Duration (Pacific Standard Time):
To (Pacific Standard Time):
Impact:
  • None
User Action:
  • None
.NET Framework Class Library

WSFederationAuthenticationModule.Reply Property

Gets or sets the value of the wreply parameter to use in WS-Federation sign-in requests (“wsignin1.0”).

Namespace:  System.IdentityModel.Services
Assembly:  System.IdentityModel.Services (in System.IdentityModel.Services.dll)
Public Property Reply As String

Property Value

Type: System.String
A URL that identifies the address at which the relying party (RP) application would like to receive replies from the Security Token Service (STS).
Exception Condition
ArgumentException

An attempt to set the property to a value that is not a valid, absolute URI occurs.

The wreply parameter is optional. If the Reply property is set to null or an empty string, the wreply parameter is not included in the sign-in request.

The wreply parameter is used by the STS to decide where to redirect the user to after token issuance. It is not advisable for the STS to blindly use this address to redirect the user as such redirection has security vulnerabilities. The reply address must be validated by the STS (possibly by comparing to a set of preconfigured reply addresses for the purposes or some other method) to make sure that the reply is being sent to understood well known and secure location.

.NET Framework

Supported in: 4.6, 4.5