Duration (Pacific Standard Time):
To (Pacific Standard Time):
  • None
User Action:
  • None

WSFederationAuthenticationModule.Reply Property


The .NET API Reference documentation has a new home. Visit the .NET API Browser on docs.microsoft.com to see the new experience.

Gets or sets the value of the wreply parameter to use in WS-Federation sign-in requests (“wsignin1.0”).

Namespace:   System.IdentityModel.Services
Assembly:  System.IdentityModel.Services (in System.IdentityModel.Services.dll)

Public Property Reply As String

Property Value

Type: System.String

A URL that identifies the address at which the relying party (RP) application would like to receive replies from the Security Token Service (STS).

Exception Condition

An attempt to set the property to a value that is not a valid, absolute URI occurs.

The wreply parameter is optional. If the Reply property is set to null or an empty string, the wreply parameter is not included in the sign-in request.

The wreply parameter is used by the STS to decide where to redirect the user to after token issuance. It is not advisable for the STS to blindly use this address to redirect the user as such redirection has security vulnerabilities. The reply address must be validated by the STS (possibly by comparing to a set of preconfigured reply addresses for the purposes or some other method) to make sure that the reply is being sent to understood well known and secure location.

.NET Framework
Available since 4.5
Return to top