diff --git a/src/client/Microsoft.Identity.Client/AppConfig/ConfidentialClientApplicationBuilder.cs b/src/client/Microsoft.Identity.Client/AppConfig/ConfidentialClientApplicationBuilder.cs index 9bc7b3c1c5..f3e36738a5 100644 --- a/src/client/Microsoft.Identity.Client/AppConfig/ConfidentialClientApplicationBuilder.cs +++ b/src/client/Microsoft.Identity.Client/AppConfig/ConfidentialClientApplicationBuilder.cs @@ -238,8 +238,8 @@ internal override void Validate() throw new MsalClientException( MsalError.RegionalAuthorityValidation, "You configured both Regional Authority and Authority Validation. Authority validation is not currently supported for regional Azure authorities." + - "You can set the validateAuthority flag to false to use Azure Regional authority. Do not disable authority validation if you read the authority from a potentially unstrusted source, " + - "for example from the WWWAuthenticate header of an HTTP request that resulted in a 401 response." ); + "You can set the validateAuthority flag to false to use Azure Regional authority. Do not disable authority validation if you read the authority from an untrusted source, " + + "for example from the WWWAuthenticate header of an HTTP request that resulted in a 401 response. See https://aka.ms/msal-net-regional for details."); } } diff --git a/src/client/Microsoft.Identity.Client/MsalError.cs b/src/client/Microsoft.Identity.Client/MsalError.cs index 11a5439ce6..3648a1932d 100644 --- a/src/client/Microsoft.Identity.Client/MsalError.cs +++ b/src/client/Microsoft.Identity.Client/MsalError.cs @@ -954,10 +954,10 @@ public static class MsalError /// /// What happens?You configured both Regional Authority and Authority Validation. Authority validation is not currently supported for regional authorities. - /// MitigationSet the validateAuthority flag to false to use Azure Regional authority. Do not disable authority validation if you read the authority from a potentially unstrusted source, + /// MitigationSet the validateAuthority flag to false to use Azure Regional authority. Do not disable authority validation if you read the authority from an untrusted source, /// for example from the WWWAuthenticate header of an HTTP request that resulted in a 401 response. /// - public const string RegionalAuthorityValidation = "regional_autority_validation"; + public const string RegionalAuthorityValidation = "regional_authority_validation"; } }