                         .then((result) => {
-                        this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_SUCCESS, exports.InteractionType.Silent, result);
+                        this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_SUCCESS, correlationId, exports.InteractionType.Silent, result);
                         this.hybridAuthCodeResponses.delete(hybridAuthCode);
                         atbcMeasurement.end({
                             success: true,
@@ -15769,7 +15810,7 @@ class StandardController {
                     })
                         .catch((error) => {
                         this.hybridAuthCodeResponses.delete(hybridAuthCode);
-                        this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_FAILURE, exports.InteractionType.Silent, null, error);
+                        this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_FAILURE, correlationId, exports.InteractionType.Silent, null, error);
                         atbcMeasurement.end({
                             success: false,
                         }, error);
@@ -15810,7 +15851,7 @@ class StandardController {
             }
         }
         catch (e) {
-            this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_FAILURE, exports.InteractionType.Silent, null, e);
+            this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_FAILURE, correlationId, exports.InteractionType.Silent, null, e);
             atbcMeasurement.end({
                 success: false,
             }, e);
@@ -16312,7 +16353,7 @@ class StandardController {
      */
     async acquireTokenSilentAsync(request, account) {
         const trackPageVisibility = () => this.trackPageVisibility(request.correlationId);
-        this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_START, exports.InteractionType.Silent, request);
+        this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_START, request.correlationId, exports.InteractionType.Silent, request);
         if (request.correlationId) {
             this.performanceClient.incrementFields({ visibilityChangeCount: 0 }, request.correlationId);
         }
@@ -16322,6 +16363,10 @@ class StandardController {
         const result = this.acquireTokenSilentNoIframe(silentRequest, cacheLookupPolicy).catch(async (refreshTokenError) => {
             const shouldTryToResolveSilently = checkIfRefreshTokenErrorCanBeResolvedSilently(refreshTokenError, cacheLookupPolicy);
             if (shouldTryToResolveSilently) {
+                const silentRefreshReason = `${refreshTokenError.errorCode}${refreshTokenError.subError
+                    ? `|${refreshTokenError.subError}`
+                    : ""}`;
+                this.performanceClient.addFields({ silentRefreshReason }, request.correlationId);
                 if (!this.activeIframeRequest) {
                     let _resolve;
                     // Always set the active request tracker immediately after checking it to prevent races
@@ -16380,7 +16425,7 @@ class StandardController {
         });
         return result
             .then((response) => {
-            this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_SUCCESS, exports.InteractionType.Silent, response);
+            this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_SUCCESS, request.correlationId, exports.InteractionType.Silent, response);
             if (request.correlationId) {
                 this.performanceClient.addFields({
                     fromCache: response.fromCache,
@@ -16390,7 +16435,7 @@ class StandardController {
             return response;
         })
             .catch((tokenRenewalError) => {
-            this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_FAILURE, exports.InteractionType.Silent, null, tokenRenewalError);
+            this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_FAILURE, request.correlationId, exports.InteractionType.Silent, null, tokenRenewalError);
             throw tokenRenewalError;
         })
             .finally(() => {
@@ -16429,7 +16474,7 @@ class StandardController {
                 if (cacheLookupPolicy === CacheLookupPolicy.AccessToken) {
                     throw cacheError;
                 }
-                this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_NETWORK_START, exports.InteractionType.Silent, silentRequest);
+                this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_NETWORK_START, silentRequest.correlationId, exports.InteractionType.Silent, silentRequest);
                 return invokeAsync(this.acquireTokenByRefreshToken.bind(this), AcquireTokenByRefreshToken, this.logger, this.performanceClient, silentRequest.correlationId)(silentRequest, cacheLookupPolicy);
             });
         }
@@ -16759,19 +16804,36 @@ class NestedAppAuthAdapter {
             effectiveIdTokenClaims?.oid ||
             effectiveIdTokenClaims?.sub ||
             "";
-        const tenantId = fromAccount.tenantId || effectiveIdTokenClaims?.tid || "";
-        const homeAccountId = fromAccount.homeAccountId || `${localAccountId}.${tenantId}`;
-        const username = fromAccount.username ||
-            effectiveIdTokenClaims?.preferred_username ||
+        /*
+         * In B2C scenarios tid may not be present, use getTenantIdFromIdTokenClaims
+         * which handles tid, tfp (modern B2C), and acr (legacy B2C) claims
+         */
+        const tenantId = fromAccount.tenantId ||
+            getTenantIdFromIdTokenClaims(effectiveIdTokenClaims) ||
             "";
-        const name = fromAccount.name || effectiveIdTokenClaims?.name;
+        const homeAccountId = fromAccount.homeAccountId || `${localAccountId}.${tenantId}`;
+        // Validate environment - required field
+        const environment = fromAccount.environment;
+        if (!environment) {
+            throw createClientAuthError(invalidCacheEnvironment);
+        }
+        /*
+         * In B2C scenarios the emails claim is used instead of preferred_username and it is an array.
+         * In most cases it will contain a single email. This field should not be relied upon if a custom
+         * policy is configured to return more than 1 email.
+         */
+        const preferredUsername = effectiveIdTokenClaims?.preferred_username ||
+            effectiveIdTokenClaims?.upn;
+        const email = effectiveIdTokenClaims?.emails?.[0] || null;
+        const username = fromAccount.username || preferredUsername || email || "";
+        const name = fromAccount.name || effectiveIdTokenClaims?.name || "";
         const loginHint = fromAccount.loginHint || effectiveIdTokenClaims?.login_hint;
         const tenantProfiles = new Map();
         const tenantProfile = buildTenantProfile(homeAccountId, localAccountId, tenantId, effectiveIdTokenClaims);
         tenantProfiles.set(tenantId, tenantProfile);
         const account = {
             homeAccountId,
-            environment: fromAccount.environment,
+            environment,
             tenantId,
             username,
             localAccountId,
@@ -16942,7 +17004,7 @@ class NestedAppAuthController {
     async acquireTokenInteractive(request) {
         const validRequest = this.ensureValidRequest(request);
         const correlationId = validRequest.correlationId || createNewGuid();
-        this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_START, exports.InteractionType.Popup, validRequest);
+        this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_START, correlationId, exports.InteractionType.Popup, validRequest);
         const atPopupMeasurement = this.performanceClient.startMeasurement(AcquireTokenPopup, correlationId);
         atPopupMeasurement.add({ nestedAppAuthRequest: true });
         try {
@@ -16966,7 +17028,7 @@ class NestedAppAuthController {
                 environment: result.account.environment,
                 tenantId: result.account.tenantId,
             };
-            this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_SUCCESS, exports.InteractionType.Popup, result);
+            this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_SUCCESS, correlationId, exports.InteractionType.Popup, result);
             atPopupMeasurement.add({
                 accessTokenSize: result.accessToken.length,
                 idTokenSize: result.idToken.length,
@@ -16981,7 +17043,7 @@ class NestedAppAuthController {
             const error = e instanceof AuthError
                 ? e
                 : this.nestedAppAuthAdapter.fromBridgeError(e);
-            this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_FAILURE, exports.InteractionType.Popup, null, e);
+            this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_FAILURE, correlationId, exports.InteractionType.Popup, null, e);
             atPopupMeasurement.end({
                 success: false,
             }, e, request.account);
@@ -16996,11 +17058,11 @@ class NestedAppAuthController {
     async acquireTokenSilentInternal(request) {
         const validRequest = this.ensureValidRequest(request);
         const correlationId = validRequest.correlationId || createNewGuid();
-        this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_START, exports.InteractionType.Silent, validRequest);
+        this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_START, correlationId, exports.InteractionType.Silent, validRequest);
         // Look for tokens in the cache first
         const result = await this.acquireTokenFromCache(validRequest);
         if (result) {
-            this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_SUCCESS, exports.InteractionType.Silent, result);
+            this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_SUCCESS, correlationId, exports.InteractionType.Silent, result);
             return result;
         }
         // proceed with acquiring tokens via the host
@@ -17031,7 +17093,7 @@ class NestedAppAuthController {
                 environment: result.account.environment,
                 tenantId: result.account.tenantId,
             };
-            this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_SUCCESS, exports.InteractionType.Silent, result);
+            this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_SUCCESS, correlationId, exports.InteractionType.Silent, result);
             ssoSilentMeasurement?.add({
                 accessTokenSize: result.accessToken.length,
                 idTokenSize: result.idToken.length,
@@ -17046,7 +17108,7 @@ class NestedAppAuthController {
             const error = e instanceof AuthError
                 ? e
                 : this.nestedAppAuthAdapter.fromBridgeError(e);
-            this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_FAILURE, exports.InteractionType.Silent, null, e);
+            this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_FAILURE, correlationId, exports.InteractionType.Silent, null, e);
             ssoSilentMeasurement?.end({
                 success: false,
             }, e, request.account);
@@ -17089,7 +17151,7 @@ class NestedAppAuthController {
                 return null;
         }
         if (result) {
-            this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_SUCCESS, exports.InteractionType.Silent, result);
+            this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_SUCCESS, correlationId, exports.InteractionType.Silent, result);
             atsMeasurement.add({
                 accessTokenSize: result.accessToken.length,
                 idTokenSize: result.idToken.length,
@@ -17100,7 +17162,7 @@ class NestedAppAuthController {
             return result;
         }
         this.logger.warning("1yb4fi", correlationId);
-        this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_FAILURE, exports.InteractionType.Silent, null);
+        this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_FAILURE, correlationId, exports.InteractionType.Silent, null);
         atsMeasurement.end({
             success: false,
         }, undefined, request.account);