<PackageReference Include="Microsoft.Identity.Client" Version="4.84.2-preview4-GetManagedIdentityCapabilitiesAsync" />

Microsoft.Identity.Client.Kerberos.KerberosSupplementalTicket

Class for Kerberos tickets that are included as claims and used as a supplemental token in an OAuth/OIDC protocol response.
public string ClientKey { get; set; }

Get or Sets the client key used to encrypt the client portion of the ticket. This is optional. This will be null if KeyType is null. This MUST be protected in the protocol response.

public string ClientName { get; set; }

Get or Sets the client name. Depending on the ticket, this can be either a UserPrincipalName or SamAccountName.

public string ErrorMessage { get; set; }

Get or Sets the error message that server encountered when creating a ticket granting ticket.

public string KerberosMessageBuffer { get; set; }

Get or Sets the Base64 encoded KERB_MESSAGE_BUFFER

public KerberosKeyTypes KeyType { get; set; }

Get or Sets the client key type.This is optional.This will be null if ClientKey is null.

public string Realm { get; set; }

Get or Sets the Kerberos realm/domain name.

public string ServicePrincipalName { get; set; }

Get or Sets the target service principal name (SPN).

Creates a new instance of KerberosSupplementalTicket class.

public KerberosSupplementalTicket(string errorMessage)

Creates a new instance of KerberosSupplementalTicket class with error message.