CredentialDescription.TokenExchangeUrl Property

Reference

Definition

Namespace:: Microsoft.Identity.Abstractions

Assembly:: Microsoft.Identity.Abstractions.dll

Package:: Microsoft.Identity.Abstractions v5.3.0

Important

Some information relates to prerelease product that may be substantially modified before it’s released. Microsoft makes no warranties, express or implied, with respect to the information provided here.

(Microsoft Entra specific) Value that can be used to configure the token exchange resource url in the case of federation identity credentials with Managed identity.

public string? TokenExchangeUrl { get; set; }

member this.TokenExchangeUrl : string with get, set

Public Property TokenExchangeUrl As String

Property Value

String

Examples

The JSON fragment below describes a workload identity federation with a user assigned managed identity:

{
    "ClientCredentials": [
    {
        "SourceType": "SignedAssertionFromManagedIdentity",
        "TokenExchangeUrl": "api://AzureADTokenExchangeChina"
    }]
}

The code below describes programmatically in C#, the same workload identity federation with a user assigned managed identity.

CredentialDescription credentialDescription = new CredentialDescription
{
    SourceType = CredentialSource.SignedAssertionFromManagedIdentity,
    TokenExchangeUrl = "api://AzureADTokenExchangeChina"
};

Remarks

If you want to use the default token exchange resource "api://AzureADTokenExchange", don't provide a token exchange url.

Applies to

Share via