Language

AzureIdentityForKubernetesClientAssertion Class

Definition

Namespace:
Microsoft.Identity.Web
Assembly:
Microsoft.Identity.Web.Certificateless.dll
Package:
Microsoft.Identity.Web.Certificateless v4.16.1

Gets a signed assertion from Azure workload identity for kubernetes when an app is running in a container in Azure Kubernetes Services. See https://aka.ms/ms-id-web/certificateless and https://learn.microsoft.com/azure/aks/workload-identity-overview

public class AzureIdentityForKubernetesClientAssertion : Microsoft.Identity.Web.ClientAssertionProviderBase
type AzureIdentityForKubernetesClientAssertion = class
    inherit ClientAssertionProviderBase
Public Class AzureIdentityForKubernetesClientAssertion
Inherits ClientAssertionProviderBase
Inheritance
Object
ClientAssertionProviderBase
AzureIdentityForKubernetesClientAssertion

Constructors

Name Description
AzureIdentityForKubernetesClientAssertion(ILogger)

Gets a signed assertion from Azure workload identity for kubernetes. The file path is provided by an environment variable ("AZURE_FEDERATED_TOKEN_FILE") See https://aka.ms/ms-id-web/certificateless.
AzureIdentityForKubernetesClientAssertion(String, ILogger)

Gets a signed assertion from a file. See https://aka.ms/ms-id-web/certificateless.

Properties

Name Description
Expiry

Expiry of the client assertion.

(Inherited from ClientAssertionProviderBase)
SupportsTokenBinding

Indicates whether this provider can produce a binding certificate alongside its signed assertion, enabling the outer confidential client to issue mTLS Proof-of-Possession tokens. Defaults to false; providers that opt in must override this property to true and override GetSignedAssertionWithBindingAsync(AssertionRequestOptions, CancellationToken) to return a non-null ClientSignedAssertion.

(Inherited from ClientAssertionProviderBase)

Methods

Name Description
GetClientAssertionAsync(AssertionRequestOptions)

Get the signed assertion from a file.
GetSignedAssertionAsync(AssertionRequestOptions)

Get the signed assertion (and refreshes it if needed).

(Inherited from ClientAssertionProviderBase)
GetSignedAssertionWithBindingAsync(AssertionRequestOptions, CancellationToken)

Acquires a signed assertion together with its binding certificate, used by confidential clients configured for mTLS Proof-of-Possession. Returns null when the provider does not support token binding (the default).

(Inherited from ClientAssertionProviderBase)

Applies to