diff --git a/sys-auth/microsoft-identity-broker/Manifest b/sys-auth/microsoft-identity-broker/Manifest
index f2c0487f6eee8..090147e1b25c1 100644
--- a/sys-auth/microsoft-identity-broker/Manifest
+++ b/sys-auth/microsoft-identity-broker/Manifest
@@ -1,2 +1,3 @@
 DIST microsoft-identity-broker_2.5.2-noble_amd64.deb 3355002 BLAKE2B c351620879c99d596825ce7a9eaa2be6cf4c29721a13be59257ba57c47ffb27ff03534e45a65a7ce9fc2d6c61f020aefe9bbe10c6366a57e5168dcb47057910b SHA512 7eb08cb4d41ac63c19beb23c7ac7d61a2da45d46847bbfca36bac12e29faee0d3f92e8f649398281e3a48fd523de33a057aa169cd9d7df3fcafb6cb9dd367b96
 DIST microsoft-identity-broker_3.0.1-noble_amd64.deb 3354366 BLAKE2B 98082da085f69e73d2a76edeaaf4d6b26f992d38f295ac60f4e9eff908f07812adb0fc9acd481aedeee7afb8c3de430fcffd1731d9badf5fccde7a1b763eef8e SHA512 4e826840eb2ddb80d7dbb58b5d1e96e4bd4f1c2bbb7c5c520c35d7e7d3ed43173ecb509f087b4043dce0fa9c8545116c9eb39f9b4a1528e9d068689b4d5149f0
+DIST microsoft-identity-broker_3.0.2-noble_amd64.deb 3370332 BLAKE2B ef9254d95eff2edde75065120315228b8e9b236ac9e2cefe6cf31dbedf823c44c23510642a7126f0f145910127b39e6d9b81afd991518294b613b1679edfffcb SHA512 3fdfb77b81bba8fdcdf4d337b941752b30b62477502cb2bad833525b8d565e97ce057dbeacd8a60de90b50f5fcaa51e1109581d17a704dd849211701eb92e8fd
diff --git a/sys-auth/microsoft-identity-broker/microsoft-identity-broker-3.0.2.ebuild b/sys-auth/microsoft-identity-broker/microsoft-identity-broker-3.0.2.ebuild
new file mode 100644
index 0000000000000..6e213ee6775ad
--- /dev/null
+++ b/sys-auth/microsoft-identity-broker/microsoft-identity-broker-3.0.2.ebuild
@@ -0,0 +1,94 @@
+# Copyright 1999-2026 Gentoo Authors
+# Distributed under the terms of the GNU General Public License v2
+
+EAPI=8
+
+inherit desktop prefix systemd unpacker xdg
+
+FAKE_OS="ubuntu-24.04"
+DESCRIPTION="Microsoft Authentication Broker to access a corporate environment"
+HOMEPAGE="https://learn.microsoft.com/intune/"
+SRC_URI="https://packages.microsoft.com/ubuntu/24.04/prod/pool/main/${PN:0:1}/${PN}/${PN}_${PV%_p*}-noble_amd64.deb"
+S="${WORKDIR}"
+LICENSE="microsoft-proprietary Apache-2.0 BSD-2 MIT"
+SLOT="0"
+KEYWORDS="-* ~amd64"
+RESTRICT="bindist mirror"
+
+RDEPEND="
+	app-accessibility/at-spi2-core:2
+	app-crypt/libsecret
+	app-crypt/p11-kit
+	dev-libs/glib:2
+	dev-libs/openssl:0/3
+	net-libs/libsoup:3.0
+	net-libs/webkit-gtk:4.1/0
+	net-misc/curl
+	sys-apps/bubblewrap
+	sys-apps/dbus
+	sys-apps/util-linux
+	x11-libs/cairo
+	x11-libs/gtk+:3
+	x11-libs/libX11
+	x11-libs/pango
+	virtual/zlib
+"
+
+QA_PREBUILT="*"
+DIR="/opt/microsoft/identity-broker"
+DB="microsoft-identity-device-broker"
+
+pkg_setup() {
+	local pv
+	for pv in ${REPLACING_VERSIONS}; do
+		if ver_test ${pv} -lt 2.0.3; then
+			ewarn "You are upgrading to an entirely new implementation. It is highly recommended"
+			ewarn "to unregister this system before upgrading. After upgrading, run"
+			ewarn "\`dsreg --cleanup\` and \`sudo dsreg --cleanup\` before registering again."
+			break
+		fi
+	done
+}
+
+src_unpack() {
+	unpack_deb ${A}
+}
+
+src_install() {
+	dobin usr/bin/dsreg
+	doman usr/share/man/man1/dsreg.1
+
+	exeinto "${DIR}"/bin
+	newexe $(prefixify_ro "${FILESDIR}"/wrapper) ${PN}
+	dosym ${PN} "${DIR}"/bin/${DB}
+
+	exeinto "${DIR}"/libexec
+	doexe "${DIR#/}"/bin/{${PN},${DB}}
+
+	insinto /usr/share
+	doins -r usr/share/dbus-1
+
+	systemd_dounit usr/lib/systemd/system/${DB}.service
+
+	# DOS line endings? Yes, Chewi lol'd too. ;)
+	tr -d "\r" < usr/share/applications/${PN}.desktop | newmenu - ${PN}.desktop
+	doicon -s 256 usr/share/icons/hicolor/256x256/apps/${PN}.png
+
+	keepdir /etc/microsoft/identity-broker/{certs,private}
+	fperms 0700 /etc/microsoft/identity-broker/{certs,private}
+
+	insinto /etc/microsoft/identity-broker/etc
+	newins "${FILESDIR}/lsb-release-${FAKE_OS}" lsb-release
+	newins "${FILESDIR}/os-release-${FAKE_OS}" os-release
+
+	dodoc usr/share/doc/${PN}/CHANGELOG.md
+}
+
+pkg_postinst() {
+	xdg_pkg_postinst
+
+	elog "This version is designed for GNOME Keyring. To use it with KWallet, run:"
+	elog "  busctl --user call org.freedesktop.secrets /org/freedesktop/secrets org.freedesktop.Secret.Service SetAlias so login /org/freedesktop/secrets/collection/kdewallet"
+	elog "To undo this change, run:"
+	elog "  busctl --user call org.freedesktop.secrets /org/freedesktop/secrets org.freedesktop.Secret.Service SetAlias so login /"
+}