CustomUserNameSecurityTokenAuthenticator.ValidateUserNamePasswordCore Method

Definition

Authenticates the specified user name and password and returns the set of authorization policies for UserNameSecurityToken security tokens.

protected:
 override System::Collections::ObjectModel::ReadOnlyCollection<System::IdentityModel::Policy::IAuthorizationPolicy ^> ^ ValidateUserNamePasswordCore(System::String ^ userName, System::String ^ password);
protected override System.Collections.ObjectModel.ReadOnlyCollection<System.IdentityModel.Policy.IAuthorizationPolicy> ValidateUserNamePasswordCore (string userName, string password);
override this.ValidateUserNamePasswordCore : string * string -> System.Collections.ObjectModel.ReadOnlyCollection<System.IdentityModel.Policy.IAuthorizationPolicy>
Protected Overrides Function ValidateUserNamePasswordCore (userName As String, password As String) As ReadOnlyCollection(Of IAuthorizationPolicy)

Parameters

userName
String

The user name associated with the security token.

password
String

The password associated with the security token.

Returns

A ReadOnlyCollection<T> of type IAuthorizationPolicy that contains the set of authorization policies in effect for this application.

Exceptions

userName is null.

userName and password combination are not valid.

Remarks

The ValidateUserNamePasswordCore method uses the UserNamePasswordValidator passed into the CustomUserNameSecurityTokenAuthenticator constructor to authenticate the user.

When the username and password cannot be validated, throw the SecurityTokenValidationException.

When there are no authorization policies in effect for this application, return an empty ReadOnlyCollection<T> of type IAuthorizationPolicy.

When the ValidateUserNamePasswordCore method returns null, Windows Communication Foundation throws a SecurityTokenValidationException.

Applies to