Please provide the following (and please check them off the list with [x]) before submitting this issue:
As tenant admins will enable Pop with server nonce for Microsoft Graph, the Clients will need to parse the WWW-Authenticate header to retrieve the Nonce and other parameters.
Actual behavior
Today, the WWW-Authenticate header is parsed by the AuthenticationHandler to provide the claims in the CaeAuthenticationProviderOption for the implementations of IAuthenticationProvider to support CAE.
Expected behavior
For Pop, the claims won't be enough. We need to provide the whole content of the WWW-Authenticate header (assuming Microsoft graph retuns only one WWW-Authenticate header), so that MSAL, or the classes that will provide the authentication can parse it and provide the authorization header (for instance Pop)
Steps to reproduce the behavior