Remove IWA from default auth modes.

[Haard30]

Testing

Ran below commands with --verbosity debug and specifying no modes option (default modes)

azureauth ado pat
azureauth aad
azureauth ado token

Output

2024-11-07 17:50:11.0789 | DEBUG | logger: AzureAuth | Starting CachedAuth...
2024-11-07 17:50:11.0965 | DEBUG | logger: AzureAuth | Accounts found in cache: (0):
2024-11-07 17:50:11.0965 | DEBUG | logger: AzureAuth |
2024-11-07 17:50:11.1101 | DEBUG | logger: AzureAuth | Filtering cached accounts with preferred domain 'microsoft.com'
2024-11-07 17:50:11.1101 | DEBUG | logger: AzureAuth | Accounts found in cache after filtering: (0):
2024-11-07 17:50:11.1101 | DEBUG | logger: AzureAuth |
2024-11-07 17:50:11.1101 | DEBUG | logger: AzureAuth | No cached account
2024-11-07 17:50:11.1101 | DEBUG | logger: AzureAuth | Starting Broker...
2024-11-07 17:50:11.1307 | DEBUG | logger: AzureAuth | Accounts found in cache: (1):
2024-11-07 17:50:11.1307 | DEBUG | logger: AzureAuth | <user>@microsoft.com
2024-11-07 17:50:11.1307 | DEBUG | logger: AzureAuth | Filtering cached accounts with preferred domain 'microsoft.com'
2024-11-07 17:50:11.1307 | DEBUG | logger: AzureAuth | Accounts found in cache after filtering: (1):
2024-11-07 17:50:11.1307 | DEBUG | logger: AzureAuth | <user>@microsoft.com
2024-11-07 17:50:11.1392 | DEBUG | logger: AzureAuth | Using cached account '<user>@microsoft.com'
2024-11-07 17:50:11.5928 | DEBUG | logger: AzureAuth | Broker success: True.

With
$env:Corext_NonInteractive=1

❯ .\azureauth.exe aad --alias ado --verbosity debug
2024-11-07 18:01:10.5158 | DEBUG | logger: Microsoft.Office.Lasso.LassoMcMaster | Log file: ...\azureauth.2024_11_07_18_01_10.13000.log.json
2024-11-07 18:01:10.5158 | DEBUG | logger: Microsoft.Office.Lasso.LassoMcMaster | CommandLineArgs: aad --alias ado --verbosity debug
2024-11-07 18:01:10.5328 | WARN | logger: AzureAuth | Interactive authentication is disabled.
2024-11-07 18:01:10.5328 | WARN | logger: AzureAuth | Only Integrated Windows Authentication will be attempted.
2024-11-07 18:01:10.5743 | DEBUG | logger: AzureAuth | Starting CachedAuth...
2024-11-07 18:01:10.5917 | DEBUG | logger: AzureAuth | Accounts found in cache: (0):
2024-11-07 18:01:10.5917 | DEBUG | logger: AzureAuth |
2024-11-07 18:01:10.5917 | DEBUG | logger: AzureAuth | No cached account
2024-11-07 18:01:10.5917 | DEBUG | logger: AzureAuth | Starting IntegratedWindowsAuthentication...
2024-11-07 18:01:11.4495 | DEBUG | logger: AzureAuth | IWA only works on corporate AD backed network, AzureAuth is trying to use other auth flows if applicable.
2024-11-07 18:01:11.4495 | DEBUG | logger: AzureAuth | Turn on VPN for IWA mode to succeed.
2024-11-07 18:01:11.4495 | DEBUG | logger: AzureAuth | Exception caught during iwa token acquisition
2024-11-07 18:01:11.4495 | DEBUG | logger: AzureAuth | There was an error parsing the WS-Trust response from the endpoint.
This may occur if there are issues with your ADFS configuration. See https://aka.ms/msal-net-iwa-troubleshooting for more details.