Share via


IdentityApplicationOptions.TokenDecryptionCredentials Property

Definition

Description of the credentials (usually certificates) used to decrypt an encrypted token in a web API.

public System.Collections.Generic.IEnumerable<Microsoft.Identity.Abstractions.CredentialDescription>? TokenDecryptionCredentials { get; set; }
member this.TokenDecryptionCredentials : seq<Microsoft.Identity.Abstractions.CredentialDescription> with get, set
Public Property TokenDecryptionCredentials As IEnumerable(Of CredentialDescription)

Property Value

Examples

Here is how to specify a decrypt certificate read from the certificate store:

"TokenDecryptionCredentials": [
  {
    "SourceType": "StoreWithDistinguishedName",
     "CertificateStorePath": "CurrentUser/My",
     "CertificateDistinguishedName": "CN=WebAppCallingWebApiCert"
    }
   ]

See also https://aka.ms/ms-id-web-certificates.

Applies to