You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
Repository navigation
[Bug] HttpClientTransport setting is not applied after MSAL upgraded #6124
Thanks for the report. I ran a real repro on 4.85.2: a normal IMDS managed-identity acquisition with a custom  HttpClientTransport (plain IMsalHttpClientFactory ) correctly routes every request through the caller's transport â so I can't reproduce a transport bypass on the IMDS path in 4.85.2. To pin this down, could you confirm:
Which MI host? What does the log say right after "Detecting managed identity sourceâĶ" â Service Fabric, App Service, Azure Arc, or plain IMDS VM?
Does 4.84.2 work and 4.85.0 already break, or only 4.85.2?
Verbose log of the failing token call â the  [HttpManager] Sending request âĶ Host: âĶ lines â so we can see whether it went through your client.
Symptom: wrong-tenant/issuer token (transport bypassed), or an outright error?
Note: the one place MSAL still builds its own  HttpClient (bypassing a plain custom transport) is Service Fabric, to attach its server-cert validation callback â but that's been the case since 4.62.0 (#4818), so it wouldn't be a 4.84.2â4.85.2 regression. If you're on Service Fabric, the supported path is to supply an IMsalSFHttpClientFactory .
Activity
bgavrilMS commentedon Jul 21, 2026
Gladwin Johnson VR (@gladjohn) - can you pls take a look
gladjohn commentedon Aug 7, 2026
xula2018 apologies for the delay on this one
Thanks for the report. I ran a real repro on 4.85.2: a normal IMDS managed-identity acquisition with a custom  HttpClientTransport (plain IMsalHttpClientFactory ) correctly routes every request through the caller's transport â so I can't reproduce a transport bypass on the IMDS path in 4.85.2. To pin this down, could you confirm:
Note: the one place MSAL still builds its own  HttpClient (bypassing a plain custom transport) is Service Fabric, to attach its server-cert validation callback â but that's been the case since 4.62.0 (#4818), so it wouldn't be a 4.84.2â4.85.2 regression. If you're on Service Fabric, the supported path is to supply an IMsalSFHttpClientFactory .