AcquireTokenByUserFederatedIdentityCredentialParameterBuilder.WithSendX5C Method

Definition

Applicable to first-party applications only, this method also allows to specify if the x5c claim should be sent to Azure AD. Sending the x5c enables application developers to achieve easy certificate roll-over in Azure AD: this method will send the certificate chain to Azure AD along with the token request, so that Azure AD can use it to validate the subject name based on a trusted issuer policy. This saves the application admin from the need to explicitly manage the certificate rollover (either via portal or PowerShell/CLI operation). For details see https://aka.ms/msal-net-sni

public Microsoft.Identity.Client.AcquireTokenByUserFederatedIdentityCredentialParameterBuilder WithSendX5C(bool withSendX5C);
member this.WithSendX5C : bool -> Microsoft.Identity.Client.AcquireTokenByUserFederatedIdentityCredentialParameterBuilder
Public Function WithSendX5C (withSendX5C As Boolean) As AcquireTokenByUserFederatedIdentityCredentialParameterBuilder

Parameters

withSendX5C
Boolean

true if the x5c should be sent. Otherwise false. The default is false

Returns

The builder to chain the .With methods

Applies to