Export (0) Print
Expand All

WSFederationAuthenticationModule.GetSignOutRedirectUrl Method

.NET Framework 4.5

Determines the URL to which to redirect when processing a WS-Federation sign-out clean-up request (wsignoutcleanup1.0) that contains a wreply parameter.

Namespace:  System.IdentityModel.Services
Assembly:  System.IdentityModel.Services (in System.IdentityModel.Services.dll)

protected virtual string GetSignOutRedirectUrl(
	SignOutCleanupRequestMessage signOutMessage
)

Parameters

signOutMessage
Type: System.IdentityModel.Services.SignOutCleanupRequestMessage

The sign-out clean-up request.

Return Value

Type: System.String
The URL to redirect to.

ExceptionCondition
ArgumentException

signOutMessage has a Reply property that is null or empty.

ArgumentNullException

signOutMessage is null.

This method is called from the CanReadSignInResponse method in the request processing pipeline to determine the URL to redirect to after processing a WS-Federation sign-out clean-up request. It is only invoked if the message has a wreply parameter (the signOutMessage parameter has a Reply property that is neither null nor empty).

The default implementation validates the reply URL contained in the message (the SignOutCleanupRequestMessage.Reply property) against the address of the security token service (STS) that is specified by the Issuer property. The following conditions must be true for the reply URL to be valid:

  1. The reply URL is an absolute URL.

  2. The reply URL has the same scheme as the issuer.

  3. The reply URL has the same port as the issuer.

  4. Either the reply URL has the same host as the issuer or the reply URL specifies a sub-domain of the issuer.

If all of these conditions are true, the reply URL (Reply) is returned; otherwise, the URL specified by the Issuer property is returned.

Override this method to provide additional validation for the reply URL.

.NET Framework

Supported in: 4.5.2, 4.5.1, 4.5

Windows 8.1, Windows Server 2012 R2, Windows 8, Windows Server 2012, Windows 7, Windows Vista SP2, Windows Server 2008 (Server Core Role not supported), Windows Server 2008 R2 (Server Core Role supported with SP1 or later; Itanium not supported)

The .NET Framework does not support all versions of every platform. For a list of the supported versions, see .NET Framework System Requirements.

Show:
© 2014 Microsoft