Show / Hide Table of Contents

Class IapCredential

A credential that utilizes the OpenID Connect specification to access an Identity-Aware Proxy (IAP) using the IapConfiguration.

Inheritance
object
Credential
ArcGISCredential
IapCredential
Implements
INotifyPropertyChanged
ArcGISCredential.Referer
ArcGISCredential.Username
ArcGISCredential.ToJson()
Credential.ServerContext
Credential.PropertyChanged
Credential.FromJson(string)
object.Equals(object)
object.Equals(object, object)
object.GetHashCode()
object.GetType()
object.ReferenceEquals(object, object)
object.ToString()
Namespace: Esri.ArcGISRuntime.Security
Assembly: Esri.ArcGISRuntime.dll
Syntax
public sealed class IapCredential : ArcGISCredential, INotifyPropertyChanged
Remarks

This credential is used to access the ArcGIS resources that are secured behind an Identity-Aware Proxy (IAP). Currently, only the Microsoft Entra Application Proxy is supported via the Microsoft Identity Platform.

Note: Using a private or ephemeral web browser session is not recommended when creating or invalidating IapCredential and OAuthUserCredential for user authentication to access the Identity-Aware Proxy (IAP). This is because such sessions may require users to enter their credentials multiple times.

Properties

Name Description
AuthorizationCode

Gets the authorization code received after successful authentication in a web session. This code is used to generate the IapTokenInfo.

Configuration

Gets the IapConfiguration information used by this credential to authenticate the user and generate tokens.

Methods

Name Description
CreateAsync(IapConfiguration, object?, CancellationToken)

Creates an IapCredential containing the necessary information to access the Identity-Aware Proxy (IAP) using OAuth and OpenID Connect.

GetTokenInfoAsync(CancellationToken)

Returns an instance of IapTokenInfo generated by this credential.

InvalidateAsync(object?, CancellationToken)

Initiates a logout request by displaying the logout page within a web session. It invalidates the user's identity and removes all associated tokens. After this function is called, the credentials will no longer be usable.

Applies to

TargetVersions
.NET300
.NET Windows300
.NET Android300
.NET iOS300
In this article
Provide feedback
Back to top Copyright © 2025 Esri.