# Microsoft Deprecating ADAL June 2022


## Issue

{{< admonition warning "Support for Active Directory Authentication Library (ADAL) will end on June 30, 2022" true  >}}
Microsoft advised last year that from June 2020 further development for ADAL would be discontinued and that customers should review their workloads and plan to migrate to MSAL before June 2022, when ADAL would be deprecated.
{{< /admonition >}} 

So, what is happening? Active Directory Authentication Library (ADAL) and the Azure AD Graph API will no longer respond to requests from 
Here is the initial announcement: [Link](https://techcommunity.microsoft.com/t5/azure-active-directory-identity/update-your-applications-to-use-microsoft-authentication-library/ba-p/1257363)

Here is the GitHub issue: [Link](https://github.com/azure-deprecation/dashboard/issues/178)

### Why is this an issue?

If you check out the downloads of the ADAL package it is still being used extensively. The following link shows the graph of the last six weeks.
https://www.nuget.org/stats/packages/Microsoft.IdentityModel.Clients.ActiveDirectory?groupby=Version

<br>

![Microsoft.IdentityModel.Clients.ActiveDirectory Graph](/Microsoft.IdentityModel.Clients.ActiveDirectory.webp)

<br>
Yikes!

Any scripts or automation using the [MSOnline](https://docs.microsoft.com/en-us/powershell/module/msonline/?view=azureadps-1.0) PowerShell module will also break. 

{{< admonition quote "Use the newer Azure Active Directory V2 PowerShell module" true  >}}
Customers are encouraged to use the newer Azure Active Directory V2 PowerShell module instead of this module... This is a problem.

{{< /admonition >}} 

The MSOnline module has been deprecated for quite some time (a few years now), but not all the functionality has been migrated to the recommended modules. For example: 

{{< admonition quote "Microsoft further states:" true  >}}
"We don't have an equivalent for Set-MsolDomainAuthentication or Get-MsolDomainAuthentication right now, but eventually these will be part of MS Graph module. The Azure AD module will die with the AAD graph shutdown in 2022."
{{< /admonition >}} 

Regardless, there is a **hard deadline**, functionality or no.

{{< admonition quote "" true  >}}
On June 30, 2022, "apps using Azure AD Graph after this time will no longer receive responses from the Azure AD Graph endpoint. Apps using ADAL on existing OS versions will continue to work after this time but will not get any technical support or security updates," Microsoft said.
{{< /admonition >}} 

So, what to do?

## Solution

### Determine Usage

First, how to determine what applications are using ADAL? Thankfully, Microsoft have provided some tools and guidance.

[Get a complete list of apps using ADAL in your tenant](https://docs.microsoft.com/en-us/azure/active-directory/develop/howto-get-list-of-all-active-directory-auth-library-apps)

The article takes you through setting up capturing Azure AD activity sign-in logs and using a workbook to obtain a list of apps that are using ADAL in the tenancy. 

### Migrate
The previous article contains [section](https://docs.microsoft.com/en-us/azure/active-directory/develop/howto-get-list-of-all-active-directory-auth-library-apps#step-4-update-your-code) for developers on how to update code to use the new [MSAL](https://docs.microsoft.com/en-us/azure/active-directory/develop/reference-v2-libraries) libraries.

Guidance on on how to migrate from AAD Graph to Microsoft Graph is provided here:
[Azure Active Directory (Azure AD) Graph to Microsoft Graph migration FAQ](https://docs.microsoft.com/en-us/graph/migrate-azure-ad-graph-faq)

For the PowerShell [MSOnline](https://docs.microsoft.com/en-us/powershell/module/msonline/?view=azureadps-1.0) module, I am afraid there is no choice but to start using the [Azure Active Directory PowerShell for Graph](https://docs.microsoft.com/en-us/powershell/azure/active-directory/overview) module, despite the lack of available features from the previous modules and that you have to work harder to get the same result <i class='fa fa-frown'></i>

If you haven't started checking your existing apps, sign-ins, scripts, functions, and other automation's, I hope this helps get you motivated and started! This change will roll around fast.

Cheers!