public sealed class CsmSettings : IMessage<CsmSettings>, IEquatable<CsmSettings>, IDeepCloneable<CsmSettings>, IBufferMessage, IMessage
Reference documentation and code samples for the Cloud Identity-Aware Proxy v1 API class CsmSettings.
Configuration for RCToken generated for service mesh workloads protected by
IAP. RCToken are IAP generated JWTs that can be verified at the application.
The RCToken is primarily used for service mesh deployments, and can be scoped
to a single mesh by configuring the audience field accordingly.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Missing the information I need","missingTheInformationINeed","thumb-down"],["Too complicated / too many steps","tooComplicatedTooManySteps","thumb-down"],["Out of date","outOfDate","thumb-down"],["Samples / code issue","samplesCodeIssue","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-08-07 UTC."],[[["\u003cp\u003eThe latest version of the \u003ccode\u003eCsmSettings\u003c/code\u003e class in the Cloud Identity-Aware Proxy v1 API is 2.7.0, with versions available dating back to 1.0.0.\u003c/p\u003e\n"],["\u003cp\u003e\u003ccode\u003eCsmSettings\u003c/code\u003e is a class used for configuring RCTokens, which are IAP-generated JWTs for service mesh workloads that can be verified at the application level.\u003c/p\u003e\n"],["\u003cp\u003eThe \u003ccode\u003eCsmSettings\u003c/code\u003e class inherits from \u003ccode\u003eobject\u003c/code\u003e and implements \u003ccode\u003eIMessage\u003c/code\u003e, \u003ccode\u003eIEquatable\u003c/code\u003e, \u003ccode\u003eIDeepCloneable\u003c/code\u003e, and \u003ccode\u003eIBufferMessage\u003c/code\u003e interfaces, each with their own functionality.\u003c/p\u003e\n"],["\u003cp\u003e\u003ccode\u003eCsmSettings\u003c/code\u003e contains a property, \u003ccode\u003eRctokenAud\u003c/code\u003e, which is a string that sets the audience claim in the generated RCToken, but is not validated by IAP.\u003c/p\u003e\n"],["\u003cp\u003eYou can create a new \u003ccode\u003eCsmSettings\u003c/code\u003e object using either a parameterless constructor or by providing another instance of \u003ccode\u003eCsmSettings\u003c/code\u003e in the constructor.\u003c/p\u003e\n"]]],[],null,["# Cloud Identity-Aware Proxy v1 API - Class CsmSettings (2.8.0)\n\nVersion latestkeyboard_arrow_down\n\n- [2.8.0 (latest)](/dotnet/docs/reference/Google.Cloud.Iap.V1/latest/Google.Cloud.Iap.V1.CsmSettings)\n- [2.7.0](/dotnet/docs/reference/Google.Cloud.Iap.V1/2.7.0/Google.Cloud.Iap.V1.CsmSettings)\n- [2.6.0](/dotnet/docs/reference/Google.Cloud.Iap.V1/2.6.0/Google.Cloud.Iap.V1.CsmSettings)\n- [2.5.0](/dotnet/docs/reference/Google.Cloud.Iap.V1/2.5.0/Google.Cloud.Iap.V1.CsmSettings)\n- [2.4.0](/dotnet/docs/reference/Google.Cloud.Iap.V1/2.4.0/Google.Cloud.Iap.V1.CsmSettings)\n- [2.3.0](/dotnet/docs/reference/Google.Cloud.Iap.V1/2.3.0/Google.Cloud.Iap.V1.CsmSettings)\n- [2.2.0](/dotnet/docs/reference/Google.Cloud.Iap.V1/2.2.0/Google.Cloud.Iap.V1.CsmSettings)\n- [2.1.0](/dotnet/docs/reference/Google.Cloud.Iap.V1/2.1.0/Google.Cloud.Iap.V1.CsmSettings)\n- [2.0.0](/dotnet/docs/reference/Google.Cloud.Iap.V1/2.0.0/Google.Cloud.Iap.V1.CsmSettings)\n- [1.2.0](/dotnet/docs/reference/Google.Cloud.Iap.V1/1.2.0/Google.Cloud.Iap.V1.CsmSettings)\n- [1.1.0](/dotnet/docs/reference/Google.Cloud.Iap.V1/1.1.0/Google.Cloud.Iap.V1.CsmSettings)\n- [1.0.0](/dotnet/docs/reference/Google.Cloud.Iap.V1/1.0.0/Google.Cloud.Iap.V1.CsmSettings) \n\n public sealed class CsmSettings : IMessage\u003cCsmSettings\u003e, IEquatable\u003cCsmSettings\u003e, IDeepCloneable\u003cCsmSettings\u003e, IBufferMessage, IMessage\n\nReference documentation and code samples for the Cloud Identity-Aware Proxy v1 API class CsmSettings.\n\nConfiguration for RCToken generated for service mesh workloads protected by\nIAP. RCToken are IAP generated JWTs that can be verified at the application.\nThe RCToken is primarily used for service mesh deployments, and can be scoped\nto a single mesh by configuring the audience field accordingly. \n\nInheritance\n-----------\n\n[object](https://learn.microsoft.com/dotnet/api/system.object) \\\u003e CsmSettings \n\nImplements\n----------\n\n[IMessage](https://cloud.google.com/dotnet/docs/reference/Google.Protobuf/latest/Google.Protobuf.IMessage-1.html)[CsmSettings](/dotnet/docs/reference/Google.Cloud.Iap.V1/latest/Google.Cloud.Iap.V1.CsmSettings), [IEquatable](https://learn.microsoft.com/dotnet/api/system.iequatable-1)[CsmSettings](/dotnet/docs/reference/Google.Cloud.Iap.V1/latest/Google.Cloud.Iap.V1.CsmSettings), [IDeepCloneable](https://cloud.google.com/dotnet/docs/reference/Google.Protobuf/latest/Google.Protobuf.IDeepCloneable-1.html)[CsmSettings](/dotnet/docs/reference/Google.Cloud.Iap.V1/latest/Google.Cloud.Iap.V1.CsmSettings), [IBufferMessage](https://cloud.google.com/dotnet/docs/reference/Google.Protobuf/latest/Google.Protobuf.IBufferMessage.html), [IMessage](https://cloud.google.com/dotnet/docs/reference/Google.Protobuf/latest/Google.Protobuf.IMessage.html) \n\nInherited Members\n-----------------\n\n[object.GetHashCode()](https://learn.microsoft.com/dotnet/api/system.object.gethashcode) \n[object.GetType()](https://learn.microsoft.com/dotnet/api/system.object.gettype) \n[object.ToString()](https://learn.microsoft.com/dotnet/api/system.object.tostring)\n\nNamespace\n---------\n\n[Google.Cloud.Iap.V1](/dotnet/docs/reference/Google.Cloud.Iap.V1/latest/Google.Cloud.Iap.V1)\n\nAssembly\n--------\n\nGoogle.Cloud.Iap.V1.dll\n\nConstructors\n------------\n\n### CsmSettings()\n\n public CsmSettings()\n\n### CsmSettings(CsmSettings)\n\n public CsmSettings(CsmSettings other)\n\nProperties\n----------\n\n### RctokenAud\n\n public string RctokenAud { get; set; }\n\nAudience claim set in the generated RCToken. This value is not validated by\nIAP."]]