Idioma

AuthenticationProviderProperties Class

Definition

Properties for authentication provider configuration. A policy must configure either JWT validation fields or user sign-in fields; the two configurations are mutually exclusive and cannot be combined.

public class AuthenticationProviderProperties : System.ClientModel.Primitives.IJsonModel<Azure.ResourceManager.Network.Models.AuthenticationProviderProperties>, System.ClientModel.Primitives.IPersistableModel<Azure.ResourceManager.Network.Models.AuthenticationProviderProperties>
type AuthenticationProviderProperties = class
    interface IJsonModel<AuthenticationProviderProperties>
    interface IPersistableModel<AuthenticationProviderProperties>
Public Class AuthenticationProviderProperties
Implements IJsonModel(Of AuthenticationProviderProperties), IPersistableModel(Of AuthenticationProviderProperties)
Inheritance
AuthenticationProviderProperties
Implements

Constructors

Name Description
AuthenticationProviderProperties(Uri, String)

Initializes a new instance of AuthenticationProviderProperties.

Properties

Name Description
Audience

The intended audience for the JWT. Only a single audience value is supported in this API version. Example: https://audience.com/{application-id}.

ClientId

The Application (client) ID for the related application registered in Microsoft Entra ID, formatted as a GUID.

ClientSecret

The absolute HTTPS Key Vault secret URL identifying the client secret used for authentication. This property is required for user sign-in policies. It holds only the Key Vault reference; the secret value itself is never accepted or returned by this API and is read from Key Vault at runtime using the resource's user-assigned identity. The secret value stored in Key Vault can contain up to 4096 characters. Example: https://myvault.vault.azure.net/secrets/mysecret.

Issuer

The absolute HTTPS URL of the Secure Token Service. Include a trailing slash at the end of the value. Example: https://login.microsoftonline.com/{Microsoft Entra Tenant ID}/.

JwksUri

The JSON Web Key Set (JWKS) URI used to retrieve the public keys for JWT validation. Example: https://login.microsoftonline.com/{Microsoft Entra Tenant ID}/discovery/v2.0/keys.

Scope

The scopes used by an application during authentication to authorize access to a user's details. A maximum of 10 scopes is supported, each scope can contain up to 128 characters, and all scopes can contain up to 256 characters combined.

SessionCookieName

The name of the session cookie used for user authentication. Applicable to the Application Gateway post-OIDC workflow.

SessionTimeout

The timeout of the session cookie used for user authentication. The service accepts and returns this value as a string containing a base-10 unsigned integer number of seconds with no sign, decimal point, unit suffix, or whitespace (for example 86400). The supported range is 1 to 604800 seconds, and the default is 86400 seconds. Applicable to the Application Gateway post-OIDC workflow.

Methods

Name Description
JsonModelCreateCore(Utf8JsonReader, ModelReaderWriterOptions)
JsonModelWriteCore(Utf8JsonWriter, ModelReaderWriterOptions)
PersistableModelCreateCore(BinaryData, ModelReaderWriterOptions)
PersistableModelWriteCore(ModelReaderWriterOptions)

Explicit Interface Implementations

Name Description
IJsonModel<AuthenticationProviderProperties>.Create(Utf8JsonReader, ModelReaderWriterOptions)
IJsonModel<AuthenticationProviderProperties>.Write(Utf8JsonWriter, ModelReaderWriterOptions)
IPersistableModel<AuthenticationProviderProperties>.Create(BinaryData, ModelReaderWriterOptions)
IPersistableModel<AuthenticationProviderProperties>.GetFormatFromOptions(ModelReaderWriterOptions)
IPersistableModel<AuthenticationProviderProperties>.Write(ModelReaderWriterOptions)

Applies to