From ef5643dcd8d5d3e574c5071fb07906ab40dceb74 Mon Sep 17 00:00:00 2001
From: Wei Lim <weikanglim@gmail.com>
Date: Thu, 18 Dec 2025 12:19:40 -0800
Subject: [PATCH] broadcast cp1 capabilities

---
 cli/azd/pkg/auth/manager.go | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/cli/azd/pkg/auth/manager.go b/cli/azd/pkg/auth/manager.go
index 1cfcf1073fe..ad0d5b5581d 100644
--- a/cli/azd/pkg/auth/manager.go
+++ b/cli/azd/pkg/auth/manager.go
@@ -141,6 +141,11 @@ func NewManager(
 		public.WithHTTPClient(httpClient),
 	}
 
+	if _, disableCP1 := os.LookupEnv("AZURE_IDENTITY_DISABLE_CP1"); !disableCP1 {
+		// `cp1` indicates that our client can handle claims challenges
+		options = append(options, public.WithClientCapabilities([]string{"cp1"}))
+	}
+
 	publicClientApp, err := public.New(azdClientID, options...)
 	if err != nil {
 		return nil, fmt.Errorf("creating msal client: %w", err)