WS_ISSUED_TOKEN_MESSAGE_SECURITY_BINDING_CONSTRAINT structure (webservices.h)

A security binding constraint that can be used to extract information about how to obtain an issued token from an issuing party.

Syntax

typedef struct _WS_ISSUED_TOKEN_MESSAGE_SECURITY_BINDING_CONSTRAINT {
  WS_SECURITY_BINDING_CONSTRAINT                bindingConstraint;
  WS_MESSAGE_SECURITY_USAGE                     bindingUsage;
  WS_XML_STRING                                 *claimConstraints;
  ULONG                                         claimConstraintCount;
  WS_REQUEST_SECURITY_TOKEN_PROPERTY_CONSTRAINT *requestSecurityTokenPropertyConstraints;
  ULONG                                         requestSecurityTokenPropertyConstraintCount;
  struct {
    WS_ENDPOINT_ADDRESS *issuerAddress;
    WS_XML_BUFFER       *requestSecurityTokenTemplate;
  } out;
} WS_ISSUED_TOKEN_MESSAGE_SECURITY_BINDING_CONSTRAINT;

Members

bindingConstraint

The base binding constraint that this binding constraint derives from.

There are currently no binding-specific properties defined for this binding constraint.

bindingUsage

This specifies how the issued token should be attached to a message.

claimConstraints

This field contains a list of claim types that are allowed in the policy. Each claim type is a URI which identifies the type of claim.

claimConstraintCount

The number of elements in the claimConstraints array.

If this value is 0, then the claimConstraints array may be NULL, and any claims are allowed to appear in the policy.

requestSecurityTokenPropertyConstraints

A set of property constraints relating to how to request a security token.

See WS_REQUEST_SECURITY_TOKEN_PROPERTY_CONSTRAINT for more information.

requestSecurityTokenPropertyConstraintCount

The number of elements in the requestSecurityTokenPropertyConstraints array.

If the array has zero elements, the requestSecurityTokenPropertyConstraints field may be NULL.

out

When WsMatchPolicyAlternative returns NOERROR, the entire contents of this structure will be filled out.

out.issuerAddress

out.requestSecurityTokenTemplate

Remarks

The information extracted using this binding constraint can be used with WsRequestSecurityToken to obtain an issued token. The issued token can then be used with the WS_XML_TOKEN_MESSAGE_SECURITY_BINDING security binding.

This binding constraint is typically used in federated security scenarios.

Requirements

Requirement Value
Minimum supported client Windows 7 [desktop apps only]
Minimum supported server Windows Server 2008 R2 [desktop apps only]
Header webservices.h