IdentityApplicationOptions.TokenDecryptionCredentials Property

Definition

Namespace:

Microsoft.Identity.Abstractions

Assembly:

Microsoft.Identity.Abstractions.dll

Package:

Microsoft.Identity.Abstractions v5.3.0

Description of the credentials (usually certificates) used to decrypt an encrypted token in a web API.

public System.Collections.Generic.IEnumerable<Microsoft.Identity.Abstractions.CredentialDescription>? TokenDecryptionCredentials { get; set; }

member this.TokenDecryptionCredentials : seq<Microsoft.Identity.Abstractions.CredentialDescription> with get, set

Public Property TokenDecryptionCredentials As IEnumerable(Of CredentialDescription)

Property Value

IEnumerable<CredentialDescription>

Examples

Here is how to specify a decrypt certificate read from the certificate store:

"TokenDecryptionCredentials": [
  {
    "SourceType": "StoreWithDistinguishedName",
     "CertificateStorePath": "CurrentUser/My",
     "CertificateDistinguishedName": "CN=WebAppCallingWebApiCert"
    }
   ]

See also https://aka.ms/ms-id-web-certificates.