<roleClaimType>

Article
03/30/2017

Specifies the claim type that defines the role type claims in the collection of ClaimsIdentity objects returned by the ValidateToken method of the token handler.

<configuration>
  <system.identityModel>
    <identityConfiguration>
      <securityTokenHandlers>
        <add>
          <samlSecurityTokenRequirement>
            <roleClaimType>

Syntax

<system.identityModel>  
  <identityConfiguration>  
    <securityTokenHandlers>  
      <add>  
        <samlSecurityTokenRequirement>  
          <roleClaimType value=xs:string>  
          </roleClaimType>  
        </samlSecurityTokenRequirement>  
      </add>  
    </securityTokenHandlers>  
  </identityConfiguration>  
</system.identityModel>

Attributes and Elements

The following sections describe attributes, child elements, and parent elements.

Attributes

Attribute	Description
value	A string that specifies the URI that represents the claim type of the claim to use for the role claim type.

Child Elements

None

Parent Elements

Element	Description
<samlSecurityTokenRequirement>	Provides configuration for the SamlSecurityTokenHandler class, the Saml2SecurityTokenHandler class, or a derived class of either of these classes.

Remarks

The <roleClaimType> element sets the RoleClaimType property when a SamlSecurityTokenRequirement object is initialized from configuration.

Example

<add type="System.IdentityModel.Tokens.SamlSecurityTokenHandler, System.IdentityModel">  
    <samlSecurityTokenRequirement>  
        <roleClaimType value="schemas.microsoft.com/ws/2006/04/identity/claims/role" />  
    </samlSecurityTokenRequirement>  
</add>