Meta

• Author: Microsoft Corporation License-Expression: MIT
• Requires: Python >=3.10

Classifiers

• Operating System
  • OS Independent
• Programming Language
  • Python :: 3
  • Python :: 3.10
  • Python :: 3.11
  • Python :: 3.12
  • Python :: 3.13
  • Python :: 3.14

Microsoft Agents MSAL Authentication

👁 PyPI version

Provides secure authentication for your agents using Microsoft Authentication Library (MSAL). It handles getting tokens from Azure AD so your agent can securely communicate with Microsoft services like Teams, Graph API, and other Azure resources.

What is this?

This library is part of the Microsoft 365 Agents SDK for Python - a comprehensive framework for building enterprise-grade conversational AI agents. The SDK enables developers to create intelligent agents that work across multiple platforms including Microsoft Teams, M365 Copilot, Copilot Studio, and web chat, with support for third-party integrations like Slack, Facebook Messenger, and Twilio.

Release Notes

Version	Date	Release Notes
1.0.0	2026-05-22	1.0.0 Release Notes
0.9.0	2026-04-15	0.9.0 Release Notes
0.8.0	2026-02-23	0.8.0 Release Notes
0.7.0	2026-01-21	0.7.0 Release Notes
0.6.1	2025-12-01	0.6.1 Release Notes
0.6.0	2025-11-18	0.6.0 Release Notes
0.5.0	2025-10-22	0.5.0 Release Notes

Packages Overview

We offer the following PyPI packages to create conversational experiences based on Agents:

Package Name	PyPI Version	Description
microsoft-agents-activity	👁 PyPI	Types and validators implementing the Activity protocol spec.
microsoft-agents-hosting-core	👁 PyPI	Core library for Microsoft Agents hosting.
microsoft-agents-hosting-aiohttp	👁 PyPI	Configures aiohttp to run the Agent.
microsoft-agents-hosting-teams	👁 PyPI	Provides classes to host an Agent for Teams.
microsoft-agents-storage-blob	👁 PyPI	Extension to use Azure Blob as storage.
microsoft-agents-storage-cosmos	👁 PyPI	Extension to use CosmosDB as storage.
microsoft-agents-authentication-msal	👁 PyPI	MSAL-based authentication for Microsoft Agents.

Additionally we provide a Copilot Studio Client, to interact with Agents created in CopilotStudio:

Package Name	PyPI Version	Description
microsoft-agents-copilotstudio-client	👁 PyPI	Direct to Engine client to interact with Agents created in CopilotStudio

Installation

pipinstallmicrosoft-agents-authentication-msal

Quick Start

Basic Setup with Client Secret

Define your client secrets in the ENV file

CONNECTIONS__SERVICE_CONNECTION__SETTINGS__CLIENTID=client-id
CONNECTIONS__SERVICE_CONNECTION__SETTINGS__CLIENTSECRET=client-secret
CONNECTIONS__SERVICE_CONNECTION__SETTINGS__TENANTID=tenant-id

Load the Configuration (Code from main.py Quickstart Sample)

from.start_serverimport start_server

start_server(
 agent_application=AGENT_APP,
 auth_configuration=CONNECTION_MANAGER.get_default_connection_configuration(),
)

Then start the Agent (code snipped from (start_server.py Quickstart Sample](https://github.com/microsoft/Agents/blob/main/samples/python/quickstart/src/start_server.py)):

defstart_server(
 agent_application: AgentApplication, auth_configuration: AgentAuthConfiguration
):
 async defentry_point(req: Request) -> Response:
 agent: AgentApplication = req.app["agent_app"]
 adapter: CloudAdapter = req.app["adapter"]
 return await start_agent_process(
 req,
 agent,
 adapter,
 )
[...]

Authentication Types

The M365 Agents SDK in Python supports the following Auth types:

classAuthTypes(str, Enum):
 certificate = "certificate"
 certificate_subject_name = "CertificateSubjectName"
 client_secret = "ClientSecret"
 user_managed_identity = "UserManagedIdentity"
 system_managed_identity = "SystemManagedIdentity"

Key Classes

• MsalAuth - Core authentication provider using MSAL
• MsalConnectionManager - Manages multiple authentication connections

Features

✅ Multiple auth types - Client secret, certificate, managed identity
✅ Token caching - Automatic token refresh and caching
✅ Multi-tenant - Support for different Azure AD tenants
✅ Agent-to-agent - Secure communication between agents
✅ On-behalf-of - Act on behalf of users

Security Best Practices

• Store secrets in Azure Key Vault or environment variables
• Use managed identities when possible (no secrets to manage)
• Regularly rotate client secrets and certificates
• Use least-privilege principle for scopes and permissions

Quick Links

• 📦 All SDK Packages on PyPI
• 📖 Complete Documentation
• 💡 Python Samples Repository
• 🐛 Report Issues

Sample Applications

Explore working examples in the Python samples repository:

Name	Description	README
Quickstart	Simplest agent	Quickstart
Auto Sign In	Simple OAuth agent using Graph and GitHub	auto-signin
OBO Authorization	OBO flow to access a Copilot Studio Agent	obo-authorization
Semantic Kernel Integration	A weather agent built with Semantic Kernel	semantic-kernel-multiturn
Streaming Agent	Streams OpenAI responses	azure-ai-streaming
Copilot Studio Client	Console app to consume a Copilot Studio Agent	copilotstudio-client
Cards Agent	Agent that uses rich cards to enhance conversation design	cards

Verified details

These details have been verified by PyPI

Maintainers

👁 Avatar for microsoft from gravatar.com
microsoft

Unverified details

These details have not been verified by PyPI

Project links

• Homepage

• Download URL: microsoft_agents_authentication_msal-1.0.0.tar.gz
• Upload date: May 22, 2026
• Size: 13.5 kB
• Tags: Source
• Uploaded using Trusted Publishing? No
• Uploaded via: RestSharp/106.13.0.0

Hashes for microsoft_agents_authentication_msal-1.0.0.tar.gz

Algorithm	Hash digest
SHA256	836c020d11d5a02b3f5fe9f0fdc1cf50ef2947f5fe6d7f36e2040be682c14a1d
MD5	ecf90b05614dd41fc903d1bd597baf59
BLAKE2b-256	ee4a3fb72ad7530d959047c692b7737a8b51c8912ea2c210c52c11f76d225e83

See more details on using hashes here.

• Download URL: microsoft_agents_authentication_msal-1.0.0-py3-none-any.whl
• Upload date: May 22, 2026
• Size: 12.4 kB
• Tags: Python 3
• Uploaded using Trusted Publishing? No
• Uploaded via: RestSharp/106.13.0.0

Hashes for microsoft_agents_authentication_msal-1.0.0-py3-none-any.whl

Algorithm	Hash digest
SHA256	142b366bdc51e29ee50e62531e9638491ec1b68bc7d5072ff211010171782e62
MD5	4e643620be0329a17aabab9d75c5479b
BLAKE2b-256	8b4c4c58c63cac9136bdad24a0f0a6ac82106a20c22e487d79dd2a2dd05fd6a2

See more details on using hashes here.