Agentic doesn't work outside the public cloud

[bgavrilMS]

Microsoft.Identity.Web Library

Microsoft.Identity.Web

Microsoft.Identity.Web version

4.4.0

Web app

Not Applicable

Web API

Not Applicable

Token cache serialization

Not Applicable

Description

The FIC audience is hardcoded to "api://AzureAdTokenExchange", which only works for the public cloud.

Reproduction steps

a

Error message

No response

Id Web logs

No response

Relevant code snippets

a

Regression

No response

Expected behavior

Ideally it should work on all clouds out of the box. A config is possible for the FIC audience.

[bgavrilMS]

We should have some injection of cloud specific information into Identity.Web. We already do this for attribute tokens in our 1p SDK. Then in Id.Web there will be a singleton service that provides various strings (e.g. audience) for endpoints. And 1p SDK can inject information about non-public clouds.