From d8d455590fcbdd16edbfc5576498f45ed47e5d07 Mon Sep 17 00:00:00 2001 From: Neha Bhargava Date: Tue, 23 Jun 2026 11:06:27 -0700 Subject: [PATCH] Skip AcquireTokenWithMtlsPop test: AAD westus3 test slice returns Bearer MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit The E2E test AcquireTokenWithMtlsPop_WithBindingCertificate_ReturnsMtlsPopToken fails consistently in the PR pipeline with: MsalClientException: You asked for token type mtls_pop, but receive Bearer. Root cause is server-side: the AAD westus3 test-slice mtlsauth endpoint is downgrading token_type=mtls_pop responses to Bearer. MSAL is correctly routing to westus3.mtlsauth.microsoft.com, sending token_type=mtls_pop, and presenting the SNI cert. The matching MSAL.NET test against the global mtlsauth.microsoft.com endpoint continues to pass, isolating the issue to the test slice — not a Microsoft.Identity.Web or MSAL regression. Skip the test via [Fact(Skip = "...")] (the repo's established pattern for known-broken external-dependency tests) until the AAD test slice honors token_type=mtls_pop again. Tracking: #3891 Related: AzureAD/microsoft-authentication-library-for-dotnet#6084 Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> --- tests/E2E Tests/TokenAcquirerTests/TokenAcquirer.cs | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/tests/E2E Tests/TokenAcquirerTests/TokenAcquirer.cs b/tests/E2E Tests/TokenAcquirerTests/TokenAcquirer.cs index b1f9d6d50..e5fb1819b 100644 --- a/tests/E2E Tests/TokenAcquirerTests/TokenAcquirer.cs +++ b/tests/E2E Tests/TokenAcquirerTests/TokenAcquirer.cs @@ -428,7 +428,7 @@ public async Task AcquireTokenWithMs10AtPop_ClientCredentialsAsync() Assert.NotNull(result.AccessToken); } - [Fact] + [Fact(Skip = "AAD westus3 test-slice mtlsauth endpoint currently returns token_type=Bearer instead of mtls_pop, which is a server-side issue on the test slice (not a Microsoft.Identity.Web or MSAL regression). Re-enable once the AAD test slice is fixed. Tracking: https://github.com/AzureAD/microsoft-identity-web/issues/3891")] // [Fact] public async Task AcquireTokenWithMtlsPop_WithBindingCertificate_ReturnsMtlsPopToken() {