Share via


<tokenReplayDetection>

Enables token replay detection and specifies the expiration time for tokens.

<configuration>
  <system.identityModel>
    <identityConfiguration>
      <tokenReplayDetection>

Syntax

<system.identityModel>
  <identityConfiguration>
    <tokenReplayDetection enabled=xs:boolean expirationPeriod=TimeSpan>
    </tokenReplayDetection>
  </identityConfiguration>
</system.identityModel>

Type

TokenReplayDetectionElement

Attributes and Elements

The following sections describe attributes, child elements, and parent elements.

Attributes

Attribute Description
enabled A value that specifies whether token replay detection is enabled; "true" to enable token replay detection.
expirationPeriod A TimeSpan that specifies the maximum amount of time before an item is considered expired and removed from the cache.

Child Elements

None

Parent Elements

Element Description
<identityConfiguration> Specifies service-level identity settings.
<securityTokenHandlerConfiguration> Provides configuration for a collection of security token handlers.

Remarks

A <tokenReplayDetection> element can be specified at the service level under the <identityConfiguration> element or on the security token handler collection level under the <securityTokenHandlerConfiguration> element. Settings on a token handler collection override those specified on the service.

The type of the token replay cache is specified by the <tokenReplayCache> element.