AudienceUriMode Enumeration


The .NET API Reference documentation has a new home. Visit the .NET API Browser on to see the new experience.

Specifies whether the SamlSecurityToken security token's SamlAudienceRestrictionCondition should be validated.

Namespace:   System.IdentityModel.Selectors
Assembly:  System.IdentityModel (in System.IdentityModel.dll)

public enum AudienceUriMode

Member nameDescription



Only when the security token's key is of type BearerKey and there are no proof of possession keys in the security token.



Use the AudienceUriMode property in a federated application that utilizes a security token service (STS) that issues SamlSecurityToken security tokens. When the STS issues the security token, it can specify the URI of the Web services for which the security token is intended by adding a SamlAudienceRestrictionCondition to the security token. That allows the SamlSecurityTokenAuthenticator for the recipient Web service to verify that the issued security token is intended for this Web service by specifying that this check should happen by doing the following:

Optionally, override the ValidateAudienceRestriction method to specify the validation algorithm to use for the allowed URI.

.NET Framework
Available since 3.0
Return to top