Table of Contents

Class SSHExtensions

Namespace
Microsoft.Identity.Client.SSHCertificates
Assembly
Microsoft.Identity.Client.dll

Extensions that add support for SSH certificates

public static class SSHExtensions
Inheritance
SSHExtensions
Inherited Members

Methods

WithSSHCertificateAuthenticationScheme(AcquireTokenInteractiveParameterBuilder, string, string)

Instructs AAD to return an SSH certificate instead of a Bearer token. The SSH certificate (not the same as public / private key pair used by SSH), can be used to securely deploy a public SSH key to a machine. See https://aka.ms/msal-net-ssh for details.

public static AcquireTokenInteractiveParameterBuilder WithSSHCertificateAuthenticationScheme(this AcquireTokenInteractiveParameterBuilder builder, string publicKeyJwk, string keyId)

Parameters

builder AcquireTokenInteractiveParameterBuilder

Interactive authentication builder

publicKeyJwk string

The public SSH key in JWK format (https://tools.ietf.org/html/rfc7517). Currently only RSA is supported, and the JWK should contain only the RSA modulus and exponent

keyId string

A key identifier, it can be in any format. Used to distinguish between different keys when fetching an SSH certificate from the token cache.

Returns

AcquireTokenInteractiveParameterBuilder

WithSSHCertificateAuthenticationScheme(AcquireTokenSilentParameterBuilder, string, string)

Instructs AAD to return an SSH certificate instead of a Bearer token. Attempts to retrieve the certificate from the token cache, and if one is not found, attempts to acquire one silently, using the refresh token. See https://aka.ms/msal-net-ssh for details.

public static AcquireTokenSilentParameterBuilder WithSSHCertificateAuthenticationScheme(this AcquireTokenSilentParameterBuilder builder, string publicKeyJwk, string keyId)

Parameters

builder AcquireTokenSilentParameterBuilder

Silent authentication builder

publicKeyJwk string

The public SSH key in JWK format (https://tools.ietf.org/html/rfc7517). Currently only RSA is supported, and the JWK should contain only the RSA modulus and exponent

keyId string

Returns

AcquireTokenSilentParameterBuilder

Remarks

The same keyID must be used to distinguish between various