MicrosoftIdentityOptions.SendX5C Property

Definition

Specifies if the x5c claim (public key of the certificate) should be sent to the STS. Sending the x5c enables application developers to achieve easy certificate rollover in Azure AD: this method will send the public certificate to Azure AD along with the token request, so that Azure AD can use it to validate the subject name based on a trusted issuer policy. This saves the application admin from the need to explicitly manage the certificate rollover (either via portal or PowerShell/CLI operation). For details see https://aka.ms/msal-net-sni.

public bool SendX5C { get; set; }
member this.SendX5C : bool with get, set
Public Property SendX5C As Boolean

Property Value

Applies to