Windows apps
Collapse the table of content
Expand the table of content
The topic you requested is included in another documentation set. For convenience, it's displayed below. Choose Switch to see the topic in its original location.

ClientCredentials Class


The .NET API Reference documentation has a new home. Visit the .NET API Browser on to see the new experience.

Enables the user to configure client and service credentials as well as service credential authentication settings for use on the client side of communication.

Namespace:   System.ServiceModel.Description
Assembly:  System.ServiceModel (in System.ServiceModel.dll)


public class ClientCredentials : SecurityCredentialsManager, 


Initializes a new instance of the ClientCredentials class.


This is a copy constructor.


Gets an object that you can use to provide the X.509 certificate that the client uses to authenticate to the service.


Gets the current HTTP Digest credential.


Use this property to specify the endpoint address and binding to use when contacting your local Security Token Service. This information is used when a service requires authentication using an issued token, but the policy of the service (represented as a binding on the client) does not explicitly specify how and where to obtain the issued token.


Controls the credentials that a peer node uses to authenticate itself to other nodes in the mesh, as well as authentication settings that a peer node uses to authenticate other peer nodes.


Gets or sets the security token handler for the client credential.


Gets an object used to specify a service's X.509 certificate.


Gets or sets a value that indicates whether the system is allowed to interactively prompt the user for credentials when necessary. For example, setting it to false might be desired in middle-tier scenarios.


Gets or sets whether the client credentials uses identity configuration.


Gets a credential object that you can use to set the user name and password that the client uses to authenticate itself to the service.


Gets an object used to control the Windows credential that the client uses to authenticate itself to the service.

System_CAPS_pubmethodApplyClientBehavior(ServiceEndpoint, ClientRuntime)

Applies the specified client behavior to the endpoint.


Creates a new copy of this ClientCredentials instance.


Creates a new copy of this ClientCredentials instance.


Creates a security token manager for this instance. This method is rarely called explicitly; it is primarily used in extensibility scenarios and is called by the system itself. (Overrides SecurityCredentialsManager.CreateSecurityTokenManager().)


Determines whether the specified object is equal to the current object.(Inherited from Object.)


Allows an object to try to free resources and perform other cleanup operations before it is reclaimed by garbage collection.(Inherited from Object.)


Serves as the default hash function. (Inherited from Object.)

System_CAPS_protmethodGetInfoCardSecurityToken(Boolean, CardSpacePolicyElement[], SecurityTokenSerializer)

Generates and returns a security token using the CardSpace system and the specified policy chain and token serializer.


Gets the Type of the current instance.(Inherited from Object.)


Creates a shallow copy of the current Object.(Inherited from Object.)


Returns a string that represents the current object.(Inherited from Object.)

System_CAPS_pubinterfaceSystem_CAPS_privmethodIEndpointBehavior.AddBindingParameters(ServiceEndpoint, BindingParameterCollection)

Adds this instance of this class to a binding parameter collection.

System_CAPS_pubinterfaceSystem_CAPS_privmethodIEndpointBehavior.ApplyDispatchBehavior(ServiceEndpoint, EndpointDispatcher)

Implements a modification or extension of the service across an endpoint.


Reserved for future use.

The ClientCredentials is accessed through the ClientCredentials property of the ClientBase<TChannel> class.

A ClientCredentials object is added to the Behaviors collection. The ClientCredentials property is a Façade (a well-known design pattern) over an entry in that collection. Many properties in this class return objects that consist mainly of properties. These objects can be used for configuration: once you get the object, you can use it to set properties by calling its members.

The following code sample shows how to override this class and implement your own custom client credentials that includes a custom security token manager.


It is important to note that the CreateSecurityTokenManager method is overridden to create a custom security token manager. The security token manager, derived from ClientCredentialsSecurityTokenManager. must return a custom security token provider, derived from SecurityTokenProvider, to create the actual security token. If you do not follow this pattern for creating security tokens, your application will be at risk for security attacks, specifically elevation of privileges. This coding pattern ensures that the correct credentials are used when channel factories are cached.

public class MyClientCredentials : ClientCredentials
    string creditCardNumber;

    public MyClientCredentials()
        // Perform client credentials initialization.

    protected MyClientCredentials(MyClientCredentials other)
        : base(other)
        // Clone fields defined in this class.
        this.creditCardNumber = other.creditCardNumber;

    public string CreditCardNumber
            return this.creditCardNumber;
            if (value == null)
                throw new ArgumentNullException("value");
            this.creditCardNumber = value;

    public override SecurityTokenManager CreateSecurityTokenManager()
        // Return your implementation of the SecurityTokenManager.
        return new MyClientCredentialsSecurityTokenManager(this);

    protected override ClientCredentials CloneCore()
        // Implement the cloning functionality.
        return new MyClientCredentials(this);

Universal Windows Platform
Available since 8
.NET Framework
Available since 3.0
Portable Class Library
Supported in: portable .NET platforms
Available since 3.0
Windows Phone Silverlight
Available since 7.0

Any public static ( Shared in Visual Basic) members of this type are thread safe. Any instance members are not guaranteed to be thread safe.

Return to top
© 2018 Microsoft