Microsoft.Owin.Security.WsFederation

A strongly-typed resource class, for looking up localized strings, etc.

Returns the cached ResourceManager instance used by this class.

Overrides the current thread's CurrentUICulture property for all resource lookups using this strongly typed resource class.

Looks up a localized string similar to The service descriptor is missing..

Looks up a localized string similar to The '{0}' option must be provided..

Looks up a localized string similar to An ICertificateValidator cannot be specified at the same time as an HttpMessageHandler unless it is a WebRequestHandler..

Default values related to WsFederation authentication middleware

The default value used for WsFederationAuthenticationOptions.AuthenticationType

The prefix used to provide a default WsFederationAuthenticationOptions.CookieName

The default value for WsFederationAuthenticationOptions.Caption.

A per-request authentication handler for the WsFederationAuthenticationMiddleware.

Creates a new WsFederationAuthenticationHandler

Handles Signout

Handles Challenge

Invoked to detect and process incoming authentication requests.

Invoked to process incoming authentication messages.

OWIN middleware for obtaining identities using WsFederation protocol.

Initializes a

The next middleware in the OWIN pipeline to invoke The OWIN application Configuration options for the middleware

Provides the object for processing authentication-related requests.

An configured with the supplied to the constructor.

Specifies events which the invokes to enable developer control over the authentication process. />

Creates a new set of notifications. Each notification has a default no-op behavior unless otherwise documented.

Invoked if exceptions are thrown during request processing. The exceptions will be re-thrown after this event unless suppressed.

Invoked when a protocol message is first received.

Invoked to manipulate redirects to the identity provider for SignIn, SignOut, or Challenge.

Invoked with the security token that has been extracted from the protocol message.

Invoked after the security token has passed validation and a ClaimsIdentity has been generated.

Configuration options for

Initializes a new

corresponds to the IIdentity AuthenticationType property. .

Gets or sets the a pinned certificate validator to use to validate the endpoints used when retrieving metadata.

The pinned certificate validator. If this property is null then the default certificate checks are performed, validating the subject name and if the signing chain is a trusted party.

The HttpMessageHandler used to retrieve metadata. This cannot be set at the same time as BackchannelCertificateValidator unless the value is a WebRequestHandler.

Gets or sets timeout value in milliseconds for back channel communications.

The back channel timeout in milliseconds.

Get or sets the text that the user can display on a sign in user interface.

Configuration provided directly by the developer. If provided, then MetadataAddress and the Backchannel properties will not be used. This information should not be updated during request processing.

Gets or sets the address to retrieve the wsFederation metadata

Responsible for retrieving, caching, and refreshing the configuration from metadata. If not provided, then one will be created using the MetadataAddress and Backchannel properties.

Gets or sets if a metadata refresh should be attempted after a SecurityTokenSignatureKeyNotFoundException. This allows for automatic recovery in the event of a signature key rollover. This is enabled by default.

Gets or sets the to call when processing WsFederation messages.

Gets or sets the collection of s used to read and validate s.

Gets or sets the AuthenticationType used when creating the .

Gets or sets the type used to secure data handled by the middleware.

Gets or sets the

if 'TokenValidationParameters' is null.

Gets or sets the 'wreply'.

Gets or sets the 'wreply' value used during sign-out. If none is specified then the value from the Wreply field is used.

Gets or sets the 'wtrealm'.

An optional constrained path on which to process the authentication callback. Computed from Wreply if not provided.

Indicates that the authentication session lifetime (e.g. cookies) should match that of the authentication token. If the token does not provide lifetime information then normal session lifetimes will be used. This is enabled by default.

Extension methods for using

Adds the into the OWIN runtime.

The passed to the configuration method The application identifier. The address to retrieve the wsFederation metadata from. The updated

Adds the into the OWIN runtime.

The passed to the configuration method WsFederationAuthenticationOptions configuration options The updated