Scope Class

The Scope class encapsulates information about the relying party (RP) associated with a security token request (RST). This information is used by implementations of the SecurityTokenService class (STS) in the token issuance pipeline to return a response (RSTR) to a security token request (RST).

Scope objects contain information about the address of the RP, the encrypting and signing credentials to be used with the issued security token, and whether the token itself or symmetric keys issued with the token should be encrypted. By default, both the token and symmetric keys are encrypted. You can extend the Scope class to carry additional information about the request, such as token types accepted by the RP, default token lifetime, maximum token lifetime, algorithm suites used by the RP, and so on; however, the information encapsulated in this class should not vary for individual requests.

The token issuance pipeline is implemented in the Issue method and this method invokes the GetScope method to get the configuration for the RST. You must implement a GetScope method in your custom STS and return a Scope object appropriate for the RP and your STS implementation. For more information about the token issuance pipeline, see Claims Issuance Pipeline. For more information about building an STS and using Scope objects, see the topics under Claims Provider - Security Token Service.

Target Platforms