I am using @azure/msal-angular to login a user. I have provided the following "consentScopes":

```
['openid', 'email', 'profile']

```

The Login Redirect process works, as it redirects me to a "<https://login.microsoftonline.com>" URL, and the "scope" parameter looks like this:

```
&scope=email%20openid%20profile

```

So far so good, I login, get redirected back to my site, then I print out the "getUser()" method provided by the MSAL Service (obfuscated in case of sensitive values):

```
displayableId: "D...Mm"
name: "Mo....as"
identityProvider: "htt...0"
userIdentifier: "OG....5"
idToken:
aud: "ca...20"
iss: "htt....0"
iat: 1..83
nbf: 15..83
exp: 15...83
acct: 0
aio: "42dg....R/XQoA"
auth_time: 159...282
email: "DM.....com"
name: "Mo....as"
nonce: "7bc....d95d"
oid: "8e8f....fc3"
platf: "1"
preferred_username: "DMol....om"
sub: "j0KKHsU....WMEB_H3fyU"
tid: "98f7abd.....6fbd5f9"
uti: "Eu4y.....cMAAA"
ver: "2.0"

```

There is no UPN value provided here. After research I have found that the 1.0 version returned UPN by default.

I found this useful question, with lots of information, but it doesn't actually answer the question:

<https://stackoverflow.com/a/57692622/1079602>

The following is a screenshot from the Microsoft docs (<https://learn.microsoft.com/en-us/azure/active-directory/develop/active-directory-optional-claims>)

[![Microsoft doc image](https://i.stack.imgur.com/9aP1c.png)](https://i.stack.imgur.com/9aP1c.png)

It specifically states that the "profile" scope should return a "upn" value. I don't this is a problem with the @azure/msal-angular package, because the Login URL is being generated correctly.