Skip to content

Commit 69e58c3

Browse files
bgavrilMSpmaytak
andauthored
Update regional-authorities.md (#7078)
@trwalke and @Robbie-Microsoft - please review. --------- Co-authored-by: Peter <34331512+pmaytak@users.noreply.github.com>
1 parent 4d3c84b commit 69e58c3

1 file changed

Lines changed: 4 additions & 2 deletions

File tree

lib/msal-node/docs/regional-authorities.md

Lines changed: 4 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,7 @@
11
# Enabling regional authorities
22

3+
> NOTE: This legacy feature is only available for internal Microsoft services and the client credential flow. It is recommended to use [Managed Identity](https://github.com/AzureAD/microsoft-authentication-library-for-js/blob/dev/lib/msal-node/docs/managed-identity.md) instead.
4+
35
To increase the reliability, availability and performance of Azure, regionalization aims to keep all trafic inside a geographical area. For example, if an app needs to fetch data from Key Vault in WestUs2, all the traffic this entails - including MSAL generated traffic - should stay in WestUs2.
46

57
A few important notes about regional authorities:
@@ -8,7 +10,7 @@ A few important notes about regional authorities:
810

911
- A token obtained for one region is valid for the non-regional endpoint (tokens for "westus2.login.microsoft.com " are the same as tokens for "login.microsotonline.com "). And vice-versa. It's the same token, minus one claim called rh
1012

11-
> NOTE: This feature is currently only available for the client credential flow.
13+
1214

1315
## Confguration
1416

@@ -47,7 +49,7 @@ cca.acquireTokenByClientCredential(clientCredentialRequest)
4749
});
4850
```
4951

50-
> NOTE: If you provide the value `"TryAutoDetect"` in the `azureRegion` field, the msal library which will try to discover the region the application has been deployed to and use that region. If no region is auto discovered the library will fall back to using the global authority.
52+
> NOTE: If you provide the value `"TryAutoDetect"` in the `azureRegion` field, the msal library which will try to discover the region the application has been deployed to and use that region. This is unreliable and should be avoided.
5153
5254
## Sample
5355

0 commit comments

Comments
 (0)