IdentityApplicationOptions.TokenDecryptionCredentials Property
Definition
Important
Some information relates to prerelease product that may be substantially modified before it’s released. Microsoft makes no warranties, express or implied, with respect to the information provided here.
Description of the credentials (usually certificates) used to decrypt an encrypted token in a web API.
public System.Collections.Generic.IEnumerable<Microsoft.Identity.Abstractions.CredentialDescription>? TokenDecryptionCredentials { get; set; }
member this.TokenDecryptionCredentials : seq<Microsoft.Identity.Abstractions.CredentialDescription> with get, set
Public Property TokenDecryptionCredentials As IEnumerable(Of CredentialDescription)
Property Value
Examples
Here is how to specify a decrypt certificate read from the certificate store:
"TokenDecryptionCredentials": [
{
"SourceType": "StoreWithDistinguishedName",
"CertificateStorePath": "CurrentUser/My",
"CertificateDistinguishedName": "CN=WebAppCallingWebApiCert"
}
]
See also https://aka.ms/ms-id-web-certificates.