Question: Is Prompt.ForceLogin Supposed to Show Consent Request UI If Required Also?

I’m running into AADSTS65001 error for a new user account. Previous behavior from ADAL, I believe, was if UI was presented, consent request was displayed right after.

Is Prompt.ForceLogin also supposed to show consent request IF not previously granted? I understand Prompt.Consent exists, but don’t want to request it if already granted.

[jmprieur]

@myokeeh We don’t recommend you to use neither Prompt.ForceLogin, nor Prompt.Consent. Using the default prompt does the best possible.

However to pre-prompt the user upfront, you can use the .WithExtraScopesToConsent method

string[] scopes = { resourceId + "/user_impersonation" };
var users = await pca.GetAccountsAsync();
var user = users.FirstOrDefault();
 try
                {
                    msalar = await pca.AcquireTokenSilent(scopes, user)
                                      .ExecuteAsync();
                }
                catch (MsalUiRequiredException ee)
                {
                        //present UI to have user consent
                        msalar = await pca.AcquireTokenInteractive(scopes, user)
                                          .WithExtraScopesToConsent(new [] {"user.read"})
                                          .WithClaims(ee.Claims)
                                          .ExecuteAsync();
                }

[jmprieur]

Thanks for the update @myokeeh !