PublicClientApplicationBuilder.WithKerberosTicketClaim Method
Definition
Important
Some information relates to prerelease product that may be substantially modified before it’s released. Microsoft makes no warranties, express or implied, with respect to the information provided here.
Sets the parameters required to get a Kerberos Ticket from Azure AD service.
public Microsoft.Identity.Client.PublicClientApplicationBuilder WithKerberosTicketClaim (string servicePrincipalName, Microsoft.Identity.Client.Kerberos.KerberosTicketContainer ticketContainer);member this.WithKerberosTicketClaim : string * Microsoft.Identity.Client.Kerberos.KerberosTicketContainer -> Microsoft.Identity.Client.PublicClientApplicationBuilderPublic Function WithKerberosTicketClaim (servicePrincipalName As String, ticketContainer As KerberosTicketContainer) As PublicClientApplicationBuilderParameters
- servicePrincipalName
- String
Service principal name to get Kerberos Service Ticket.
- ticketContainer
- KerberosTicketContainer
Specify where the Kerberos ticket will be returned - as a claim in the ID token or as a claim in the access token. If the ticket is for the client application, use the ID token. If the ticket is for the downstream API, use the access token.
Returns
The builder to chain the .With methods
Remarks
The expiry of the Kerberos ticket is tied to the expiry of the token that contains it. MSAL provides several helper APIs to read and write Kerberos tickets from the Windows Ticket Cache - see KerberosSupplementalTicketManager.