Language

ManagedIdentityPopExtensions.WithRequestOverMtls Method

Definition

Uses the IMDSv2 attested flow (Credential Guard–issued certificate over mTLS) to acquire a standard bearer token. The mTLS certificate authenticates the connection to the ESTS token endpoint, but the returned token carries token_type=bearer and has no binding certificate in the AuthenticationResult. Requires Windows Credential Guard (VBS) to be enabled on the host. When attestation is required, call .WithAttestationSupport() (from the Microsoft.Identity.Client.KeyAttestation package) after this method.

public static Microsoft.Identity.Client.AcquireTokenForManagedIdentityParameterBuilder WithRequestOverMtls(this Microsoft.Identity.Client.AcquireTokenForManagedIdentityParameterBuilder builder);
static member WithRequestOverMtls : Microsoft.Identity.Client.AcquireTokenForManagedIdentityParameterBuilder -> Microsoft.Identity.Client.AcquireTokenForManagedIdentityParameterBuilder
<Extension()>
Public Function WithRequestOverMtls (builder As AcquireTokenForManagedIdentityParameterBuilder) As AcquireTokenForManagedIdentityParameterBuilder

Parameters

builder
AcquireTokenForManagedIdentityParameterBuilder

The AcquireTokenForManagedIdentityParameterBuilder instance.

Returns

The builder to chain .With methods.

Applies to