GraphServiceClient in a multitenant app with authentication provider for app credential

[guru98]

Hi,
i have an azure function that call microsoft graph. It'is multitenant. I would like to have a single GraphServiceClient to manage the different request for the different domain. Technically i can create an authentication provider where i do not specificy tenant in the ConfidentialClientApplicationBuilder and then i can specify it in the AcquireTokenForClient but the Authentication provider in the GraphServiceClient creation have just a method that have been invoked that have HttpRequestMessage as a parameter and doesn't contain Tenant info. This scenario is valuable, in my mind, becouse i can use token cache. Any best practice?
AB#7231

[pschaeflein]

If you look at the Microsoft.Identity.Web.MicrosoftGraph project, you will see that they extend the BaseRequest, putting an Options object in a property bag of the request. The authentication provider can then pull that object off the request and act accordingly.

Using this pattern, you can have a method similar to WithAppOnly that can pass the tenant data to the auth provider.

[guru98]

@pschaeflein Thanks i worked in the way you have suggest and it works. Thanks a lot

[andrueastman]

@guru98 I am closing this issue as it seems the question has been resolved.