<message> element of <wsFederationHttpBinding>

Switch on low bandwidth view

Collapse All

Language Filter

This page is specific to

Microsoft Visual Studio 2008/.NET Framework 3.5

Other versions are also available for the following:

.NET Framework 3.0

<message> element of <wsFederationHttpBinding>

Defines the settings for the message-level security for the <wsFederationHttpBinding>.

<system.serviceModel>
  <bindings>
    <wsFederationHttpBinding>
      <binding>
        <security> of <wsFederationHttpBinding>
          <message> element of <wsFederationHttpBinding>

<wsFederationBinding>
     <binding >
         <security>
         <message 
            algorithmSuite="Basic128/Basic192/Basic256/Basic128Rsa15/Basic256Rsa15/TripleDes/TripleDesRsa15/Basic128Sha256/Basic192Sha256/TripleDesSha256/Basic128Sha256Rsa15/Basic192Sha256Rsa15/Basic256Sha256Rsa15/TripleDesSha256Rsa15"
            issuedTokenType="string" 
            issuedKeyType="SymmetricKey/PublicKey"
            negotiateServiceCredential="Boolean" >
            <claimTypeRequirements>
               <add claimType="URI"
                    isOptional="Boolean" />
            </claimTypeRequirements>
                        <issuer address="Uri" >
               <headers>
                  <add name="String"
                       namespace="String" />
                          </headers>
                              <identity>
                              <certificate encodedValue="String"/>
                                <certificateReference findValue="String" 
                                 isChainIncluded="Boolean"
                            storeName="AddressBook/AuthRoot/CertificateAuthority/Disallowed/My/Root/TrustedPeople/TrustedPublisher"
                                  storeLocation="LocalMachine/CurrentUser"
                     x509FindType=System.Security.Cryptography.X509certificates.X509findtype/>
                                   <dns value="String"/>
                                <rsa value="String"/>
                                <servicePrincipalName value="String"/>
                                <usePrincipalName value="String"/>
                              </identity>
                        </issuer>
                        <issuerMetadata address=String" >
               <headers>
                  <add name="String"
                       namespace="String" />
               </headers>
               <identity>
                  <certificate encodedValue="String"/>
                  <certificateReference findValue="String" 
                     isChainIncluded="Boolean"
                     storeName="AddressBook/AuthRoot/CertificateAuthority/Disallowed/My/Root/TrustedPeople/TrustedPublisher"
                     storeLocation="LocalMachine/CurrentUser"
                     X509FindType=System.Security.Cryptography.X509certificates.X509findtype/>
                  <dns value="String"/>
                  <rsa value="String"/>
                  <servicePrincipalName value="String"/>
                  <usePrincipalName value="String"/>
               </identity>
                        </issuerMetadata>
            <tokenRequestParameters>
               <xmlElement>
               </xmlElement>
            </tokenRequestParameters>
         </message>
      </security>
   </binding>
</wsFederationBinding>

Attributes and Elements

Attributes

Attribute	Description
algorithmSuite	Sets the message encryption and key-wrap algorithms. See the "algorithmSuite attribute" table for valid values of this attribute. The default value is Basic256. This attribute is of type SecurityAlgorithmSuite. These algorithms map to those specified in the Security Policy Language (WS-SecurityPolicy) specification.
issuedKeyType	Specifies the type of key to be issued. Valid values include the following: SymmetricKey PublicKey The default is SymmetricKey. This attribute is of type SecurityKeyType.
issuedTokenType	A string that contains a URI that specifies the type of token to be issued. The default is null.
negotiateServiceCredential	A Boolean value that specifies whether the service credential should be exchanged as part of negotiation or is available out of band. The default is true, which means that the service credential is negotiated.

Child Elements

Element	Description
<claimTypeRequirements> element	Specifies a collection of claim types for this binding. Each element is of type ClaimTypeElement.
issuer	Specifies an endpoint that issues a security token. This element is of type IssuedTokenParametersEndpointAddressElement.
issuerMetadata	Specifies the endpoint address of the issuer.
<tokenRequestParameters>	A collection of token request parameters. Each parameter is an XML element.

Parent Elements

Element	Description
<security> of <wsFederationHttpBinding>	Defines the security settings for a binding.

Reference

FederatedMessageSecurityOverHttp
Message
Message
FederatedMessageSecurityElement

Concepts

Other Resources

Securing Services and Clients
Windows Communication Foundation Bindings
Configuring System-Provided Bindings
Using Bindings to Configure Services and Clients