This documentation is archived and is not being maintained.


Specifies a custom token used to authenticate a client to a service.

   issuedTokenRenewalThresholdPercentage = "0 to 100"

The following sections describe attributes, child elements, and parent elements.


Attribute Description


Optional Boolean attribute that specifies whether tokens are cached. The default is true.


Optional string attribute that specifies which random values (entropies) are used for handshake operations. Values include ClientEntropy, ServerEntropy, and CombinedEntropy, The default is CombinedEntropy. This attribute is of type SecurityKeyEntropyMode.


Optional integer attribute that specifies the percentage of a valid time frame (supplied by the token issuer) that can pass before a token is renewed. Values are from 0 to 100. The default is 60, which specifies 60% of the time passes before a renewal is attempted.


Optional attribute that specifies the channel behaviors to use when communicating with the issuer.


Optional attribute that specifies the channel behaviors to use when communicating with the local issuer.


Optional Timespan attribute that specifies the duration that issued tokens are cached when the token issuer (an STS) does not specify a time. The default is “10675199.02:48:05.4775807.”

Child Elements

Element Description


Specifies the address of the local issuer of the token and the binding used to communicate with the endpoint.

<issuerChannelBehaviors> Element

Specifies the endpoint behaviors to use when contacting a local issuer.

Parent Elements

Element Description


Specifies the credentials used to authenticate a client to a service.

An issued token is a custom credential type used, for example, when authenticating with a Secure Token Service (STS) in a federated scenario. By default, the token is a SAML token. For more information, see Federation and SAML. and Federation and Issued Tokens.

This section contains the elements used to configure a local issuer of tokens, or behaviors used with an security token service. For instructions on configuring a client to use a local issuer, see How to: Configure a Local Issuer.

© 2007 Microsoft Corporation. All rights reserved.
Last Published: 2010-01-05