Fix misleading comment in CertificatelessOptions.ManagedIdentityClientId

[Copilot]

The XML documentation for ManagedIdentityClientId incorrectly stated it should contain the "object ID of the managed identity service principal" when it actually expects the client ID.

Changes

• Updated XML documentation in CertificatelessOptions.cs to correctly specify "client ID of the managed identity"
• Synchronized Microsoft.Identity.Web.xml with the corrected documentation

Before:

/// If Azure AD is the issuer, this value should be the object
/// ID of the managed identity service principal in the tenant that will be used to 
/// impersonate the app.

After:

/// If Azure AD is the issuer, this value should be the client
/// ID of the managed identity.

This aligns the documentation with the property name change made in PR #2021.

Original prompt

---

This section details on the original issue you should resolve

<issue_title>Misleading comment in</issue_title>
<issue_description>### Microsoft.Identity.Web Library

Microsoft.Identity.Web.CertificateLess

Microsoft.Identity.Web version

3.9.4.0

Web app

Not Applicable

Web API

Not Applicable

Token cache serialization

Not Applicable

Description

#2021 fixed the naming of the ManagedIdentityClientId property, but the comment is misleading.
It reads "If Azure AD is the issuer, this value should be the object ID of the managed identity service principal in the tenant that will be used to impersonate the app." This should read "If Azure AD is the issuer, this value should be the client ID of the managed identity." The same erroneous text is in the documentation.
https://learn.microsoft.com/en-us/dotnet/api/microsoft.identity.web.certificatelessoptions.managedidentityclientid?view=msal-model-dotnet-latest#microsoft-identity-web-certificatelessoptions-managedidentityclientid

Reproduction steps

View

microsoft-identity-web/src/Microsoft.Identity.Web.Certificateless/CertificatelessOptions.cs

Line 20 in 13d95b2

/// and Azure Active Directory. If Azure AD is the issuer, this value should be the object

Error message

No response

Id Web logs

No response

Relevant code snippets

//
    // Summary:
    //     The value is used to establish a connection between external workload identities
    //     and Azure Active Directory. If Azure AD is the issuer, this value should be the
    //     object ID of the managed identity service principal in the tenant that will be
    //     used to impersonate the app. Can be null if you are using the machine assigned
    //     managed identity. Needs to be assigned if you are using a user assigned managed
    //     identity.
    public string? ManagedIdentityClientId { get; set; }

Regression

No response

Expected behavior

Accurate comment</issue_description>

Comments on the Issue (you are @copilot in this section)

• Fixes Misleading comment in #3666

---

✨ Let Copilot coding agent set things up for you — coding agent works faster and does higher quality work when set up for your repo.