WSFederationAuthenticationModule.Reply Property
Definition
Important
Some information relates to prerelease product that may be substantially modified before it’s released. Microsoft makes no warranties, express or implied, with respect to the information provided here.
Gets or sets the value of the wreply parameter to use in WS-Federation sign-in requests ("wsignin1.0").
public:
property System::String ^ Reply { System::String ^ get(); void set(System::String ^ value); };public string Reply { get; set; }member this.Reply : string with get, setPublic Property Reply As StringProperty Value
A URL that identifies the address at which the relying party (RP) application would like to receive replies from the Security Token Service (STS).
Exceptions
An attempt to set the property to a value that is not a valid, absolute URI occurs.
Remarks
The wreply parameter is optional. If the Reply property is set to null or an empty string, the wreply parameter is not included in the sign-in request.
The wreply parameter is used by the STS to decide where to redirect the user to after token issuance. It is not advisable for the STS to blindly use this address to redirect the user as such redirection has security vulnerabilities. The reply address must be validated by the STS (possibly by comparing to a set of preconfigured reply addresses for the purposes or some other method) to make sure that the reply is being sent to understood well known and secure location.
