-
Notifications
You must be signed in to change notification settings - Fork 1.5k
/
SamlSecurityTokenHandler.xml
2663 lines (2549 loc) · 215 KB
/
SamlSecurityTokenHandler.xml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1000
<Type Name="SamlSecurityTokenHandler" FullName="System.IdentityModel.Tokens.SamlSecurityTokenHandler">
<TypeSignature Language="C#" Value="public class SamlSecurityTokenHandler : System.IdentityModel.Tokens.SecurityTokenHandler" />
<TypeSignature Language="ILAsm" Value=".class public auto ansi beforefieldinit SamlSecurityTokenHandler extends System.IdentityModel.Tokens.SecurityTokenHandler" />
<TypeSignature Language="DocId" Value="T:System.IdentityModel.Tokens.SamlSecurityTokenHandler" />
<TypeSignature Language="VB.NET" Value="Public Class SamlSecurityTokenHandler
Inherits SecurityTokenHandler" />
<TypeSignature Language="F#" Value="type SamlSecurityTokenHandler = class
 inherit SecurityTokenHandler" />
<TypeSignature Language="C++ CLI" Value="public ref class SamlSecurityTokenHandler : System::IdentityModel::Tokens::SecurityTokenHandler" />
<AssemblyInfo>
<AssemblyName>System.IdentityModel</AssemblyName>
<AssemblyVersion>4.0.0.0</AssemblyVersion>
</AssemblyInfo>
<Base>
<BaseTypeName>System.IdentityModel.Tokens.SecurityTokenHandler</BaseTypeName>
</Base>
<Interfaces />
<Docs>
<summary>Represents a security token handler that creates security tokens from SAML 1.1 Assertions.</summary>
<remarks>
<format type="text/markdown"><![CDATA[
## Remarks
The <xref:System.IdentityModel.Tokens.SamlSecurityTokenHandler> class serializes and deserializes security tokens backed by SAML 1.1 Assertions into <xref:System.IdentityModel.Tokens.SamlSecurityToken> objects. Security token handlers are responsible for creating, reading, writing, and validating tokens.
You can configure a security token service (STS) or relying party (RP) application to process SAML 1.1 Assertion-backed security tokens by adding an instance of the <xref:System.IdentityModel.Tokens.SamlSecurityTokenHandler> class to the <xref:System.IdentityModel.Tokens.SecurityTokenHandlerCollection> object configured for the service (or application). This can be done either programmatically or in the configuration file. The handler itself is configured from the configuration specified for the collection through the collection's <xref:System.IdentityModel.Tokens.SecurityTokenHandlerCollection.Configuration%2A> property when it is added to the collection. While it is possible to configure the handler individually by setting its <xref:System.IdentityModel.Tokens.SecurityTokenHandler.Configuration%2A> property, this is not normally necessary; however, if the handler must be configured individually, the property should be set after the handler is added to the collection.
For many scenarios, the <xref:System.IdentityModel.Tokens.SamlSecurityTokenHandler> class can be used as-is; however, the class provides many extension points through the methods it exposes. By deriving from the <xref:System.IdentityModel.Tokens.SamlSecurityTokenHandler> and overriding specific methods, you can modify the functionality of the token processing provided in the default implementation, or you can add processing for extensions to the SAML Assertion specification that may be needed in some custom scenarios.
]]></format>
</remarks>
<altmember cref="T:System.IdentityModel.Tokens.SamlSecurityToken" />
<related type="Article" href="/dotnet/framework/configure-apps/file-schema/windows-identity-foundation/samlsecuritytokenrequirement"><samlSecurityTokenRequirement></related>
</Docs>
<Members>
<MemberGroup MemberName=".ctor">
<AssemblyInfo>
<AssemblyName>System.IdentityModel</AssemblyName>
<AssemblyVersion>4.0.0.0</AssemblyVersion>
</AssemblyInfo>
<Docs>
<summary>Initializes a new instance of the <see cref="T:System.IdentityModel.Tokens.SamlSecurityTokenHandler" /> class.</summary>
</Docs>
</MemberGroup>
<Member MemberName=".ctor">
<MemberSignature Language="C#" Value="public SamlSecurityTokenHandler ();" />
<MemberSignature Language="ILAsm" Value=".method public hidebysig specialname rtspecialname instance void .ctor() cil managed" />
<MemberSignature Language="DocId" Value="M:System.IdentityModel.Tokens.SamlSecurityTokenHandler.#ctor" />
<MemberSignature Language="VB.NET" Value="Public Sub New ()" />
<MemberSignature Language="C++ CLI" Value="public:
 SamlSecurityTokenHandler();" />
<MemberType>Constructor</MemberType>
<AssemblyInfo>
<AssemblyName>System.IdentityModel</AssemblyName>
<AssemblyVersion>4.0.0.0</AssemblyVersion>
</AssemblyInfo>
<Parameters />
<Docs>
<summary>Initializes a new instance of the <see cref="T:System.IdentityModel.Tokens.SamlSecurityTokenHandler" /> class with default security token requirements.</summary>
<remarks>
<format type="text/markdown"><![CDATA[
## Remarks
The <xref:System.IdentityModel.Tokens.SamlSecurityTokenHandler.SamlSecurityTokenRequirement%2A> property is set to an instance of <xref:System.IdentityModel.Tokens.SamlSecurityTokenRequirement> that is created with the parameterless constructor.
]]></format>
</remarks>
</Docs>
</Member>
<Member MemberName=".ctor">
<MemberSignature Language="C#" Value="public SamlSecurityTokenHandler (System.IdentityModel.Tokens.SamlSecurityTokenRequirement samlSecurityTokenRequirement);" />
<MemberSignature Language="ILAsm" Value=".method public hidebysig specialname rtspecialname instance void .ctor(class System.IdentityModel.Tokens.SamlSecurityTokenRequirement samlSecurityTokenRequirement) cil managed" />
<MemberSignature Language="DocId" Value="M:System.IdentityModel.Tokens.SamlSecurityTokenHandler.#ctor(System.IdentityModel.Tokens.SamlSecurityTokenRequirement)" />
<MemberSignature Language="VB.NET" Value="Public Sub New (samlSecurityTokenRequirement As SamlSecurityTokenRequirement)" />
<MemberSignature Language="F#" Value="new System.IdentityModel.Tokens.SamlSecurityTokenHandler : System.IdentityModel.Tokens.SamlSecurityTokenRequirement -> System.IdentityModel.Tokens.SamlSecurityTokenHandler" Usage="new System.IdentityModel.Tokens.SamlSecurityTokenHandler samlSecurityTokenRequirement" />
<MemberSignature Language="C++ CLI" Value="public:
 SamlSecurityTokenHandler(System::IdentityModel::Tokens::SamlSecurityTokenRequirement ^ samlSecurityTokenRequirement);" />
<MemberType>Constructor</MemberType>
<AssemblyInfo>
<AssemblyName>System.IdentityModel</AssemblyName>
<AssemblyVersion>4.0.0.0</AssemblyVersion>
</AssemblyInfo>
<Parameters>
<Parameter Name="samlSecurityTokenRequirement" Type="System.IdentityModel.Tokens.SamlSecurityTokenRequirement" />
</Parameters>
<Docs>
<param name="samlSecurityTokenRequirement">The <see cref="T:System.IdentityModel.Tokens.SamlSecurityTokenRequirement" /> to be used by this instance when validating tokens. Sets the <see cref="P:System.IdentityModel.Tokens.SamlSecurityTokenHandler.SamlSecurityTokenRequirement" /> property.</param>
<summary>Initializes a new instance of the <see cref="T:System.IdentityModel.Tokens.SamlSecurityTokenHandler" /> class with the specified security token requirements.</summary>
<remarks>To be added.</remarks>
<exception cref="T:System.ArgumentNullException">
<paramref name="samlSecurityTokenRequirement" /> is <see langword="null" />.</exception>
<related type="Article" href="/dotnet/framework/configure-apps/file-schema/windows-identity-foundation/samlsecuritytokenrequirement"><samlSecurityTokenRequirement></related>
</Docs>
</Member>
<Member MemberName="AddDelegateToAttributes">
<MemberSignature Language="C#" Value="protected virtual void AddDelegateToAttributes (System.Security.Claims.ClaimsIdentity subject, System.Collections.Generic.ICollection<System.IdentityModel.Tokens.SamlAttribute> attributes, System.IdentityModel.Tokens.SecurityTokenDescriptor tokenDescriptor);" />
<MemberSignature Language="ILAsm" Value=".method familyhidebysig newslot virtual instance void AddDelegateToAttributes(class System.Security.Claims.ClaimsIdentity subject, class System.Collections.Generic.ICollection`1<class System.IdentityModel.Tokens.SamlAttribute> attributes, class System.IdentityModel.Tokens.SecurityTokenDescriptor tokenDescriptor) cil managed" />
<MemberSignature Language="DocId" Value="M:System.IdentityModel.Tokens.SamlSecurityTokenHandler.AddDelegateToAttributes(System.Security.Claims.ClaimsIdentity,System.Collections.Generic.ICollection{System.IdentityModel.Tokens.SamlAttribute},System.IdentityModel.Tokens.SecurityTokenDescriptor)" />
<MemberSignature Language="VB.NET" Value="Protected Overridable Sub AddDelegateToAttributes (subject As ClaimsIdentity, attributes As ICollection(Of SamlAttribute), tokenDescriptor As SecurityTokenDescriptor)" />
<MemberSignature Language="F#" Value="abstract member AddDelegateToAttributes : System.Security.Claims.ClaimsIdentity * System.Collections.Generic.ICollection<System.IdentityModel.Tokens.SamlAttribute> * System.IdentityModel.Tokens.SecurityTokenDescriptor -> unit
override this.AddDelegateToAttributes : System.Security.Claims.ClaimsIdentity * System.Collections.Generic.ICollection<System.IdentityModel.Tokens.SamlAttribute> * System.IdentityModel.Tokens.SecurityTokenDescriptor -> unit" Usage="samlSecurityTokenHandler.AddDelegateToAttributes (subject, attributes, tokenDescriptor)" />
<MemberSignature Language="C++ CLI" Value="protected:
 virtual void AddDelegateToAttributes(System::Security::Claims::ClaimsIdentity ^ subject, System::Collections::Generic::ICollection<System::IdentityModel::Tokens::SamlAttribute ^> ^ attributes, System::IdentityModel::Tokens::SecurityTokenDescriptor ^ tokenDescriptor);" />
<MemberType>Method</MemberType>
<AssemblyInfo>
<AssemblyName>System.IdentityModel</AssemblyName>
<AssemblyVersion>4.0.0.0</AssemblyVersion>
</AssemblyInfo>
<ReturnValue>
<ReturnType>System.Void</ReturnType>
</ReturnValue>
<Parameters>
<Parameter Name="subject" Type="System.Security.Claims.ClaimsIdentity" />
<Parameter Name="attributes" Type="System.Collections.Generic.ICollection<System.IdentityModel.Tokens.SamlAttribute>" />
<Parameter Name="tokenDescriptor" Type="System.IdentityModel.Tokens.SecurityTokenDescriptor" />
</Parameters>
<Docs>
<param name="subject">The delegate of this <see cref="T:System.Security.Claims.ClaimsIdentity" /> object will be serialized into a <see cref="T:System.IdentityModel.Tokens.SamlAttribute" />. The delegate is specified by the <see cref="P:System.Security.Claims.ClaimsIdentity.Actor" /> property.</param>
<param name="attributes">The attribute collection to which the ActAs token will be serialized.</param>
<param name="tokenDescriptor">The token descriptor.</param>
<summary>Adds all of the delegates associated with the ActAs subject into the attribute collection.</summary>
<remarks>To be added.</remarks>
<exception cref="T:System.ArgumentNullException">
<paramref name="subject" /> is <see langword="null" />.
-or-
<paramref name="tokenDescriptor" /> is <see langword="null" />.</exception>
</Docs>
</Member>
<Member MemberName="Assertion">
<MemberSignature Language="C#" Value="public const string Assertion;" />
<MemberSignature Language="ILAsm" Value=".field public static literal string Assertion" />
<MemberSignature Language="DocId" Value="F:System.IdentityModel.Tokens.SamlSecurityTokenHandler.Assertion" />
<MemberSignature Language="VB.NET" Value="Public Const Assertion As String " />
<MemberSignature Language="F#" Value="val mutable Assertion : string" Usage="System.IdentityModel.Tokens.SamlSecurityTokenHandler.Assertion" />
<MemberSignature Language="C++ CLI" Value="public: System::String ^ Assertion;" />
<MemberType>Field</MemberType>
<AssemblyInfo>
<AssemblyName>System.IdentityModel</AssemblyName>
<AssemblyVersion>4.0.0.0</AssemblyVersion>
</AssemblyInfo>
<ReturnValue>
<ReturnType>System.String</ReturnType>
</ReturnValue>
<Docs>
<summary>urn:oasis:names:tc:SAML:1.0:assertion.</summary>
<remarks>To be added.</remarks>
</Docs>
</Member>
<Member MemberName="BearerConfirmationMethod">
<MemberSignature Language="C#" Value="public const string BearerConfirmationMethod;" />
<MemberSignature Language="ILAsm" Value=".field public static literal string BearerConfirmationMethod" />
<MemberSignature Language="DocId" Value="F:System.IdentityModel.Tokens.SamlSecurityTokenHandler.BearerConfirmationMethod" />
<MemberSignature Language="VB.NET" Value="Public Const BearerConfirmationMethod As String " />
<MemberSignature Language="F#" Value="val mutable BearerConfirmationMethod : string" Usage="System.IdentityModel.Tokens.SamlSecurityTokenHandler.BearerConfirmationMethod" />
<MemberSignature Language="C++ CLI" Value="public: System::String ^ BearerConfirmationMethod;" />
<MemberType>Field</MemberType>
<AssemblyInfo>
<AssemblyName>System.IdentityModel</AssemblyName>
<AssemblyVersion>4.0.0.0</AssemblyVersion>
</AssemblyInfo>
<ReturnValue>
<ReturnType>System.String</ReturnType>
</ReturnValue>
<Docs>
<summary>urn:oasis:names:tc:SAML:1.0:cm:bearer.</summary>
<remarks>To be added.</remarks>
</Docs>
</Member>
<Member MemberName="CanReadToken">
<MemberSignature Language="C#" Value="public override bool CanReadToken (System.Xml.XmlReader reader);" />
<MemberSignature Language="ILAsm" Value=".method public hidebysig virtual instance bool CanReadToken(class System.Xml.XmlReader reader) cil managed" />
<MemberSignature Language="DocId" Value="M:System.IdentityModel.Tokens.SamlSecurityTokenHandler.CanReadToken(System.Xml.XmlReader)" />
<MemberSignature Language="VB.NET" Value="Public Overrides Function CanReadToken (reader As XmlReader) As Boolean" />
<MemberSignature Language="F#" Value="override this.CanReadToken : System.Xml.XmlReader -> bool" Usage="samlSecurityTokenHandler.CanReadToken reader" />
<MemberSignature Language="C++ CLI" Value="public:
 override bool CanReadToken(System::Xml::XmlReader ^ reader);" />
<MemberType>Method</MemberType>
<AssemblyInfo>
<AssemblyName>System.IdentityModel</AssemblyName>
<AssemblyVersion>4.0.0.0</AssemblyVersion>
</AssemblyInfo>
<ReturnValue>
<ReturnType>System.Boolean</ReturnType>
</ReturnValue>
<Parameters>
<Parameter Name="reader" Type="System.Xml.XmlReader" />
</Parameters>
<Docs>
<param name="reader">An XML reader positioned at a start element. The reader should not be advanced.</param>
<summary>Indicates whether the current XML element can be read as a token of the type handled by this instance.</summary>
<returns>
<see langword="true" /> if the <see cref="M:System.IdentityModel.Tokens.SamlSecurityTokenHandler.ReadToken(System.Xml.XmlReader)" /> method can read the element; otherwise, <see langword="false" />.</returns>
<remarks>To be added.</remarks>
</Docs>
</Member>
<Member MemberName="CanValidateToken">
<MemberSignature Language="C#" Value="public override bool CanValidateToken { get; }" />
<MemberSignature Language="ILAsm" Value=".property instance bool CanValidateToken" />
<MemberSignature Language="DocId" Value="P:System.IdentityModel.Tokens.SamlSecurityTokenHandler.CanValidateToken" />
<MemberSignature Language="VB.NET" Value="Public Overrides ReadOnly Property CanValidateToken As Boolean" />
<MemberSignature Language="F#" Value="member this.CanValidateToken : bool" Usage="System.IdentityModel.Tokens.SamlSecurityTokenHandler.CanValidateToken" />
<MemberSignature Language="C++ CLI" Value="public:
 virtual property bool CanValidateToken { bool get(); };" />
<MemberType>Property</MemberType>
<AssemblyInfo>
<AssemblyName>System.IdentityModel</AssemblyName>
<AssemblyVersion>4.0.0.0</AssemblyVersion>
</AssemblyInfo>
<ReturnValue>
<ReturnType>System.Boolean</ReturnType>
</ReturnValue>
<Docs>
<summary>Gets a value that indicates if this handler can validate tokens of type <see cref="T:System.IdentityModel.Tokens.SamlSecurityToken" />.</summary>
<value>
<see langword="true" />, which indicates that the handler can validate tokens of type <see cref="T:System.IdentityModel.Tokens.SamlSecurityToken" />.</value>
<remarks>
<format type="text/markdown"><![CDATA[
## Remarks
This method overrides the base class method and always returns `true`.
]]></format>
</remarks>
</Docs>
</Member>
<Member MemberName="CanWriteToken">
<MemberSignature Language="C#" Value="public override bool CanWriteToken { get; }" />
<MemberSignature Language="ILAsm" Value=".property instance bool CanWriteToken" />
<MemberSignature Language="DocId" Value="P:System.IdentityModel.Tokens.SamlSecurityTokenHandler.CanWriteToken" />
<MemberSignature Language="VB.NET" Value="Public Overrides ReadOnly Property CanWriteToken As Boolean" />
<MemberSignature Language="F#" Value="member this.CanWriteToken : bool" Usage="System.IdentityModel.Tokens.SamlSecurityTokenHandler.CanWriteToken" />
<MemberSignature Language="C++ CLI" Value="public:
 virtual property bool CanWriteToken { bool get(); };" />
<MemberType>Property</MemberType>
<AssemblyInfo>
<AssemblyName>System.IdentityModel</AssemblyName>
<AssemblyVersion>4.0.0.0</AssemblyVersion>
</AssemblyInfo>
<ReturnValue>
<ReturnType>System.Boolean</ReturnType>
</ReturnValue>
<Docs>
<summary>Gets a value that indicates whether this handler can serialize tokens of type <see cref="T:System.IdentityModel.Tokens.SamlSecurityToken" />.</summary>
<value>
<see langword="true" />; which indicates that the handler can serialize tokens of type <see cref="T:System.IdentityModel.Tokens.SamlSecurityToken" />.</value>
<remarks>
<format type="text/markdown"><![CDATA[
## Remarks
This method overrides the base class method and always returns `true`.
]]></format>
</remarks>
</Docs>
</Member>
<Member MemberName="CertificateValidator">
<MemberSignature Language="C#" Value="public System.IdentityModel.Selectors.X509CertificateValidator CertificateValidator { get; set; }" />
<MemberSignature Language="ILAsm" Value=".property instance class System.IdentityModel.Selectors.X509CertificateValidator CertificateValidator" />
<MemberSignature Language="DocId" Value="P:System.IdentityModel.Tokens.SamlSecurityTokenHandler.CertificateValidator" />
<MemberSignature Language="VB.NET" Value="Public Property CertificateValidator As X509CertificateValidator" />
<MemberSignature Language="F#" Value="member this.CertificateValidator : System.IdentityModel.Selectors.X509CertificateValidator with get, set" Usage="System.IdentityModel.Tokens.SamlSecurityTokenHandler.CertificateValidator" />
<MemberSignature Language="C++ CLI" Value="public:
 property System::IdentityModel::Selectors::X509CertificateValidator ^ CertificateValidator { System::IdentityModel::Selectors::X509CertificateValidator ^ get(); void set(System::IdentityModel::Selectors::X509CertificateValidator ^ value); };" />
<MemberType>Property</MemberType>
<AssemblyInfo>
<AssemblyName>System.IdentityModel</AssemblyName>
<AssemblyVersion>4.0.0.0</AssemblyVersion>
</AssemblyInfo>
<ReturnValue>
<ReturnType>System.IdentityModel.Selectors.X509CertificateValidator</ReturnType>
</ReturnValue>
<Docs>
<summary>Gets or sets the X.509 certificate validator that is used by the current instance to validate X.509 certificates.</summary>
<value>An <see cref="T:System.IdentityModel.Selectors.X509CertificateValidator" /> that represents the validator.</value>
<remarks>To be added.</remarks>
</Docs>
</Member>
<Member MemberName="CollectAttributeValues">
<MemberSignature Language="C#" Value="protected virtual System.Collections.Generic.ICollection<System.IdentityModel.Tokens.SamlAttribute> CollectAttributeValues (System.Collections.Generic.ICollection<System.IdentityModel.Tokens.SamlAttribute> attributes);" />
<MemberSignature Language="ILAsm" Value=".method familyhidebysig newslot virtual instance class System.Collections.Generic.ICollection`1<class System.IdentityModel.Tokens.SamlAttribute> CollectAttributeValues(class System.Collections.Generic.ICollection`1<class System.IdentityModel.Tokens.SamlAttribute> attributes) cil managed" />
<MemberSignature Language="DocId" Value="M:System.IdentityModel.Tokens.SamlSecurityTokenHandler.CollectAttributeValues(System.Collections.Generic.ICollection{System.IdentityModel.Tokens.SamlAttribute})" />
<MemberSignature Language="VB.NET" Value="Protected Overridable Function CollectAttributeValues (attributes As ICollection(Of SamlAttribute)) As ICollection(Of SamlAttribute)" />
<MemberSignature Language="F#" Value="abstract member CollectAttributeValues : System.Collections.Generic.ICollection<System.IdentityModel.Tokens.SamlAttribute> -> System.Collections.Generic.ICollection<System.IdentityModel.Tokens.SamlAttribute>
override this.CollectAttributeValues : System.Collections.Generic.ICollection<System.IdentityModel.Tokens.SamlAttribute> -> System.Collections.Generic.ICollection<System.IdentityModel.Tokens.SamlAttribute>" Usage="samlSecurityTokenHandler.CollectAttributeValues attributes" />
<MemberSignature Language="C++ CLI" Value="protected:
 virtual System::Collections::Generic::ICollection<System::IdentityModel::Tokens::SamlAttribute ^> ^ CollectAttributeValues(System::Collections::Generic::ICollection<System::IdentityModel::Tokens::SamlAttribute ^> ^ attributes);" />
<MemberType>Method</MemberType>
<AssemblyInfo>
<AssemblyName>System.IdentityModel</AssemblyName>
<AssemblyVersion>4.0.0.0</AssemblyVersion>
</AssemblyInfo>
<ReturnValue>
<ReturnType>System.Collections.Generic.ICollection<System.IdentityModel.Tokens.SamlAttribute></ReturnType>
</ReturnValue>
<Parameters>
<Parameter Name="attributes" Type="System.Collections.Generic.ICollection<System.IdentityModel.Tokens.SamlAttribute>" />
</Parameters>
<Docs>
<param name="attributes">A collection of type <see cref="T:System.IdentityModel.Tokens.SamlAttribute" /> that contains the attributes generated from claims.</param>
<summary>Collects attributes with a common claim type, claim value type, and original issuer into a single attribute with multiple values.</summary>
<returns>A collection of <see cref="T:System.IdentityModel.Tokens.SamlAttribute" /> that contains attributes derived from the input collection. Attributes in the input collection that share a common claim type, claim value, and original issuer with other attributes are consolidated into a single attribute with multiple values in the output collection. Attributes in the input collection that do not share claim type, claim value, or original issuer with other attributes appear unaltered in the output collection.</returns>
<remarks>To be added.</remarks>
</Docs>
</Member>
<Member MemberName="CreateAdvice">
<MemberSignature Language="C#" Value="protected virtual System.IdentityModel.Tokens.SamlAdvice CreateAdvice (System.IdentityModel.Tokens.SecurityTokenDescriptor tokenDescriptor);" />
<MemberSignature Language="ILAsm" Value=".method familyhidebysig newslot virtual instance class System.IdentityModel.Tokens.SamlAdvice CreateAdvice(class System.IdentityModel.Tokens.SecurityTokenDescriptor tokenDescriptor) cil managed" />
<MemberSignature Language="DocId" Value="M:System.IdentityModel.Tokens.SamlSecurityTokenHandler.CreateAdvice(System.IdentityModel.Tokens.SecurityTokenDescriptor)" />
<MemberSignature Language="VB.NET" Value="Protected Overridable Function CreateAdvice (tokenDescriptor As SecurityTokenDescriptor) As SamlAdvice" />
<MemberSignature Language="F#" Value="abstract member CreateAdvice : System.IdentityModel.Tokens.SecurityTokenDescriptor -> System.IdentityModel.Tokens.SamlAdvice
override this.CreateAdvice : System.IdentityModel.Tokens.SecurityTokenDescriptor -> System.IdentityModel.Tokens.SamlAdvice" Usage="samlSecurityTokenHandler.CreateAdvice tokenDescriptor" />
<MemberSignature Language="C++ CLI" Value="protected:
 virtual System::IdentityModel::Tokens::SamlAdvice ^ CreateAdvice(System::IdentityModel::Tokens::SecurityTokenDescriptor ^ tokenDescriptor);" />
<MemberType>Method</MemberType>
<AssemblyInfo>
<AssemblyName>System.IdentityModel</AssemblyName>
<AssemblyVersion>4.0.0.0</AssemblyVersion>
</AssemblyInfo>
<ReturnValue>
<ReturnType>System.IdentityModel.Tokens.SamlAdvice</ReturnType>
</ReturnValue>
<Parameters>
<Parameter Name="tokenDescriptor" Type="System.IdentityModel.Tokens.SecurityTokenDescriptor" />
</Parameters>
<Docs>
<param name="tokenDescriptor">The token descriptor.</param>
<summary>When overridden in a derived class, creates a <see cref="T:System.IdentityModel.Tokens.SamlAdvice" /> object for the assertion.</summary>
<returns>A <see cref="T:System.IdentityModel.Tokens.SamlAdvice" /> object. The default is <see langword="null" />.</returns>
<remarks>
<format type="text/markdown"><![CDATA[
## Remarks
By default, this method returns `null`.
]]></format>
</remarks>
</Docs>
</Member>
<Member MemberName="CreateAssertion">
<MemberSignature Language="C#" Value="protected virtual System.IdentityModel.Tokens.SamlAssertion CreateAssertion (string issuer, System.IdentityModel.Tokens.SamlConditions conditions, System.IdentityModel.Tokens.SamlAdvice advice, System.Collections.Generic.IEnumerable<System.IdentityModel.Tokens.SamlStatement> statements);" />
<MemberSignature Language="ILAsm" Value=".method familyhidebysig newslot virtual instance class System.IdentityModel.Tokens.SamlAssertion CreateAssertion(string issuer, class System.IdentityModel.Tokens.SamlConditions conditions, class System.IdentityModel.Tokens.SamlAdvice advice, class System.Collections.Generic.IEnumerable`1<class System.IdentityModel.Tokens.SamlStatement> statements) cil managed" />
<MemberSignature Language="DocId" Value="M:System.IdentityModel.Tokens.SamlSecurityTokenHandler.CreateAssertion(System.String,System.IdentityModel.Tokens.SamlConditions,System.IdentityModel.Tokens.SamlAdvice,System.Collections.Generic.IEnumerable{System.IdentityModel.Tokens.SamlStatement})" />
<MemberSignature Language="VB.NET" Value="Protected Overridable Function CreateAssertion (issuer As String, conditions As SamlConditions, advice As SamlAdvice, statements As IEnumerable(Of SamlStatement)) As SamlAssertion" />
<MemberSignature Language="F#" Value="abstract member CreateAssertion : string * System.IdentityModel.Tokens.SamlConditions * System.IdentityModel.Tokens.SamlAdvice * seq<System.IdentityModel.Tokens.SamlStatement> -> System.IdentityModel.Tokens.SamlAssertion
override this.CreateAssertion : string * System.IdentityModel.Tokens.SamlConditions * System.IdentityModel.Tokens.SamlAdvice * seq<System.IdentityModel.Tokens.SamlStatement> -> System.IdentityModel.Tokens.SamlAssertion" Usage="samlSecurityTokenHandler.CreateAssertion (issuer, conditions, advice, statements)" />
<MemberSignature Language="C++ CLI" Value="protected:
 virtual System::IdentityModel::Tokens::SamlAssertion ^ CreateAssertion(System::String ^ issuer, System::IdentityModel::Tokens::SamlConditions ^ conditions, System::IdentityModel::Tokens::SamlAdvice ^ advice, System::Collections::Generic::IEnumerable<System::IdentityModel::Tokens::SamlStatement ^> ^ statements);" />
<MemberType>Method</MemberType>
<AssemblyInfo>
<AssemblyName>System.IdentityModel</AssemblyName>
<AssemblyVersion>4.0.0.0</AssemblyVersion>
</AssemblyInfo>
<ReturnValue>
<ReturnType>System.IdentityModel.Tokens.SamlAssertion</ReturnType>
</ReturnValue>
<Parameters>
<Parameter Name="issuer" Type="System.String" />
<Parameter Name="conditions" Type="System.IdentityModel.Tokens.SamlConditions" />
<Parameter Name="advice" Type="System.IdentityModel.Tokens.SamlAdvice" />
<Parameter Name="statements" Type="System.Collections.Generic.IEnumerable<System.IdentityModel.Tokens.SamlStatement>" />
</Parameters>
<Docs>
<param name="issuer">The issuer of the assertion.</param>
<param name="conditions">The <see cref="T:System.IdentityModel.Tokens.SamlConditions" /> to add to the assertion.</param>
<param name="advice">The <see cref="T:System.IdentityModel.Tokens.SamlAdvice" /> to add to the assertion.</param>
<param name="statements">The collection of <see cref="T:System.IdentityModel.Tokens.SamlStatement" /> to add to the assertion.</param>
<summary>Creates a <see cref="T:System.IdentityModel.Tokens.SamlAssertion" /> object by using the specified issuer, conditions, advice and statements. You can override this method to customize the parameters used to create the assertion.</summary>
<returns>The SAML assertion that was created.</returns>
<remarks>
<format type="text/markdown"><![CDATA[
## Remarks
A unique random id is created for the assertion and the <xref:System.IdentityModel.Tokens.SamlAssertion.AssertionId%2A> property is set to this value. The <xref:System.IdentityModel.Tokens.SamlAssertion.IssueInstant%2A> is set to <xref:System.DateTime.UtcNow%2A>.
]]></format>
</remarks>
</Docs>
</Member>
<Member MemberName="CreateAttribute">
<MemberSignature Language="C#" Value="protected virtual System.IdentityModel.Tokens.SamlAttribute CreateAttribute (System.Security.Claims.Claim claim, System.IdentityModel.Tokens.SecurityTokenDescriptor tokenDescriptor);" />
<MemberSignature Language="ILAsm" Value=".method familyhidebysig newslot virtual instance class System.IdentityModel.Tokens.SamlAttribute CreateAttribute(class System.Security.Claims.Claim claim, class System.IdentityModel.Tokens.SecurityTokenDescriptor tokenDescriptor) cil managed" />
<MemberSignature Language="DocId" Value="M:System.IdentityModel.Tokens.SamlSecurityTokenHandler.CreateAttribute(System.Security.Claims.Claim,System.IdentityModel.Tokens.SecurityTokenDescriptor)" />
<MemberSignature Language="VB.NET" Value="Protected Overridable Function CreateAttribute (claim As Claim, tokenDescriptor As SecurityTokenDescriptor) As SamlAttribute" />
<MemberSignature Language="F#" Value="abstract member CreateAttribute : System.Security.Claims.Claim * System.IdentityModel.Tokens.SecurityTokenDescriptor -> System.IdentityModel.Tokens.SamlAttribute
override this.CreateAttribute : System.Security.Claims.Claim * System.IdentityModel.Tokens.SecurityTokenDescriptor -> System.IdentityModel.Tokens.SamlAttribute" Usage="samlSecurityTokenHandler.CreateAttribute (claim, tokenDescriptor)" />
<MemberSignature Language="C++ CLI" Value="protected:
 virtual System::IdentityModel::Tokens::SamlAttribute ^ CreateAttribute(System::Security::Claims::Claim ^ claim, System::IdentityModel::Tokens::SecurityTokenDescriptor ^ tokenDescriptor);" />
<MemberType>Method</MemberType>
<AssemblyInfo>
<AssemblyName>System.IdentityModel</AssemblyName>
<AssemblyVersion>4.0.0.0</AssemblyVersion>
</AssemblyInfo>
<ReturnValue>
<ReturnType>System.IdentityModel.Tokens.SamlAttribute</ReturnType>
</ReturnValue>
<Parameters>
<Parameter Name="claim" Type="System.Security.Claims.Claim" />
<Parameter Name="tokenDescriptor" Type="System.IdentityModel.Tokens.SecurityTokenDescriptor" />
</Parameters>
<Docs>
<param name="claim">The <see cref="T:System.Security.Claims.Claim" /> from which to generate the SAML Attribute.</param>
<param name="tokenDescriptor">The token descriptor.</param>
<summary>Creates a <see cref="T:System.IdentityModel.Tokens.SamlAttribute" /> object from a claim.</summary>
<returns>A <see cref="T:System.IdentityModel.Tokens.SamlAttribute" /> that contains the converted claim.</returns>
<remarks>To be added.</remarks>
<exception cref="T:System.ArgumentNullException">
<paramref name="claim" /> is <see langword="null" />.</exception>
</Docs>
</Member>
<Member MemberName="CreateAttributeStatement">
<MemberSignature Language="C#" Value="protected virtual System.IdentityModel.Tokens.SamlAttributeStatement CreateAttributeStatement (System.IdentityModel.Tokens.SamlSubject samlSubject, System.Security.Claims.ClaimsIdentity subject, System.IdentityModel.Tokens.SecurityTokenDescriptor tokenDescriptor);" />
<MemberSignature Language="ILAsm" Value=".method familyhidebysig newslot virtual instance class System.IdentityModel.Tokens.SamlAttributeStatement CreateAttributeStatement(class System.IdentityModel.Tokens.SamlSubject samlSubject, class System.Security.Claims.ClaimsIdentity subject, class System.IdentityModel.Tokens.SecurityTokenDescriptor tokenDescriptor) cil managed" />
<MemberSignature Language="DocId" Value="M:System.IdentityModel.Tokens.SamlSecurityTokenHandler.CreateAttributeStatement(System.IdentityModel.Tokens.SamlSubject,System.Security.Claims.ClaimsIdentity,System.IdentityModel.Tokens.SecurityTokenDescriptor)" />
<MemberSignature Language="VB.NET" Value="Protected Overridable Function CreateAttributeStatement (samlSubject As SamlSubject, subject As ClaimsIdentity, tokenDescriptor As SecurityTokenDescriptor) As SamlAttributeStatement" />
<MemberSignature Language="F#" Value="abstract member CreateAttributeStatement : System.IdentityModel.Tokens.SamlSubject * System.Security.Claims.ClaimsIdentity * System.IdentityModel.Tokens.SecurityTokenDescriptor -> System.IdentityModel.Tokens.SamlAttributeStatement
override this.CreateAttributeStatement : System.IdentityModel.Tokens.SamlSubject * System.Security.Claims.ClaimsIdentity * System.IdentityModel.Tokens.SecurityTokenDescriptor -> System.IdentityModel.Tokens.SamlAttributeStatement" Usage="samlSecurityTokenHandler.CreateAttributeStatement (samlSubject, subject, tokenDescriptor)" />
<MemberSignature Language="C++ CLI" Value="protected:
 virtual System::IdentityModel::Tokens::SamlAttributeStatement ^ CreateAttributeStatement(System::IdentityModel::Tokens::SamlSubject ^ samlSubject, System::Security::Claims::ClaimsIdentity ^ subject, System::IdentityModel::Tokens::SecurityTokenDescriptor ^ tokenDescriptor);" />
<MemberType>Method</MemberType>
<AssemblyInfo>
<AssemblyName>System.IdentityModel</AssemblyName>
<AssemblyVersion>4.0.0.0</AssemblyVersion>
</AssemblyInfo>
<ReturnValue>
<ReturnType>System.IdentityModel.Tokens.SamlAttributeStatement</ReturnType>
</ReturnValue>
<Parameters>
<Parameter Name="samlSubject" Type="System.IdentityModel.Tokens.SamlSubject" />
<Parameter Name="subject" Type="System.Security.Claims.ClaimsIdentity" />
<Parameter Name="tokenDescriptor" Type="System.IdentityModel.Tokens.SecurityTokenDescriptor" />
</Parameters>
<Docs>
<param name="samlSubject">The <see cref="T:System.IdentityModel.Tokens.SamlSubject" /> to use in the <see cref="T:System.IdentityModel.Tokens.SamlAttributeStatement" /> that is created.</param>
<param name="subject">The <see cref="T:System.Security.Claims.ClaimsIdentity" /> object that contains claims which will be converted to SAML Attributes.</param>
<param name="tokenDescriptor">The token descriptor.</param>
<summary>Creates a <see cref="T:System.IdentityModel.Tokens.SamlAttributeStatement" /> object from a token descriptor.</summary>
<returns>A <see cref="T:System.IdentityModel.Tokens.SamlAttributeStatement" /> that contains the converted claims.</returns>
<remarks>
<format type="text/markdown"><![CDATA[
## Remarks
This method may return `null` if the token descriptor does not contain any subject or the subject does not have any claims.
]]></format>
</remarks>
</Docs>
</Member>
<Member MemberName="CreateAuthenticationStatement">
<MemberSignature Language="C#" Value="protected virtual System.IdentityModel.Tokens.SamlAuthenticationStatement CreateAuthenticationStatement (System.IdentityModel.Tokens.SamlSubject samlSubject, System.Security.Claims.AuthenticationInformation authInfo, System.IdentityModel.Tokens.SecurityTokenDescriptor tokenDescriptor);" />
<MemberSignature Language="ILAsm" Value=".method familyhidebysig newslot virtual instance class System.IdentityModel.Tokens.SamlAuthenticationStatement CreateAuthenticationStatement(class System.IdentityModel.Tokens.SamlSubject samlSubject, class System.Security.Claims.AuthenticationInformation authInfo, class System.IdentityModel.Tokens.SecurityTokenDescriptor tokenDescriptor) cil managed" />
<MemberSignature Language="DocId" Value="M:System.IdentityModel.Tokens.SamlSecurityTokenHandler.CreateAuthenticationStatement(System.IdentityModel.Tokens.SamlSubject,System.Security.Claims.AuthenticationInformation,System.IdentityModel.Tokens.SecurityTokenDescriptor)" />
<MemberSignature Language="VB.NET" Value="Protected Overridable Function CreateAuthenticationStatement (samlSubject As SamlSubject, authInfo As AuthenticationInformation, tokenDescriptor As SecurityTokenDescriptor) As SamlAuthenticationStatement" />
<MemberSignature Language="F#" Value="abstract member CreateAuthenticationStatement : System.IdentityModel.Tokens.SamlSubject * System.Security.Claims.AuthenticationInformation * System.IdentityModel.Tokens.SecurityTokenDescriptor -> System.IdentityModel.Tokens.SamlAuthenticationStatement
override this.CreateAuthenticationStatement : System.IdentityModel.Tokens.SamlSubject * System.Security.Claims.AuthenticationInformation * System.IdentityModel.Tokens.SecurityTokenDescriptor -> System.IdentityModel.Tokens.SamlAuthenticationStatement" Usage="samlSecurityTokenHandler.CreateAuthenticationStatement (samlSubject, authInfo, tokenDescriptor)" />
<MemberSignature Language="C++ CLI" Value="protected:
 virtual System::IdentityModel::Tokens::SamlAuthenticationStatement ^ CreateAuthenticationStatement(System::IdentityModel::Tokens::SamlSubject ^ samlSubject, System::Security::Claims::AuthenticationInformation ^ authInfo, System::IdentityModel::Tokens::SecurityTokenDescriptor ^ tokenDescriptor);" />
<MemberType>Method</MemberType>
<AssemblyInfo>
<AssemblyName>System.IdentityModel</AssemblyName>
<AssemblyVersion>4.0.0.0</AssemblyVersion>
</AssemblyInfo>
<ReturnValue>
<ReturnType>System.IdentityModel.Tokens.SamlAuthenticationStatement</ReturnType>
</ReturnValue>
<Parameters>
<Parameter Name="samlSubject" Type="System.IdentityModel.Tokens.SamlSubject" />
<Parameter Name="authInfo" Type="System.Security.Claims.AuthenticationInformation" />
<Parameter Name="tokenDescriptor" Type="System.IdentityModel.Tokens.SecurityTokenDescriptor" />
</Parameters>
<Docs>
<param name="samlSubject">The SamlSubject of the statement.</param>
<param name="authInfo">The <see cref="T:System.Security.Claims.AuthenticationInformation" /> from which to generate the SAML authentication statement.</param>
<param name="tokenDescriptor">Contains all the other information that is used in token issuance.</param>
<summary>Creates a SAML 1.1 authentication statement from the specified authentication information.</summary>
<returns>The SAML authentication statement that was created.</returns>
<remarks>To be added.</remarks>
<exception cref="T:System.ArgumentNullException">
<paramref name="samlSubject" /> is <see langword="null" />.
-or-
<paramref name="tokenDescriptor" /> is <see langword="null" />.</exception>
</Docs>
</Member>
<Member MemberName="CreateClaims">
<MemberSignature Language="C#" Value="protected virtual System.Security.Claims.ClaimsIdentity CreateClaims (System.IdentityModel.Tokens.SamlSecurityToken samlSecurityToken);" />
<MemberSignature Language="ILAsm" Value=".method familyhidebysig newslot virtual instance class System.Security.Claims.ClaimsIdentity CreateClaims(class System.IdentityModel.Tokens.SamlSecurityToken samlSecurityToken) cil managed" />
<MemberSignature Language="DocId" Value="M:System.IdentityModel.Tokens.SamlSecurityTokenHandler.CreateClaims(System.IdentityModel.Tokens.SamlSecurityToken)" />
<MemberSignature Language="VB.NET" Value="Protected Overridable Function CreateClaims (samlSecurityToken As SamlSecurityToken) As ClaimsIdentity" />
<MemberSignature Language="F#" Value="abstract member CreateClaims : System.IdentityModel.Tokens.SamlSecurityToken -> System.Security.Claims.ClaimsIdentity
override this.CreateClaims : System.IdentityModel.Tokens.SamlSecurityToken -> System.Security.Claims.ClaimsIdentity" Usage="samlSecurityTokenHandler.CreateClaims samlSecurityToken" />
<MemberSignature Language="C++ CLI" Value="protected:
 virtual System::Security::Claims::ClaimsIdentity ^ CreateClaims(System::IdentityModel::Tokens::SamlSecurityToken ^ samlSecurityToken);" />
<MemberType>Method</MemberType>
<AssemblyInfo>
<AssemblyName>System.IdentityModel</AssemblyName>
<AssemblyVersion>4.0.0.0</AssemblyVersion>
</AssemblyInfo>
<ReturnValue>
<ReturnType>System.Security.Claims.ClaimsIdentity</ReturnType>
</ReturnValue>
<Parameters>
<Parameter Name="samlSecurityToken" Type="System.IdentityModel.Tokens.SamlSecurityToken" />
</Parameters>
<Docs>
<param name="samlSecurityToken">A <see cref="T:System.IdentityModel.Tokens.SamlSecurityToken" /> that represents the security token from which to create the claims.</param>
<summary>Creates claims from a SAML 1.1 token.</summary>
<returns>A <see cref="T:System.Security.Claims.ClaimsIdentity" /> that contains the claims extracted from the token.</returns>
<remarks>To be added.</remarks>
<exception cref="T:System.ArgumentNullException">
<paramref name="samlSecurityToken" /> is <see langword="null" />.</exception>
<exception cref="T:System.ArgumentException">The <see cref="P:System.IdentityModel.Tokens.SamlSecurityToken.Assertion" /> property of <paramref name="samlSecurityToken" /> is <see langword="null" />.</exception>
<exception cref="T:System.InvalidOperationException">The handler is not configured or an issuer name registry is not configured for the handler. (The <see cref="P:System.IdentityModel.Tokens.SecurityTokenHandler.Configuration" /> property is <see langword="null" /> or is set to a <see cref="T:System.IdentityModel.Tokens.SecurityTokenHandlerConfiguration" /> with an <see cref="P:System.IdentityModel.Tokens.SecurityTokenHandlerConfiguration.IssuerNameRegistry" /> property that is <see langword="null" />.</exception>
<exception cref="T:System.IdentityModel.Tokens.SecurityTokenException">The issuer name returned by the configured issuer name registry for the security token (<paramref name="samlSecurityToken" />) is <see langword="null" /> or empty.</exception>
</Docs>
</Member>
<Member MemberName="CreateConditions">
<MemberSignature Language="C#" Value="protected virtual System.IdentityModel.Tokens.SamlConditions CreateConditions (System.IdentityModel.Protocols.WSTrust.Lifetime tokenLifetime, string relyingPartyAddress, System.IdentityModel.Tokens.SecurityTokenDescriptor tokenDescriptor);" />
<MemberSignature Language="ILAsm" Value=".method familyhidebysig newslot virtual instance class System.IdentityModel.Tokens.SamlConditions CreateConditions(class System.IdentityModel.Protocols.WSTrust.Lifetime tokenLifetime, string relyingPartyAddress, class System.IdentityModel.Tokens.SecurityTokenDescriptor tokenDescriptor) cil managed" />
<MemberSignature Language="DocId" Value="M:System.IdentityModel.Tokens.SamlSecurityTokenHandler.CreateConditions(System.IdentityModel.Protocols.WSTrust.Lifetime,System.String,System.IdentityModel.Tokens.SecurityTokenDescriptor)" />
<MemberSignature Language="VB.NET" Value="Protected Overridable Function CreateConditions (tokenLifetime As Lifetime, relyingPartyAddress As String, tokenDescriptor As SecurityTokenDescriptor) As SamlConditions" />
<MemberSignature Language="F#" Value="abstract member CreateConditions : System.IdentityModel.Protocols.WSTrust.Lifetime * string * System.IdentityModel.Tokens.SecurityTokenDescriptor -> System.IdentityModel.Tokens.SamlConditions
override this.CreateConditions : System.IdentityModel.Protocols.WSTrust.Lifetime * string * System.IdentityModel.Tokens.SecurityTokenDescriptor -> System.IdentityModel.Tokens.SamlConditions" Usage="samlSecurityTokenHandler.CreateConditions (tokenLifetime, relyingPartyAddress, tokenDescriptor)" />
<MemberSignature Language="C++ CLI" Value="protected:
 virtual System::IdentityModel::Tokens::SamlConditions ^ CreateConditions(System::IdentityModel::Protocols::WSTrust::Lifetime ^ tokenLifetime, System::String ^ relyingPartyAddress, System::IdentityModel::Tokens::SecurityTokenDescriptor ^ tokenDescriptor);" />
<MemberType>Method</MemberType>
<AssemblyInfo>
<AssemblyName>System.IdentityModel</AssemblyName>
<AssemblyVersion>4.0.0.0</AssemblyVersion>
</AssemblyInfo>
<ReturnValue>
<ReturnType>System.IdentityModel.Tokens.SamlConditions</ReturnType>
</ReturnValue>
<Parameters>
<Parameter Name="tokenLifetime" Type="System.IdentityModel.Protocols.WSTrust.Lifetime" />
<Parameter Name="relyingPartyAddress" Type="System.String" />
<Parameter Name="tokenDescriptor" Type="System.IdentityModel.Tokens.SecurityTokenDescriptor" />
</Parameters>
<Docs>
<param name="tokenLifetime">The lifetime of the token.</param>
<param name="relyingPartyAddress">The endpoint address for which the token is created. The address is modeled as an AudienceRestriction condition.</param>
<param name="tokenDescriptor">The token descriptor.</param>
<summary>Creates the conditions for the assertion.</summary>
<returns>A <see cref="T:System.IdentityModel.Tokens.SamlConditions" /> object that contains the conditions for the assertion.</returns>
<remarks>
<format type="text/markdown"><![CDATA[
## Remarks
Generally, conditions should be included in assertions to limit the impact of misuse of the assertion. Specifying the NotBefore and NotOnOrAfter conditions can limit the period of vulnerability in the case of a compromised assertion. The AudienceRestrictionCondition can be used to explicitly state the intended relying party or parties of the assertion, which coupled with appropriate audience restriction enforcement at relying parties can help to mitigate spoofing attacks between relying parties.
The default implementation creates NotBefore and NotOnOrAfter conditions based on the <xref:System.IdentityModel.Tokens.SecurityTokenDescriptor.Lifetime%2A> property of the `tokenDescriptor`. It will also generate an AudienceRestrictionCondition limiting consumption of the assertion to the <xref:System.IdentityModel.Tokens.SecurityTokenDescriptor.AppliesToAddress%2A> property of the `tokenDescriptor`.
]]></format>
</remarks>
</Docs>
</Member>
<Member MemberName="CreateSamlSubject">
<MemberSignature Language="C#" Value="protected virtual System.IdentityModel.Tokens.SamlSubject CreateSamlSubject (System.IdentityModel.Tokens.SecurityTokenDescriptor tokenDescriptor);" />
<MemberSignature Language="ILAsm" Value=".method familyhidebysig newslot virtual instance class System.IdentityModel.Tokens.SamlSubject CreateSamlSubject(class System.IdentityModel.Tokens.SecurityTokenDescriptor tokenDescriptor) cil managed" />
<MemberSignature Language="DocId" Value="M:System.IdentityModel.Tokens.SamlSecurityTokenHandler.CreateSamlSubject(System.IdentityModel.Tokens.SecurityTokenDescriptor)" />
<MemberSignature Language="VB.NET" Value="Protected Overridable Function CreateSamlSubject (tokenDescriptor As SecurityTokenDescriptor) As SamlSubject" />
<MemberSignature Language="F#" Value="abstract member CreateSamlSubject : System.IdentityModel.Tokens.SecurityTokenDescriptor -> System.IdentityModel.Tokens.SamlSubject
override this.CreateSamlSubject : System.IdentityModel.Tokens.SecurityTokenDescriptor -> System.IdentityModel.Tokens.SamlSubject" Usage="samlSecurityTokenHandler.CreateSamlSubject tokenDescriptor" />
<MemberSignature Language="C++ CLI" Value="protected:
 virtual System::IdentityModel::Tokens::SamlSubject ^ CreateSamlSubject(System::IdentityModel::Tokens::SecurityTokenDescriptor ^ tokenDescriptor);" />
<MemberType>Method</MemberType>
<AssemblyInfo>
<AssemblyName>System.IdentityModel</AssemblyName>
<AssemblyVersion>4.0.0.0</AssemblyVersion>
</AssemblyInfo>
<ReturnValue>
<ReturnType>System.IdentityModel.Tokens.SamlSubject</ReturnType>
</ReturnValue>
<Parameters>
<Parameter Name="tokenDescriptor" Type="System.IdentityModel.Tokens.SecurityTokenDescriptor" />
</Parameters>
<Docs>
<param name="tokenDescriptor">The security token descriptor from which to create the subject.</param>
<summary>Creates a SAML 1.1 subject for the assertion.</summary>
<returns>A <see cref="T:System.IdentityModel.Tokens.SamlSubject" /> that represents the subject of the assertion.</returns>
<remarks>To be added.</remarks>
<exception cref="T:System.ArgumentNullException">
<paramref name="tokenDescriptor" /> is <see langword="null" />.</exception>
</Docs>
</Member>
<Member MemberName="CreateSecurityTokenReference">
<MemberSignature Language="C#" Value="public override System.IdentityModel.Tokens.SecurityKeyIdentifierClause CreateSecurityTokenReference (System.IdentityModel.Tokens.SecurityToken token, bool attached);" />
<MemberSignature Language="ILAsm" Value=".method public hidebysig virtual instance class System.IdentityModel.Tokens.SecurityKeyIdentifierClause CreateSecurityTokenReference(class System.IdentityModel.Tokens.SecurityToken token, bool attached) cil managed" />
<MemberSignature Language="DocId" Value="M:System.IdentityModel.Tokens.SamlSecurityTokenHandler.CreateSecurityTokenReference(System.IdentityModel.Tokens.SecurityToken,System.Boolean)" />
<MemberSignature Language="VB.NET" Value="Public Overrides Function CreateSecurityTokenReference (token As SecurityToken, attached As Boolean) As SecurityKeyIdentifierClause" />
<MemberSignature Language="F#" Value="override this.CreateSecurityTokenReference : System.IdentityModel.Tokens.SecurityToken * bool -> System.IdentityModel.Tokens.SecurityKeyIdentifierClause" Usage="samlSecurityTokenHandler.CreateSecurityTokenReference (token, attached)" />
<MemberSignature Language="C++ CLI" Value="public:
 override System::IdentityModel::Tokens::SecurityKeyIdentifierClause ^ CreateSecurityTokenReference(System::IdentityModel::Tokens::SecurityToken ^ token, bool attached);" />
<MemberType>Method</MemberType>
<AssemblyInfo>
<AssemblyName>System.IdentityModel</AssemblyName>
<AssemblyVersion>4.0.0.0</AssemblyVersion>
</AssemblyInfo>
<ReturnValue>
<ReturnType>System.IdentityModel.Tokens.SecurityKeyIdentifierClause</ReturnType>
</ReturnValue>
<Parameters>
<Parameter Name="token" Type="System.IdentityModel.Tokens.SecurityToken" />
<Parameter Name="attached" Type="System.Boolean" />
</Parameters>
<Docs>
<param name="token">The SAML token.</param>
<param name="attached">A value that indicates whether an attached or unattached reference should be created.</param>
<summary>Creates the security token reference when the token is not attached to the message.</summary>
<returns>A <see cref="T:System.IdentityModel.Tokens.SecurityKeyIdentifierClause" /> that represents the token reference. (An instance of <see cref="T:System.IdentityModel.Tokens.SamlAssertionKeyIdentifierClause" /> is actually returned.)</returns>
<remarks>To be added.</remarks>
<exception cref="T:System.ArgumentNullException">
<paramref name="token" /> is <see langword="null" />.</exception>
</Docs>
</Member>
<Member MemberName="CreateStatements">
<MemberSignature Language="C#" Value="protected virtual System.Collections.Generic.IEnumerable<System.IdentityModel.Tokens.SamlStatement> CreateStatements (System.IdentityModel.Tokens.SecurityTokenDescriptor tokenDescriptor);" />
<MemberSignature Language="ILAsm" Value=".method familyhidebysig newslot virtual instance class System.Collections.Generic.IEnumerable`1<class System.IdentityModel.Tokens.SamlStatement> CreateStatements(class System.IdentityModel.Tokens.SecurityTokenDescriptor tokenDescriptor) cil managed" />
<MemberSignature Language="DocId" Value="M:System.IdentityModel.Tokens.SamlSecurityTokenHandler.CreateStatements(System.IdentityModel.Tokens.SecurityTokenDescriptor)" />
<MemberSignature Language="VB.NET" Value="Protected Overridable Function CreateStatements (tokenDescriptor As SecurityTokenDescriptor) As IEnumerable(Of SamlStatement)" />
<MemberSignature Language="F#" Value="abstract member CreateStatements : System.IdentityModel.Tokens.SecurityTokenDescriptor -> seq<System.IdentityModel.Tokens.SamlStatement>
override this.CreateStatements : System.IdentityModel.Tokens.SecurityTokenDescriptor -> seq<System.IdentityModel.Tokens.SamlStatement>" Usage="samlSecurityTokenHandler.CreateStatements tokenDescriptor" />
<MemberSignature Language="C++ CLI" Value="protected:
 virtual System::Collections::Generic::IEnumerable<System::IdentityModel::Tokens::SamlStatement ^> ^ CreateStatements(System::IdentityModel::Tokens::SecurityTokenDescriptor ^ tokenDescriptor);" />
<MemberType>Method</MemberType>
<AssemblyInfo>
<AssemblyName>System.IdentityModel</AssemblyName>
<AssemblyVersion>4.0.0.0</AssemblyVersion>
</AssemblyInfo>
<ReturnValue>
<ReturnType>System.Collections.Generic.IEnumerable<System.IdentityModel.Tokens.SamlStatement></ReturnType>
</ReturnValue>
<Parameters>
<Parameter Name="tokenDescriptor" Type="System.IdentityModel.Tokens.SecurityTokenDescriptor" />
</Parameters>
<Docs>
<param name="tokenDescriptor">The token descriptor from which to create the statements.</param>
<summary>Creates SAML 1.1 statements to be included in the assertion.</summary>
<returns>An enumeration of <see cref="T:System.IdentityModel.Tokens.SamlStatement" /> that contains the statements.</returns>
<remarks>
<format type="text/markdown"><![CDATA[
## Remarks
Statements are not required in a SAML 1.1 assertion. This method may return an empty collection.
]]></format>
</remarks>
<exception cref="T:System.ArgumentNullException">
<paramref name="tokenDescriptor" /> is <see langword="null" />.</exception>
</Docs>
</Member>
<Member MemberName="CreateToken">
<MemberSignature Language="C#" Value="public override System.IdentityModel.Tokens.SecurityToken CreateToken (System.IdentityModel.Tokens.SecurityTokenDescriptor tokenDescriptor);" />
<MemberSignature Language="ILAsm" Value=".method public hidebysig virtual instance class System.IdentityModel.Tokens.SecurityToken CreateToken(class System.IdentityModel.Tokens.SecurityTokenDescriptor tokenDescriptor) cil managed" />
<MemberSignature Language="DocId" Value="M:System.IdentityModel.Tokens.SamlSecurityTokenHandler.CreateToken(System.IdentityModel.Tokens.SecurityTokenDescriptor)" />
<MemberSignature Language="VB.NET" Value="Public Overrides Function CreateToken (tokenDescriptor As SecurityTokenDescriptor) As SecurityToken" />
<MemberSignature Language="F#" Value="override this.CreateToken : System.IdentityModel.Tokens.SecurityTokenDescriptor -> System.IdentityModel.Tokens.SecurityToken" Usage="samlSecurityTokenHandler.CreateToken tokenDescriptor" />
<MemberSignature Language="C++ CLI" Value="public:
 override System::IdentityModel::Tokens::SecurityToken ^ CreateToken(System::IdentityModel::Tokens::SecurityTokenDescriptor ^ tokenDescriptor);" />
<MemberType>Method</MemberType>
<AssemblyInfo>
<AssemblyName>System.IdentityModel</AssemblyName>
<AssemblyVersion>4.0.0.0</AssemblyVersion>
</AssemblyInfo>
<ReturnValue>
<ReturnType>System.IdentityModel.Tokens.SecurityToken</ReturnType>
</ReturnValue>
<Parameters>
<Parameter Name="tokenDescriptor" Type="System.IdentityModel.Tokens.SecurityTokenDescriptor" />
</Parameters>
<Docs>
<param name="tokenDescriptor">The token descriptor from which to create the security token.</param>
<summary>Creates a security token based on a token descriptor.</summary>
<returns>A <see cref="T:System.IdentityModel.Tokens.SecurityToken" /> that represents the SAML 1.1 security token. (The token returned is actually an instance of <see cref="T:System.IdentityModel.Tokens.SamlSecurityToken" />.)</returns>
<remarks>To be added.</remarks>
<exception cref="T:System.ArgumentNullException">
<paramref name="tokenDescriptor" /> is <see langword="null" />.</exception>
</Docs>
</Member>
<Member MemberName="CreateWindowsIdentity">
<MemberSignature Language="C#" Value="protected virtual System.Security.Principal.WindowsIdentity CreateWindowsIdentity (string upn);" />
<MemberSignature Language="ILAsm" Value=".method familyhidebysig newslot virtual instance class System.Security.Principal.WindowsIdentity CreateWindowsIdentity(string upn) cil managed" />
<MemberSignature Language="DocId" Value="M:System.IdentityModel.Tokens.SamlSecurityTokenHandler.CreateWindowsIdentity(System.String)" />
<MemberSignature Language="VB.NET" Value="Protected Overridable Function CreateWindowsIdentity (upn As String) As WindowsIdentity" />
<MemberSignature Language="F#" Value="abstract member CreateWindowsIdentity : string -> System.Security.Principal.WindowsIdentity
override this.CreateWindowsIdentity : string -> System.Security.Principal.WindowsIdentity" Usage="samlSecurityTokenHandler.CreateWindowsIdentity upn" />
<MemberSignature Language="C++ CLI" Value="protected:
 virtual System::Security::Principal::WindowsIdentity ^ CreateWindowsIdentity(System::String ^ upn);" />
<MemberType>Method</MemberType>
<AssemblyInfo>
<AssemblyName>System.IdentityModel</AssemblyName>
<AssemblyVersion>4.0.0.0</AssemblyVersion>
</AssemblyInfo>
<ReturnValue>
<ReturnType>System.Security.Principal.WindowsIdentity</ReturnType>
</ReturnValue>
<Parameters>
<Parameter Name="upn" Type="System.String" />
</Parameters>
<Docs>
<param name="upn">The UPN to use to create the identity.</param>
<summary>Creates a <see cref="T:System.Security.Principal.WindowsIdentity" /> object using the specified User Principal Name (UPN).</summary>
<returns>The Windows identity that was created.</returns>
<remarks>To be added.</remarks>
<exception cref="T:System.ArgumentException">
<paramref name="upn" /> is <see langword="null" /> or an empty string.</exception>
</Docs>
</Member>
<Member MemberName="CreateXmlStringFromAttributes">
<MemberSignature Language="C#" Value="protected virtual string CreateXmlStringFromAttributes (System.Collections.Generic.IEnumerable<System.IdentityModel.Tokens.SamlAttribute> attributes);" />
<MemberSignature Language="ILAsm" Value=".method familyhidebysig newslot virtual instance string CreateXmlStringFromAttributes(class System.Collections.Generic.IEnumerable`1<class System.IdentityModel.Tokens.SamlAttribute> attributes) cil managed" />
<MemberSignature Language="DocId" Value="M:System.IdentityModel.Tokens.SamlSecurityTokenHandler.CreateXmlStringFromAttributes(System.Collections.Generic.IEnumerable{System.IdentityModel.Tokens.SamlAttribute})" />
<MemberSignature Language="VB.NET" Value="Protected Overridable Function CreateXmlStringFromAttributes (attributes As IEnumerable(Of SamlAttribute)) As String" />
<MemberSignature Language="F#" Value="abstract member CreateXmlStringFromAttributes : seq<System.IdentityModel.Tokens.SamlAttribute> -> string
override this.CreateXmlStringFromAttributes : seq<System.IdentityModel.Tokens.SamlAttribute> -> string" Usage="samlSecurityTokenHandler.CreateXmlStringFromAttributes attributes" />
<MemberSignature Language="C++ CLI" Value="protected:
 virtual System::String ^ CreateXmlStringFromAttributes(System::Collections::Generic::IEnumerable<System::IdentityModel::Tokens::SamlAttribute ^> ^ attributes);" />
<MemberType>Method</MemberType>
<AssemblyInfo>
<AssemblyName>System.IdentityModel</AssemblyName>
<AssemblyVersion>4.0.0.0</AssemblyVersion>
</AssemblyInfo>
<ReturnValue>
<ReturnType>System.String</ReturnType>
</ReturnValue>
<Parameters>
<Parameter Name="attributes" Type="System.Collections.Generic.IEnumerable<System.IdentityModel.Tokens.SamlAttribute>" />
</Parameters>
<Docs>
<param name="attributes">An enumeration of type <see cref="T:System.IdentityModel.Tokens.SamlAttribute" /> that contains the attributes.</param>
<summary>Builds an XML formatted string from a collection of SAML 1.1 attributes that represent the Actor.</summary>
<returns>A well-formed XML string constructed using the attributes.</returns>
<remarks>
<format type="text/markdown"><![CDATA[
## Remarks
The string is of the form "\<Actor>\<Attribute name, ns>\<AttributeValue>...\</AttributeValue>, ...\</Attribute>...\</Actor>"
]]></format>
</remarks>
</Docs>
</Member>
<Member MemberName="DenormalizeAuthenticationType">
<MemberSignature Language="C#" Value="protected virtual string DenormalizeAuthenticationType (string normalizedAuthenticationType);" />
<MemberSignature Language="ILAsm" Value=".method familyhidebysig newslot virtual instance string DenormalizeAuthenticationType(string normalizedAuthenticationType) cil managed" />
<MemberSignature Language="DocId" Value="M:System.IdentityModel.Tokens.SamlSecurityTokenHandler.DenormalizeAuthenticationType(System.String)" />
<MemberSignature Language="VB.NET" Value="Protected Overridable Function DenormalizeAuthenticationType (normalizedAuthenticationType As String) As String" />
<MemberSignature Language="F#" Value="abstract member DenormalizeAuthenticationType : string -> string
override this.DenormalizeAuthenticationType : string -> string" Usage="samlSecurityTokenHandler.DenormalizeAuthenticationType normalizedAuthenticationType" />
<MemberSignature Language="C++ CLI" Value="protected:
 virtual System::String ^ DenormalizeAuthenticationType(System::String ^ normalizedAuthenticationType);" />
<MemberType>Method</MemberType>
<AssemblyInfo>
<AssemblyName>System.IdentityModel</AssemblyName>
<AssemblyVersion>4.0.0.0</AssemblyVersion>
</AssemblyInfo>
<ReturnValue>
<ReturnType>System.String</ReturnType>
</ReturnValue>
<Parameters>
<Parameter Name="normalizedAuthenticationType" Type="System.String" />
</Parameters>
<Docs>
<param name="normalizedAuthenticationType">The normalized value. One of the <see cref="T:System.IdentityModel.Tokens.AuthenticationMethods" /> values.</param>
<summary>Returns the SAML11 authentication method identifier that matches the specified normalized value for a SAML authentication method.</summary>
<returns>The SAML11 authentication method identifier (URI) that matches the specified normalized identifier. If no matching SAML11 authentication method is found, the <paramref name="normalizedAuthenticationType" /> URI is returned unaltered.</returns>
<remarks>
<format type="text/markdown"><![CDATA[
## Remarks
The <xref:System.IdentityModel.Tokens.SamlSecurityTokenHandler.DenormalizeAuthenticationType%2A> method returns the SAML11 authentication method identifier that matches the specified normalized URI. For example, if <xref:System.IdentityModel.Tokens.AuthenticationMethods.X509> is specified for `normalizedAuthenticationType`, the following URI is returned: `urn:oasis:names:tc:SAML:1.0:am:X509-PKI`. If a mapping does not exist for `normalizedAuthenticationType`, it is returned unaltered.
]]></format>
</remarks>
</Docs>
</Member>
<Member MemberName="DetectReplayedToken">
<MemberSignature Language="C#" Value="protected override void DetectReplayedToken (System.IdentityModel.Tokens.SecurityToken token);" />
<MemberSignature Language="ILAsm" Value=".method familyhidebysig virtual instance void DetectReplayedToken(class System.IdentityModel.Tokens.SecurityToken token) cil managed" />
<MemberSignature Language="DocId" Value="M:System.IdentityModel.Tokens.SamlSecurityTokenHandler.DetectReplayedToken(System.IdentityModel.Tokens.SecurityToken)" />
<MemberSignature Language="VB.NET" Value="Protected Overrides Sub DetectReplayedToken (token As SecurityToken)" />
<MemberSignature Language="F#" Value="override this.DetectReplayedToken : System.IdentityModel.Tokens.SecurityToken -> unit" Usage="samlSecurityTokenHandler.DetectReplayedToken token" />
<MemberSignature Language="C++ CLI" Value="protected:
 override void DetectReplayedToken(System::IdentityModel::Tokens::SecurityToken ^ token);" />
<MemberType>Method</MemberType>
<AssemblyInfo>
<AssemblyName>System.IdentityModel</AssemblyName>
<AssemblyVersion>4.0.0.0</AssemblyVersion>
</AssemblyInfo>
<ReturnValue>
<ReturnType>System.Void</ReturnType>
</ReturnValue>
<Parameters>
<Parameter Name="token" Type="System.IdentityModel.Tokens.SecurityToken" />
</Parameters>
<Docs>
<param name="token">A <see cref="T:System.IdentityModel.Tokens.SecurityToken" /> that represents the SAML 1.1 security token (the token should be of type <see cref="T:System.IdentityModel.Tokens.SamlSecurityToken" />) to be checked.</param>
<summary>Throws an exception if the specified token already exists in the token replay cache; otherwise the token is added to the cache.</summary>
<remarks>
<format type="text/markdown"><![CDATA[
## Remarks
The default behavior is to only check bearer tokens (tokens that do not have keys). The token replay cache is the <xref:System.IdentityModel.Tokens.SecurityTokenHandlerConfiguration.Caches%2A> object configured for this handler through the <xref:System.IdentityModel.Tokens.SecurityTokenHandlerConfiguration.TokenReplayCacheExpirationPeriod*> property of the <xref:System.IdentityModel.Tokens.SecurityTokenHandlerConfiguration> object referenced through the <xref:System.IdentityModel.Tokens.SecurityTokenHandler.Configuration%2A> property.
]]></format>
</remarks>
<exception cref="T:System.ArgumentNullException">
<paramref name="token" /> is <see langword="null" />.</exception>
<exception cref="T:System.InvalidOperationException">The <see cref="P:System.IdentityModel.Tokens.SecurityTokenHandler.Configuration" /> property is <see langword="null" />.
-or-
The <see cref="P:System.IdentityModel.Tokens.SecurityTokenHandlerConfiguration.Caches" /> property of the handler configuration (accessed through the <see cref="P:System.IdentityModel.Tokens.SecurityTokenHandler.Configuration" /> property) is <see langword="null" />.</exception>
<exception cref="T:System.ArgumentException">
<paramref name="token" /> cannot be cast as an instance of <see cref="T:System.IdentityModel.Tokens.SamlSecurityToken" />.</exception>
<exception cref="T:System.IdentityModel.Tokens.SecurityTokenValidationException">The ID of the assertion associated with the token is <see langword="null" /> or empty. (The <see cref="P:System.IdentityModel.Tokens.SamlSecurityToken.Assertion" /> property of the token references a <see cref="T:System.IdentityModel.Tokens.SamlAssertion" /> that has an <see cref="P:System.IdentityModel.Tokens.SamlAssertion.AssertionId" /> property that references a <see cref="T:System.IdentityModel.Tokens.Saml2Id" /> with a <see cref="P:System.IdentityModel.Tokens.Saml2Id.Value" /> property that is <see langword="null" /> or empty.)</exception>
<exception cref="T:System.IdentityModel.Tokens.SecurityTokenReplayDetectedException">The token already exists in the <see cref="T:System.IdentityModel.Tokens.TokenReplayCache" />.</exception>
</Docs>
</Member>
<Member MemberName="FindUpn">
<MemberSignature Language="C#" Value="protected virtual string FindUpn (System.Security.Claims.ClaimsIdentity claimsIdentity);" />
<MemberSignature Language="ILAsm" Value=".method familyhidebysig newslot virtual instance string FindUpn(class System.Security.Claims.ClaimsIdentity claimsIdentity) cil managed" />
<MemberSignature Language="DocId" Value="M:System.IdentityModel.Tokens.SamlSecurityTokenHandler.FindUpn(System.Security.Claims.ClaimsIdentity)" />
<MemberSignature Language="VB.NET" Value="Protected Overridable Function FindUpn (claimsIdentity As ClaimsIdentity) As String" />
<MemberSignature Language="F#" Value="abstract member FindUpn : System.Security.Claims.ClaimsIdentity -> string
override this.FindUpn : System.Security.Claims.ClaimsIdentity -> string" Usage="samlSecurityTokenHandler.FindUpn claimsIdentity" />
<MemberSignature Language="C++ CLI" Value="protected:
 virtual System::String ^ FindUpn(System::Security::Claims::ClaimsIdentity ^ claimsIdentity);" />
<MemberType>Method</MemberType>
<AssemblyInfo>
<AssemblyName>System.IdentityModel</AssemblyName>
<AssemblyVersion>4.0.0.0</AssemblyVersion>
</AssemblyInfo>
<ReturnValue>
<ReturnType>System.String</ReturnType>
</ReturnValue>
<Parameters>
<Parameter Name="claimsIdentity" Type="System.Security.Claims.ClaimsIdentity" />
</Parameters>
<Docs>
<param name="claimsIdentity">The claims identity object containing the desired UPN claim.</param>
<summary>Finds the UPN claim value in the specified <see cref="T:System.Security.Claims.ClaimsIdentity" /> object for the purpose of mapping the identity to a <see cref="T:System.Security.Principal.WindowsIdentity" /> object.</summary>
<returns>A string that contains the UPN claim value found.</returns>
<remarks>To be added.</remarks>
</Docs>
</Member>
<Member MemberName="GetEncryptingCredentials">
<MemberSignature Language="C#" Value="protected virtual System.IdentityModel.Tokens.EncryptingCredentials GetEncryptingCredentials (System.IdentityModel.Tokens.SecurityTokenDescriptor tokenDescriptor);" />
<MemberSignature Language="ILAsm" Value=".method familyhidebysig newslot virtual instance class System.IdentityModel.Tokens.EncryptingCredentials GetEncryptingCredentials(class System.IdentityModel.Tokens.SecurityTokenDescriptor tokenDescriptor) cil managed" />
<MemberSignature Language="DocId" Value="M:System.IdentityModel.Tokens.SamlSecurityTokenHandler.GetEncryptingCredentials(System.IdentityModel.Tokens.SecurityTokenDescriptor)" />
<MemberSignature Language="VB.NET" Value="Protected Overridable Function GetEncryptingCredentials (tokenDescriptor As SecurityTokenDescriptor) As EncryptingCredentials" />
<MemberSignature Language="F#" Value="abstract member GetEncryptingCredentials : System.IdentityModel.Tokens.SecurityTokenDescriptor -> System.IdentityModel.Tokens.EncryptingCredentials
override this.GetEncryptingCredentials : System.IdentityModel.Tokens.SecurityTokenDescriptor -> System.IdentityModel.Tokens.EncryptingCredentials" Usage="samlSecurityTokenHandler.GetEncryptingCredentials tokenDescriptor" />
<MemberSignature Language="C++ CLI" Value="protected:
 virtual System::IdentityModel::Tokens::EncryptingCredentials ^ GetEncryptingCredentials(System::IdentityModel::Tokens::SecurityTokenDescriptor ^ tokenDescriptor);" />
<MemberType>Method</MemberType>
<AssemblyInfo>
<AssemblyName>System.IdentityModel</AssemblyName>
<AssemblyVersion>4.0.0.0</AssemblyVersion>
</AssemblyInfo>
<ReturnValue>
<ReturnType>System.IdentityModel.Tokens.EncryptingCredentials</ReturnType>
</ReturnValue>
<Parameters>
<Parameter Name="tokenDescriptor" Type="System.IdentityModel.Tokens.SecurityTokenDescriptor" />
</Parameters>
<Docs>
<param name="tokenDescriptor">Retrieves some scope encrypting credentials from the Scope object.</param>
<summary>Gets the token encrypting credentials. Override this method to change the token encrypting credentials.</summary>
<returns>An <see cref="T:System.IdentityModel.Tokens.EncryptingCredentials" /> that represents the token encrypting credentials.</returns>
<remarks>
<format type="text/markdown"><![CDATA[
## Remarks
The default implementation retrieves the encrypting credentials from the <xref:System.IdentityModel.Tokens.SecurityTokenDescriptor.EncryptingCredentials%2A> property of the `tokenDescriptor`.
]]></format>
</remarks>
<exception cref="T:System.ArgumentNullException">
<paramref name="tokenDescriptor" /> is <see langword="null" />.</exception>
<exception cref="T:System.IdentityModel.Tokens.SecurityTokenException">The encrypting credentials retrieved from the token descriptor are asymmetric.</exception>
</Docs>
</Member>
<Member MemberName="GetSigningCredentials">
<MemberSignature Language="C#" Value="protected virtual System.IdentityModel.Tokens.SigningCredentials GetSigningCredentials (System.IdentityModel.Tokens.SecurityTokenDescriptor tokenDescriptor);" />
<MemberSignature Language="ILAsm" Value=".method familyhidebysig newslot virtual instance class System.IdentityModel.Tokens.SigningCredentials GetSigningCredentials(class System.IdentityModel.Tokens.SecurityTokenDescriptor tokenDescriptor) cil managed" />
<MemberSignature Language="DocId" Value="M:System.IdentityModel.Tokens.SamlSecurityTokenHandler.GetSigningCredentials(System.IdentityModel.Tokens.SecurityTokenDescriptor)" />
<MemberSignature Language="VB.NET" Value="Protected Overridable Function GetSigningCredentials (tokenDescriptor As SecurityTokenDescriptor) As SigningCredentials" />
<MemberSignature Language="F#" Value="abstract member GetSigningCredentials : System.IdentityModel.Tokens.SecurityTokenDescriptor -> System.IdentityModel.Tokens.SigningCredentials
override this.GetSigningCredentials : System.IdentityModel.Tokens.SecurityTokenDescriptor -> System.IdentityModel.Tokens.SigningCredentials" Usage="samlSecurityTokenHandler.GetSigningCredentials tokenDescriptor" />
<MemberSignature Language="C++ CLI" Value="protected:
 virtual System::IdentityModel::Tokens::SigningCredentials ^ GetSigningCredentials(System::IdentityModel::Tokens::SecurityTokenDescriptor ^ tokenDescriptor);" />
<MemberType>Method</MemberType>
<AssemblyInfo>
<AssemblyName>System.IdentityModel</AssemblyName>
<AssemblyVersion>4.0.0.0</AssemblyVersion>
</AssemblyInfo>
<ReturnValue>
<ReturnType>System.IdentityModel.Tokens.SigningCredentials</ReturnType>
</ReturnValue>
<Parameters>
<Parameter Name="tokenDescriptor" Type="System.IdentityModel.Tokens.SecurityTokenDescriptor" />
</Parameters>
<Docs>
<param name="tokenDescriptor">The token descriptor.</param>
<summary>Gets the credentials for signing the assertion.</summary>
<returns>A <see cref="T:System.IdentityModel.Tokens.SigningCredentials" /> that represents the credentials for signing the assertion.</returns>
<remarks>
<format type="text/markdown"><![CDATA[
## Remarks
SAML2 assertions used as security tokens should be signed.
The default implementation uses the <xref:System.IdentityModel.Tokens.SecurityTokenDescriptor.SigningCredentials%2A> property of the `tokenDescriptor` to retrieve the credentials.
]]></format>
</remarks>
<exception cref="T:System.ArgumentNullException">
<paramref name="tokenDescriptor" /> is <see langword="null" />.</exception>
</Docs>
</Member>
<Member MemberName="GetTokenReplayCacheEntryExpirationTime">
<MemberSignature Language="C#" Value="protected virtual DateTime GetTokenReplayCacheEntryExpirationTime (System.IdentityModel.Tokens.SamlSecurityToken token);" />
<MemberSignature Language="ILAsm" Value=".method familyhidebysig newslot virtual instance valuetype System.DateTime GetTokenReplayCacheEntryExpirationTime(class System.IdentityModel.Tokens.SamlSecurityToken token) cil managed" />
<MemberSignature Language="DocId" Value="M:System.IdentityModel.Tokens.SamlSecurityTokenHandler.GetTokenReplayCacheEntryExpirationTime(System.IdentityModel.Tokens.SamlSecurityToken)" />
<MemberSignature Language="VB.NET" Value="Protected Overridable Function GetTokenReplayCacheEntryExpirationTime (token As SamlSecurityToken) As DateTime" />
<MemberSignature Language="F#" Value="abstract member GetTokenReplayCacheEntryExpirationTime : System.IdentityModel.Tokens.SamlSecurityToken -> DateTime
override this.GetTokenReplayCacheEntryExpirationTime : System.IdentityModel.Tokens.SamlSecurityToken -> DateTime" Usage="samlSecurityTokenHandler.GetTokenReplayCacheEntryExpirationTime token" />
<MemberSignature Language="C++ CLI" Value="protected:
 virtual DateTime GetTokenReplayCacheEntryExpirationTime(System::IdentityModel::Tokens::SamlSecurityToken ^ token);" />
<MemberType>Method</MemberType>
<AssemblyInfo>
<AssemblyName>System.IdentityModel</AssemblyName>
<AssemblyVersion>4.0.0.0</AssemblyVersion>
</AssemblyInfo>
<ReturnValue>
<ReturnType>System.DateTime</ReturnType>
</ReturnValue>
<Parameters>
<Parameter Name="token" Type="System.IdentityModel.Tokens.SamlSecurityToken" />
</Parameters>
<Docs>
<param name="token">The token for which to return the expiration time.</param>
<summary>Returns the time until which the token should be held in the token replay cache.</summary>
<returns>A <see cref="T:System.DateTime" /> that represents the expiration time.</returns>
<remarks>
<format type="text/markdown"><![CDATA[
## Remarks
By default, this method returns the NotOnOrAfter of the SAML Condition if present.
If that value does not exist, it returns the NotOnOrAfter of the first SubjectConfirmationData.
This function will never return a value further from the current time (<xref:System.DateTime.Now%2A>) than Configuration.TokenReplayCacheExpirationPeriod.
]]></format>
</remarks>
<exception cref="T:System.ArgumentNullException">
<paramref name="token" /> is <see langword="null" />.</exception>
</Docs>
</Member>
<Member MemberName="GetTokenTypeIdentifiers">
<MemberSignature Language="C#" Value="public override string[] GetTokenTypeIdentifiers ();" />
<MemberSignature Language="ILAsm" Value=".method public hidebysig virtual instance string[] GetTokenTypeIdentifiers() cil managed" />
<MemberSignature Language="DocId" Value="M:System.IdentityModel.Tokens.SamlSecurityTokenHandler.GetTokenTypeIdentifiers" />
<MemberSignature Language="VB.NET" Value="Public Overrides Function GetTokenTypeIdentifiers () As String()" />
<MemberSignature Language="F#" Value="override this.GetTokenTypeIdentifiers : unit -> string[]" Usage="samlSecurityTokenHandler.GetTokenTypeIdentifiers " />
<MemberSignature Language="C++ CLI" Value="public:
 override cli::array <System::String ^> ^ GetTokenTypeIdentifiers();" />
<MemberType>Method</MemberType>
<AssemblyInfo>
<AssemblyName>System.IdentityModel</AssemblyName>
<AssemblyVersion>4.0.0.0</AssemblyVersion>
</AssemblyInfo>
<ReturnValue>
<ReturnType>System.String[]</ReturnType>
</ReturnValue>
<Parameters />
<Docs>
<summary>Gets the token type identifier(s) supported by this handler.</summary>
<returns>An array of strings that contains the token type identifier(s) supported by this handler.</returns>
<remarks>To be added.</remarks>
</Docs>
</Member>
<Member MemberName="KeyInfoSerializer">
<MemberSignature Language="C#" Value="public System.IdentityModel.Selectors.SecurityTokenSerializer KeyInfoSerializer { get; set; }" />
<MemberSignature Language="ILAsm" Value=".property instance class System.IdentityModel.Selectors.SecurityTokenSerializer KeyInfoSerializer" />
<MemberSignature Language="DocId" Value="P:System.IdentityModel.Tokens.SamlSecurityTokenHandler.KeyInfoSerializer" />
<MemberSignature Language="VB.NET" Value="Public Property KeyInfoSerializer As SecurityTokenSerializer" />
<MemberSignature Language="F#" Value="member this.KeyInfoSerializer : System.IdentityModel.Selectors.SecurityTokenSerializer with get, set" Usage="System.IdentityModel.Tokens.SamlSecurityTokenHandler.KeyInfoSerializer" />
<MemberSignature Language="C++ CLI" Value="public:
 property System::IdentityModel::Selectors::SecurityTokenSerializer ^ KeyInfoSerializer { System::IdentityModel::Selectors::SecurityTokenSerializer ^ get(); void set(System::IdentityModel::Selectors::SecurityTokenSerializer ^ value); };" />
<MemberType>Property</MemberType>
<AssemblyInfo>
<AssemblyName>System.IdentityModel</AssemblyName>
<AssemblyVersion>4.0.0.0</AssemblyVersion>
</AssemblyInfo>
<ReturnValue>
<ReturnType>System.IdentityModel.Selectors.SecurityTokenSerializer</ReturnType>
</ReturnValue>
<Docs>
<summary>Gets or sets the security token serializer that is used to serialize and deserialize key identifiers.</summary>
<value>A <see cref="T:System.IdentityModel.Selectors.SecurityTokenSerializer" /> that represents the serializer.</value>
<remarks>
<format type="text/markdown"><![CDATA[
## Remarks
Serializes and deserializes <xref:System.IdentityModel.Tokens.SecurityKeyIdentifier> objects.
]]></format>
</remarks>
<exception cref="T:System.ArgumentNullException">An attempt to set the value to <see langword="null" /> occurs.</exception>
</Docs>
</Member>
<Member MemberName="LoadCustomConfiguration">
<MemberSignature Language="C#" Value="public override void LoadCustomConfiguration (System.Xml.XmlNodeList customConfigElements);" />
<MemberSignature Language="ILAsm" Value=".method public hidebysig virtual instance void LoadCustomConfiguration(class System.Xml.XmlNodeList customConfigElements) cil managed" />
<MemberSignature Language="DocId" Value="M:System.IdentityModel.Tokens.SamlSecurityTokenHandler.LoadCustomConfiguration(System.Xml.XmlNodeList)" />
<MemberSignature Language="VB.NET" Value="Public Overrides Sub LoadCustomConfiguration (customConfigElements As XmlNodeList)" />
<MemberSignature Language="F#" Value="override this.LoadCustomConfiguration : System.Xml.XmlNodeList -> unit" Usage="samlSecurityTokenHandler.LoadCustomConfiguration customConfigElements" />
<MemberSignature Language="C++ CLI" Value="public:
 override void LoadCustomConfiguration(System::Xml::XmlNodeList ^ customConfigElements);" />
<MemberType>Method</MemberType>
<AssemblyInfo>
<AssemblyName>System.IdentityModel</AssemblyName>
<AssemblyVersion>4.0.0.0</AssemblyVersion>
</AssemblyInfo>
<ReturnValue>
<ReturnType>System.Void</ReturnType>
</ReturnValue>
<Parameters>
<Parameter Name="customConfigElements" Type="System.Xml.XmlNodeList" />
</Parameters>
<Docs>
<param name="customConfigElements">An <see cref="T:System.Xml.XmlNodeList" /> that specifies the SAML token authentication requirements.</param>
<summary>Loads custom configuration from XML.</summary>
<remarks>To be added.</remarks>
<exception cref="T:System.ArgumentNullException">
<paramref name="customConfigElements" /> is <see langword="null" />.</exception>
<exception cref="T:System.InvalidOperationException">The configuration specified in <paramref name="customConfigElements" /> is not valid.</exception>
</Docs>
</Member>
<Member MemberName="Namespace">
<MemberSignature Language="C#" Value="public const string Namespace;" />
<MemberSignature Language="ILAsm" Value=".field public static literal string Namespace" />
<MemberSignature Language="DocId" Value="F:System.IdentityModel.Tokens.SamlSecurityTokenHandler.Namespace" />
<MemberSignature Language="VB.NET" Value="Public Const Namespace As String " />
<MemberSignature Language="F#" Value="val mutable Namespace : string" Usage="System.IdentityModel.Tokens.SamlSecurityTokenHandler.Namespace" />