Detect Microsoft Authentication
The Microsoft Authentication Library for JavaScript enables both client-side and server-side JavaScript applications to authenticate users using Azure AD for work and school accounts (AAD), Microsoft personal accounts (MSA), and social identity providers like Facebook, Google, LinkedIn, Microsoft accounts, etc. through Azure AD B2C service.
Detection looks at javascript globals across 3 fingerprint rules among the site's public responses.
Websites using Microsoft Authentication
Loading website list…
Signal classes
PluginView evaluates public page signals in these classes when identifying Microsoft Authentication. Individual fingerprint rule bodies are proprietary and are not published.
- JavaScript globals
Example public indicators for Microsoft Authentication
Illustrative indicators derived from public catalog metadata for Microsoft Authentication. A live scan may match additional proprietary rules beyond these examples.
- Msal.Authority
- msal.authorityInstance
- msalConfig.auth
What a detection means
- Establishes
- One or more public signals on the scanned page matched a known Microsoft Authentication signature (3 rules) at the time of the scan.
- Does not establish
- A sitewide install of Microsoft Authentication, an active vendor contract, exclusive use, or that Microsoft Authentication is still in place today.
How to check a site for Microsoft Authentication
- 1. Enter the website URL in the scan form — homepage, pricing, checkout, or login pages usually expose the strongest Microsoft Authentication signals.
- 2. PluginView reads only public responses (javascript globals) and scores them against the Microsoft Authentication signature set (3 rules).
- 3. Review the confidence score and text explanation for Microsoft Authentication on the results page.
FAQ: detecting Microsoft Authentication
- Can PluginView detect Microsoft Authentication without logging in?
- Yes. PluginView only reads publicly accessible responses when checking for Microsoft Authentication — typically javascript globals. It does not bypass authentication or paywalls.
- What category is Microsoft Authentication?
- Microsoft Authentication is classified under Authentication, JavaScript libraries in the PluginView directory.
- How many fingerprint rules cover Microsoft Authentication?
- This reference currently tracks 3 fingerprint rules across javascript globals. Individual rule bodies are proprietary and are not published.
- What public signals suggest a site uses Microsoft Authentication?
- Illustrative public indicators for Microsoft Authentication include Msal.Authority; msal.authorityInstance; msalConfig.auth. A live scan may match additional proprietary rules beyond these examples.
