SamlSecurityTokenAuthenticator.AudienceUriMode Property

Gets or sets an AudienceUriMode that specifies whether the SamlSecurityToken security token's SamlAudienceRestrictionCondition should be validated.

Namespace:  System.IdentityModel.Selectors
Assembly:  System.IdentityModel (in System.IdentityModel.dll)

public AudienceUriMode AudienceUriMode { get; set; }

Property Value

Type: System.IdentityModel.Selectors.AudienceUriMode
An AudienceUriMode that specifies whether the SamlSecurityToken security token's SamlAudienceRestrictionCondition should be validated.

Use the AudienceUriMode property in a federated application that utilizes a security token service (STS) that issues SamlSecurityToken security tokens. When the STS issues the security token, it can specify the URI of the Web services for which the security token is intended by adding a SamlAudienceRestrictionCondition to the security token. That allows the SamlSecurityTokenAuthenticator for the recipient Web service to verify that the issued security token is intended for this Web service by specifying that this check should happen by doing the following:

NoteNote:

When the AudienceUriMode property is set to BearerKeyOnly, an incoming non-endorsing SamlSecurityToken must contain a SamlAudienceRestrictionCondition and the Audiences collection must contain a URI that matches one of the valid URIs specified in the AllowedAudienceUris collection. A non-endorsing or bearer token is a security token that is included in the message and not used to sign any part of the message.

Windows 7, Windows Vista, Windows XP SP2, Windows Server 2008 R2, Windows Server 2008, Windows Server 2003

The .NET Framework and .NET Compact Framework do not support all versions of every platform. For a list of the supported versions, see .NET Framework System Requirements.

.NET Framework

Supported in: 3.5 SP1, 3.0 SP1
Was this page helpful?
(1500 characters remaining)
Thank you for your feedback

Community Additions

ADD
Show:
© 2014 Microsoft