WCF Adapters Transport Properties Dialog Box, General Tab, Identity Editor

  • Article

 

Use the Identity Editor dialog box to configure the identity of the service that this send port expects. These settings enable this send port to authenticate the service. In the handshake process between the client and service, the Windows Communication Foundation (WCF) infrastructure will ensure that the identity of the expected service matches the values of this element. The values that can be specified for the Endpoint Identity property differ according to the security configuration on the Security tab. For more information about how to setup the Identity property for WCF services, see "Specifying the Identity of a Service for Authentication" listed in the See Also section of this topic.

Use this To do this
1. DNS Specify a DNS identity of the service to which this send port sends messages.

Minimum length: 0

Maximum length: 32767

The default is an empty string.
2. Service principal name Specify a server principal name (SPN) identity, which is the principal name to uniquely identify an instance of the service to which this send port sends messages.

Minimum length: 0

Maximum length: 32767

The default is an empty string.
3. User principal name Specify a user principal name (UPN) identity, which is the logon name type of a user on a network. The user principal name consists of the user object name used in Active Directory, followed by the at symbol (@) and then, typically, the Domain Name System parent domain. For example, JeffSmith in the Fabrikam.com domain tree might have the user principal name jeffsmith@fabrikam.com.

Minimum length: 0

Maximum length: 32767

The default is an empty string.
4. RSA Specify the RSA public key value of an X.509 certificate used to authenticate the service to which this send port sends messages. An RSA check enables you to specifically restrict authentication to a single certificate based upon its RSA key or your own RSA key value. This enables stricter authentication of a specific RSA key at the expense of the service no longer working with existing clients if the RSA key value is changed.

Minimum length: 0

Maximum length: 32767

The default is an empty string.
5. Certificate (Base-64) Specify a Base64 encoding of an X.509 certificate used to validate the service that this send port consumes.

Minimum length: 0

Maximum length: 32767

The default is an empty string.
Find type Specify the type of X.509 search to be executed. The type contained in the Find value property must satisfy the requirements of the specified Find type value. Valid values include the following:

- FindByThumbPrint
- FindBySubjectName
- FindBySubjectDistinguishedName
- FindByIssuerName
- FindByIssuerDistinguishedName
- FindBySerialNumber
- FindByTimeValid
- FindByTimeNotYetValid
- FindByTimeExpired
- FindByTemplateName
- FindByApplicationPolicy
- FindByCertificatePolicy
- FindByExtension
- FindByKeyUsage
- FindBySubjectKeyIdentifier

The default value is FindBySubjectDistinguishedName.
Find value Specify the value to search for in the X.509 certificate store. The type contained in this property must satisfy the requirements of the specified Find type value.

Minimum length: 0

Maximum length: 32767

The default is an empty string.
Is chain included? A Boolean value that specifies if the validation is done using a certificate chain.

The default is False.
Store location Specify the location of the certificate store that this send port can use to validate the service. Valid values include the following:

- LocalMachine: The certificate store assigned to the local machine.
- CurrentUser: The certificate store assigned to the current user. Note: To use the CurrentUser location, you must install the certificate into the Current User location of the user account configured for the send handler hosting this send port.

The default value is LocalMachine.
Store name Specify the name of the X.509 certificate store to open.

Valid values include the following:

- AddressBook: Certificate store for other users.
- AuthRoot: Certificate store for third-party certification authorities (CAs).
- CertificateAuthority: Certificate store for intermediate CAs.
- Disallowed: Certificate store for revoked certificates.
- My: Certificate store for personal certificates.
- Root: Certificate store for trusted root CAs.
- TrustedPeople: Certificate store for directly trusted people and resources.
- TrustedPublisher: Certificate store for directly trusted publishers.

The default value is My.

How to Remove an Identity Setting

To remove an identity setting for a send port, delete all the values of the 1. DNS, 2. Service principal name, 3. User principal name, 4. RSA, 5. Certificate (Base-64), and Find value properties.

See Also

The <identity> element Managing BizTalk Hosts and Host Instances How to Change Service Accounts and Passwords Specifying the Identity of a Service for Authentication