PublicClientApplicationBuilder.WithKerberosTicketClaim Method

Reference

Definition

Namespace:: Microsoft.Identity.Client

Assembly:: Microsoft.Identity.Client.dll

Package:: Microsoft.Identity.Client v4.66.1

Important

Some information relates to prerelease product that may be substantially modified before it’s released. Microsoft makes no warranties, express or implied, with respect to the information provided here.

Sets the parameters required to get a Kerberos Ticket from Azure AD service.

public Microsoft.Identity.Client.PublicClientApplicationBuilder WithKerberosTicketClaim (string servicePrincipalName, Microsoft.Identity.Client.Kerberos.KerberosTicketContainer ticketContainer);

member this.WithKerberosTicketClaim : string * Microsoft.Identity.Client.Kerberos.KerberosTicketContainer -> Microsoft.Identity.Client.PublicClientApplicationBuilder

Public Function WithKerberosTicketClaim (servicePrincipalName As String, ticketContainer As KerberosTicketContainer) As PublicClientApplicationBuilder

Parameters

servicePrincipalName: String

Service principal name to get Kerberos Service Ticket.

ticketContainer: KerberosTicketContainer

Specify where the Kerberos ticket will be returned - as a claim in the ID token or as a claim in the access token. If the ticket is for the client application, use the ID token. If the ticket is for the downstream API, use the access token.

Returns

PublicClientApplicationBuilder

The builder to chain the .With methods

Remarks

The expiry of the Kerberos ticket is tied to the expiry of the token that contains it. MSAL provides several helper APIs to read and write Kerberos tickets from the Windows Ticket Cache - see KerberosSupplementalTicketManager.

Applies to

Share via