Dela via


PublicClientApplicationBuilder.WithKerberosTicketClaim Method

Definition

Sets the parameters required to get a Kerberos Ticket from Azure AD service.

public Microsoft.Identity.Client.PublicClientApplicationBuilder WithKerberosTicketClaim (string servicePrincipalName, Microsoft.Identity.Client.Kerberos.KerberosTicketContainer ticketContainer);
member this.WithKerberosTicketClaim : string * Microsoft.Identity.Client.Kerberos.KerberosTicketContainer -> Microsoft.Identity.Client.PublicClientApplicationBuilder
Public Function WithKerberosTicketClaim (servicePrincipalName As String, ticketContainer As KerberosTicketContainer) As PublicClientApplicationBuilder

Parameters

servicePrincipalName
String

Service principal name to get Kerberos Service Ticket.

ticketContainer
KerberosTicketContainer

Specify where the Kerberos ticket will be returned - as a claim in the ID token or as a claim in the access token. If the ticket is for the client application, use the ID token. If the ticket is for the downstream API, use the access token.

Returns

The builder to chain the .With methods

Remarks

The expiry of the Kerberos ticket is tied to the expiry of the token that contains it. MSAL provides several helper APIs to read and write Kerberos tickets from the Windows Ticket Cache - see KerberosSupplementalTicketManager.

Applies to