1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
|
<?xml version="1.0" encoding="utf-8"?>
<Type Name="UserNamePasswordServiceCredential" FullName="System.ServiceModel.Security.UserNamePasswordServiceCredential">
<TypeSignature Language="C#" Value="public sealed class UserNamePasswordServiceCredential" />
<TypeSignature Language="ILAsm" Value=".class public auto ansi sealed beforefieldinit UserNamePasswordServiceCredential extends System.Object" />
<AssemblyInfo>
<AssemblyName>System.ServiceModel</AssemblyName>
<AssemblyVersion>4.0.0.0</AssemblyVersion>
</AssemblyInfo>
<Base>
<BaseTypeName>System.Object</BaseTypeName>
</Base>
<Interfaces />
<Docs>
<remarks>
<attribution license="cc4" from="Microsoft" modified="false" />
<para>If none of the bindings used by a service is configured for user name/password-based authentication, the relevant properties for this class are ignored. These properties include the <see cref="P:System.ServiceModel.Security.UserNamePasswordServiceCredential.CustomUserNamePasswordValidator" />, <see cref="P:System.ServiceModel.Security.UserNamePasswordServiceCredential.IncludeWindowsGroups" />, <see cref="P:System.ServiceModel.Security.UserNamePasswordServiceCredential.MembershipProvider" />, and <see cref="P:System.ServiceModel.Security.UserNamePasswordServiceCredential.UserNamePasswordValidationMode" /> properties.</para>
<para>If none of the bindings used by a service is configured to use Windows authentication for user name/password, the settings related to caching of logon tokens are ignored. These settings include the <see cref="P:System.ServiceModel.Security.UserNamePasswordServiceCredential.CachedLogonTokenLifetime" />, <see cref="P:System.ServiceModel.Security.UserNamePasswordServiceCredential.CacheLogonTokens" />, and <see cref="P:System.ServiceModel.Security.UserNamePasswordServiceCredential.MaxCachedLogonTokens" /> properties.</para>
</remarks>
<summary>
<attribution license="cc4" from="Microsoft" modified="false" />
<para>Represents a class that is used to configure how the service authenticates users that use user name/password authentication and to configure the caching of logon tokens.</para>
</summary>
</Docs>
<Members>
<Member MemberName="CachedLogonTokenLifetime">
<MemberSignature Language="C#" Value="public TimeSpan CachedLogonTokenLifetime { get; set; }" />
<MemberSignature Language="ILAsm" Value=".property instance valuetype System.TimeSpan CachedLogonTokenLifetime" />
<MemberType>Property</MemberType>
<AssemblyInfo>
<AssemblyVersion>4.0.0.0</AssemblyVersion>
</AssemblyInfo>
<ReturnValue>
<ReturnType>System.TimeSpan</ReturnType>
</ReturnValue>
<Docs>
<value>To be added.</value>
<remarks>
<attribution license="cc4" from="Microsoft" modified="false" />
<para>crdefault <see cref="P:System.ServiceModel.Security.UserNamePasswordServiceCredential.CacheLogonTokens" />.</para>
</remarks>
<summary>
<attribution license="cc4" from="Microsoft" modified="false" />
<para>Gets or sets the maximum length of time that a token is cached.</para>
</summary>
</Docs>
</Member>
<Member MemberName="CacheLogonTokens">
<MemberSignature Language="C#" Value="public bool CacheLogonTokens { get; set; }" />
<MemberSignature Language="ILAsm" Value=".property instance bool CacheLogonTokens" />
<MemberType>Property</MemberType>
<AssemblyInfo>
<AssemblyVersion>4.0.0.0</AssemblyVersion>
</AssemblyInfo>
<ReturnValue>
<ReturnType>System.Boolean</ReturnType>
</ReturnValue>
<Docs>
<value>To be added.</value>
<remarks>
<attribution license="cc4" from="Microsoft" modified="false" />
<para>By default, indigo2 security asks the Windows security subsystem to create a logon token for every incoming user name/password security token if the user name is being mapped to a Windows account. This behavior can be changed by setting the <see cref="P:System.ServiceModel.Security.UserNamePasswordServiceCredential.UserNamePasswordValidationMode" /> property.</para>
<para>For <see cref="F:System.ServiceModel.Security.UserNamePasswordValidationMode.Windows" /> mode, the service uses Win32's LogonUser function for user name/password authentication. If the <see cref="P:System.ServiceModel.Security.UserNamePasswordServiceCredential.CacheLogonTokens" /> is set to true, the resulting Windows token is cached and reused for the same user name/password pair. The cache is valid for <see cref="P:System.ServiceModel.Security.UserNamePasswordServiceCredential.CachedLogonTokenLifetime" />. The maximum number of caches is limited to <see cref="P:System.ServiceModel.Security.UserNamePasswordServiceCredential.MaxCachedLogonTokens" />.</para>
</remarks>
<summary>
<attribution license="cc4" from="Microsoft" modified="false" />
<para>Gets or sets a value that indicates whether logon tokens are cached.</para>
</summary>
</Docs>
</Member>
<Member MemberName="CustomUserNamePasswordValidator">
<MemberSignature Language="C#" Value="public System.IdentityModel.Selectors.UserNamePasswordValidator CustomUserNamePasswordValidator { get; set; }" />
<MemberSignature Language="ILAsm" Value=".property instance class System.IdentityModel.Selectors.UserNamePasswordValidator CustomUserNamePasswordValidator" />
<MemberType>Property</MemberType>
<AssemblyInfo>
<AssemblyVersion>4.0.0.0</AssemblyVersion>
</AssemblyInfo>
<ReturnValue>
<ReturnType>System.IdentityModel.Selectors.UserNamePasswordValidator</ReturnType>
</ReturnValue>
<Docs>
<value>To be added.</value>
<remarks>
<attribution license="cc4" from="Microsoft" modified="false" />
<para>The <see cref="P:System.ServiceModel.Security.UserNamePasswordServiceCredential.UserNamePasswordValidationMode" /> property must be set to <see cref="F:System.ServiceModel.Security.UserNamePasswordValidationMode.MembershipProvider" /> for the <see cref="P:System.ServiceModel.Security.UserNamePasswordServiceCredential.MembershipProvider" /> to take effect. When the <see cref="P:System.ServiceModel.Security.UserNamePasswordServiceCredential.MembershipProvider" /> property is set and the <see cref="P:System.ServiceModel.Security.UserNamePasswordServiceCredential.UserNamePasswordValidationMode" /> property is not, indigo2 uses Windows authentication and ignores the value of the <see cref="P:System.ServiceModel.Security.UserNamePasswordServiceCredential.MembershipProvider" /> property.</para>
<para>For <see cref="F:System.ServiceModel.Security.UserNamePasswordValidationMode.Custom" /> mode, the service uses <see cref="T:System.IdentityModel.Selectors.UserNamePasswordValidator" /> for user name/password authentication by calling the <see cref="M:System.IdentityModel.Selectors.UserNamePasswordValidator.Validate(System.String,System.String)" /> method.</para>
</remarks>
<summary>
<attribution license="cc4" from="Microsoft" modified="false" />
<para>Gets or sets a custom user name and password validator.</para>
</summary>
</Docs>
</Member>
<Member MemberName="IncludeWindowsGroups">
<MemberSignature Language="C#" Value="public bool IncludeWindowsGroups { get; set; }" />
<MemberSignature Language="ILAsm" Value=".property instance bool IncludeWindowsGroups" />
<MemberType>Property</MemberType>
<AssemblyInfo>
<AssemblyVersion>4.0.0.0</AssemblyVersion>
</AssemblyInfo>
<ReturnValue>
<ReturnType>System.Boolean</ReturnType>
</ReturnValue>
<Docs>
<value>To be added.</value>
<remarks>
<attribution license="cc4" from="Microsoft" modified="false" />
<para>In most scenarios when validating Windows user names and passwords, Windows groups in which users belong provide useful information for authorization decisions. However, if the Windows groups are not required, setting this property to false can improve performance by avoiding a full-group claim population.</para>
</remarks>
<summary>
<attribution license="cc4" from="Microsoft" modified="false" />
<para>Gets or sets a value that indicates whether Windows groups are included in the security context.</para>
</summary>
</Docs>
</Member>
<Member MemberName="MaxCachedLogonTokens">
<MemberSignature Language="C#" Value="public int MaxCachedLogonTokens { get; set; }" />
<MemberSignature Language="ILAsm" Value=".property instance int32 MaxCachedLogonTokens" />
<MemberType>Property</MemberType>
<AssemblyInfo>
<AssemblyVersion>4.0.0.0</AssemblyVersion>
</AssemblyInfo>
<ReturnValue>
<ReturnType>System.Int32</ReturnType>
</ReturnValue>
<Docs>
<value>To be added.</value>
<remarks>
<attribution license="cc4" from="Microsoft" modified="false" />
<para>The default value is 128. crdefault <see cref="P:System.ServiceModel.Security.UserNamePasswordServiceCredential.CacheLogonTokens" />.</para>
</remarks>
<summary>
<attribution license="cc4" from="Microsoft" modified="false" />
<para>Gets or sets the maximum number of logon tokens to cache.</para>
</summary>
</Docs>
</Member>
<Member MemberName="MembershipProvider">
<MemberSignature Language="C#" Value="public System.Web.Security.MembershipProvider MembershipProvider { get; set; }" />
<MemberSignature Language="ILAsm" Value=".property instance class System.Web.Security.MembershipProvider MembershipProvider" />
<MemberType>Property</MemberType>
<AssemblyInfo>
<AssemblyVersion>4.0.0.0</AssemblyVersion>
</AssemblyInfo>
<ReturnValue>
<ReturnType>System.Web.Security.MembershipProvider</ReturnType>
</ReturnValue>
<Docs>
<value>To be added.</value>
<remarks>
<attribution license="cc4" from="Microsoft" modified="false" />
<para>For <see cref="F:System.ServiceModel.Security.UserNamePasswordValidationMode.MembershipProvider" /> mode, the service uses <see cref="T:System.Web.Security.MembershipProvider" /> for user name/password authentication by calling the <see cref="M:System.Web.Security.MembershipProvider.ValidateUser(System.String,System.String)" /> method.</para>
<block subset="none" type="note">
<para>The <see cref="P:System.ServiceModel.Security.UserNamePasswordServiceCredential.UserNamePasswordValidationMode" /> property must be set to <see cref="F:System.ServiceModel.Security.UserNamePasswordValidationMode.MembershipProvider" /> for the <see cref="P:System.ServiceModel.Security.UserNamePasswordServiceCredential.MembershipProvider" /> to take effect. When the <see cref="P:System.ServiceModel.Security.UserNamePasswordServiceCredential.MembershipProvider" /> property is set and the <see cref="P:System.ServiceModel.Security.UserNamePasswordServiceCredential.UserNamePasswordValidationMode" /> property is not, indigo2 uses Windows authentication and ignores the value of the <see cref="P:System.ServiceModel.Security.UserNamePasswordServiceCredential.MembershipProvider" /> property.</para>
</block>
<para>If the <see cref="T:System.ServiceModel.Security.UserNamePasswordValidationMode" /> property is set to MembershipProvider and the MembershipProvider property is not set to a value, the default is the <see cref="T:System.Web.Security.SqlMembershipProvider" /> class.</para>
</remarks>
<summary>
<attribution license="cc4" from="Microsoft" modified="false" />
<para>Gets or sets the membership provider.</para>
</summary>
</Docs>
</Member>
<Member MemberName="UserNamePasswordValidationMode">
<MemberSignature Language="C#" Value="public System.ServiceModel.Security.UserNamePasswordValidationMode UserNamePasswordValidationMode { get; set; }" />
<MemberSignature Language="ILAsm" Value=".property instance valuetype System.ServiceModel.Security.UserNamePasswordValidationMode UserNamePasswordValidationMode" />
<MemberType>Property</MemberType>
<AssemblyInfo>
<AssemblyVersion>4.0.0.0</AssemblyVersion>
</AssemblyInfo>
<ReturnValue>
<ReturnType>System.ServiceModel.Security.UserNamePasswordValidationMode</ReturnType>
</ReturnValue>
<Docs>
<value>To be added.</value>
<remarks>
<attribution license="cc4" from="Microsoft" modified="false" />
<para>Possible values are:</para>
<list type="bullet">
<item>
<para>
<see cref="F:System.ServiceModel.Security.UserNamePasswordValidationMode.Custom" />
</para>
</item>
<item>
<para>
<see cref="F:System.ServiceModel.Security.UserNamePasswordValidationMode.MembershipProvider" /> </para>
</item>
<item>
<para>
<see cref="F:System.ServiceModel.Security.UserNamePasswordValidationMode.Windows" />
</para>
</item>
</list>
<para>If this property is set to <see cref="F:System.ServiceModel.Security.UserNamePasswordValidationMode.Custom" />, the service uses the object returned by <see cref="P:System.ServiceModel.Security.UserNamePasswordServiceCredential.CustomUserNamePasswordValidator" /> to validate user names and passwords in incoming messages.</para>
<block subset="none" type="note">
<para>When a indigo2 service is hosted in Internet Information Services (IIS) using transport-level security and the <see cref="P:System.ServiceModel.Security.UserNamePasswordServiceCredential.UserNamePasswordValidationMode" /> property is set to <see cref="F:System.ServiceModel.Security.UserNamePasswordValidationMode.Custom" />, the custom authentication scheme uses a subset of Windows authentication. That is because in this scenario, IIS performs Windows authentication prior to indigo2 invoking the custom authenticator.</para>
</block>
<para>When the value of this property is set to <see cref="F:System.ServiceModel.Security.UserNamePasswordValidationMode.MembershipProvider" />, specify the membership provider by setting the <see cref="P:System.ServiceModel.Security.UserNamePasswordServiceCredential.MembershipProvider" /> property, and then the membership provider instance specified by the <see cref="P:System.ServiceModel.Security.UserNamePasswordServiceCredential.MembershipProvider" /> property is used to validate the username and password in incoming messages.</para>
</remarks>
<summary>
<attribution license="cc4" from="Microsoft" modified="false" />
<para>Gets or sets the method of validating the user name and password.</para>
</summary>
</Docs>
</Member>
</Members>
</Type>
|
