[Core/Auth] Enable native authentication broker on macOS, Linux, and WSL

[bmiddha]

Preconditions

• No need to upgrade Python SDK or the Python SDK is ready.

Related command

az login and subsequent user-token acquisition commands.

Resource Provider

N/A — Azure CLI core authentication.

Description of Feature or Work Requested

Azure CLI currently enables MSAL's native Web Account Manager broker on Windows through enable_broker_on_windows, but defaults to browser authentication on macOS, Linux, and WSL.

MSAL Python 1.36 supports native brokers through:

• enable_broker_on_mac
• enable_broker_on_linux
• enable_broker_on_wsl

Enable the appropriate broker by default on each supported platform when its runtime prerequisites are available. This provides OS-integrated SSO, device-bound authentication, token protection, and support for device-based Conditional Access policies.

When the broker or its native dependencies are unavailable, Azure CLI must retain its existing browser/device-code fallback rather than failing authentication.

Relevant MSAL documentation:

• macOS broker
• Linux broker
• WSL broker

Minimum API Version Required

N/A

Swagger PR link / SDK link

N/A

Request Example

No response

Target Date

N/A

PM Contact

N/A

Engineer Contact

N/A

Additional context

No response

[yonzhan]

Thank you for opening this issue, we will look into it.

[isra-fel]

Thanks for raising this! Quick update: this is actively in progress. We're currently investing significant time in thorough testing to make sure the change is solid and doesn't introduce regressions across the supported platforms. We appreciate your patience and will follow up with next steps as things progress.

[bmiddha]

Yeming Liu (@isra-fel) Thanks for the update.
Quick question: Would adding support for linux arm64 also be in the scope of this work? I noticed that pymsalruntime does not ship precompiled wheels for linux arm64
AzureAD/microsoft-authentication-library-for-python#949