[Identity] update fix multiple accounts logic in IBC

[KarishmaGhiya]

Packages impacted by this PR

@azure/identity

Issues associated with this PR

Fixes #28896

Describe the problem that is addressed by this PR

This PR attempts to solve two problems:

1. During silent authentication, the silent auth should only happen if there's either an authentication record provided or if the account is saved in the token cache. Currently, the silent auth also happens if there's an account found in msal token cache, but there's no verification done to ensure that the account actually belongs to the current user.
2. When a login hint is passed and the user has already logged in the past, currently we notice the next time the user logs in, there is no prompt for the user to log in again and silent authentication happens. If there's a prompt instead for the user to select account along with the login hint at the top of the prompt options, it becomes easier for the user to verify and understand that they have logged in with the correct email they intended to.

What are the possible designs available to address the problem? If there are more than one possible design, why was the one in this PR chosen?

• For point 1 and 2, the other languages already follow the design.

Are there test cases added in this PR? (If not, why?)

• This flow was verified with samples

Checklists

• Added impacted package name to the issue description
• Added a changelog (if necessary)

[azure-sdk]

API change check

API changes are not detected in this pull request.

Copilot reviewed 1 out of 2 changed files in this pull request and generated no comments.

Files not reviewed (1)

• sdk/identity/identity/samples/v4/javascript/package.json: Language not supported

[KarishmaGhiya]

Apparently I need to add this because of a bug in msal, until that's fixed -AzureAD/microsoft-authentication-library-for-js#7303 (comment)
@xirzec