3.1.5.1 Realm Autodiscovery Through HTTP 401 Challenge

  • Article

A client can use realm autodiscovery to obtain the name of its realm, which it then uses to locate an STS. It uses realm autodiscovery by sending a request to the server that contains an empty Bearer HTTP Authorization header to the server. The HTTP Authorization header is specified in [RFC2617].

For an example of realm autodiscovery through HTTP 401 challenge, see section 4.6.