Optional. The trust authentication type, which decides whether the trusted side has
forest/domain wide access or selective access to an approved set of
resources.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Missing the information I need","missingTheInformationINeed","thumb-down"],["Too complicated / too many steps","tooComplicatedTooManySteps","thumb-down"],["Out of date","outOfDate","thumb-down"],["Samples / code issue","samplesCodeIssue","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-08-07 UTC."],[[["\u003cp\u003eThe \u003ccode\u003eTrust\u003c/code\u003e class in the Managed Service for Microsoft Active Directory v1 API represents a relationship between two domains, enabling cross-domain user authentication.\u003c/p\u003e\n"],["\u003cp\u003eThe latest version of this class is 3.3.0, with older versions available for reference, dating back to version 2.2.0.\u003c/p\u003e\n"],["\u003cp\u003eThe \u003ccode\u003eTrust\u003c/code\u003e class has properties such as \u003ccode\u003eCreateTime\u003c/code\u003e, \u003ccode\u003eLastTrustHeartbeatTime\u003c/code\u003e, \u003ccode\u003eState\u003c/code\u003e, and \u003ccode\u003eUpdateTime\u003c/code\u003e to provide information about the trust's status and history.\u003c/p\u003e\n"],["\u003cp\u003eKey properties like \u003ccode\u003eTargetDnsIpAddresses\u003c/code\u003e, \u003ccode\u003eTargetDomainName\u003c/code\u003e, \u003ccode\u003eTrustDirection\u003c/code\u003e, \u003ccode\u003eTrustHandshakeSecret\u003c/code\u003e, and \u003ccode\u003eTrustType\u003c/code\u003e are required for defining and establishing a domain trust.\u003c/p\u003e\n"],["\u003cp\u003eThe \u003ccode\u003eSelectiveAuthentication\u003c/code\u003e property allows for control over the scope of trust access, providing options for forest/domain-wide or selective access to resources.\u003c/p\u003e\n"]]],[],null,["# Managed Service for Microsoft Active Directory v1 API - Class Trust (3.3.0)\n\nVersion latestkeyboard_arrow_down\n\n- [3.3.0 (latest)](/dotnet/docs/reference/Google.Cloud.ManagedIdentities.V1/latest/Google.Cloud.ManagedIdentities.V1.Trust)\n- [3.2.0](/dotnet/docs/reference/Google.Cloud.ManagedIdentities.V1/3.2.0/Google.Cloud.ManagedIdentities.V1.Trust)\n- [3.1.0](/dotnet/docs/reference/Google.Cloud.ManagedIdentities.V1/3.1.0/Google.Cloud.ManagedIdentities.V1.Trust)\n- [3.0.0](/dotnet/docs/reference/Google.Cloud.ManagedIdentities.V1/3.0.0/Google.Cloud.ManagedIdentities.V1.Trust)\n- [2.3.0](/dotnet/docs/reference/Google.Cloud.ManagedIdentities.V1/2.3.0/Google.Cloud.ManagedIdentities.V1.Trust)\n- [2.2.0](/dotnet/docs/reference/Google.Cloud.ManagedIdentities.V1/2.2.0/Google.Cloud.ManagedIdentities.V1.Trust) \n\n public sealed class Trust : IMessage\u003cTrust\u003e, IEquatable\u003cTrust\u003e, IDeepCloneable\u003cTrust\u003e, IBufferMessage, IMessage\n\nReference documentation and code samples for the Managed Service for Microsoft Active Directory v1 API class Trust.\n\nRepresents a relationship between two domains. This allows a controller in\none domain to authenticate a user in another domain. \n\nInheritance\n-----------\n\n[object](https://learn.microsoft.com/dotnet/api/system.object) \\\u003e Trust \n\nImplements\n----------\n\n[IMessage](https://cloud.google.com/dotnet/docs/reference/Google.Protobuf/latest/Google.Protobuf.IMessage-1.html)[Trust](/dotnet/docs/reference/Google.Cloud.ManagedIdentities.V1/latest/Google.Cloud.ManagedIdentities.V1.Trust), [IEquatable](https://learn.microsoft.com/dotnet/api/system.iequatable-1)[Trust](/dotnet/docs/reference/Google.Cloud.ManagedIdentities.V1/latest/Google.Cloud.ManagedIdentities.V1.Trust), [IDeepCloneable](https://cloud.google.com/dotnet/docs/reference/Google.Protobuf/latest/Google.Protobuf.IDeepCloneable-1.html)[Trust](/dotnet/docs/reference/Google.Cloud.ManagedIdentities.V1/latest/Google.Cloud.ManagedIdentities.V1.Trust), [IBufferMessage](https://cloud.google.com/dotnet/docs/reference/Google.Protobuf/latest/Google.Protobuf.IBufferMessage.html), [IMessage](https://cloud.google.com/dotnet/docs/reference/Google.Protobuf/latest/Google.Protobuf.IMessage.html) \n\nInherited Members\n-----------------\n\n[object.GetHashCode()](https://learn.microsoft.com/dotnet/api/system.object.gethashcode) \n[object.GetType()](https://learn.microsoft.com/dotnet/api/system.object.gettype) \n[object.ToString()](https://learn.microsoft.com/dotnet/api/system.object.tostring)\n\nNamespace\n---------\n\n[Google.Cloud.ManagedIdentities.V1](/dotnet/docs/reference/Google.Cloud.ManagedIdentities.V1/latest/Google.Cloud.ManagedIdentities.V1)\n\nAssembly\n--------\n\nGoogle.Cloud.ManagedIdentities.V1.dll\n\nConstructors\n------------\n\n### Trust()\n\n public Trust()\n\n### Trust(Trust)\n\n public Trust(Trust other)\n\nProperties\n----------\n\n### CreateTime\n\n public Timestamp CreateTime { get; set; }\n\nOutput only. The time the instance was created.\n\n### LastTrustHeartbeatTime\n\n public Timestamp LastTrustHeartbeatTime { get; set; }\n\nOutput only. The last heartbeat time when the trust was known to be connected.\n\n### SelectiveAuthentication\n\n public bool SelectiveAuthentication { get; set; }\n\nOptional. The trust authentication type, which decides whether the trusted side has\nforest/domain wide access or selective access to an approved set of\nresources.\n\n### State\n\n public Trust.Types.State State { get; set; }\n\nOutput only. The current state of the trust.\n\n### StateDescription\n\n public string StateDescription { get; set; }\n\nOutput only. Additional information about the current state of the trust, if available.\n\n### TargetDnsIpAddresses\n\n public RepeatedField\u003cstring\u003e TargetDnsIpAddresses { get; }\n\nRequired. The target DNS server IP addresses which can resolve the remote domain\ninvolved in the trust.\n\n### TargetDomainName\n\n public string TargetDomainName { get; set; }\n\nRequired. The fully qualified target domain name which will be in trust with the\ncurrent domain.\n\n### TrustDirection\n\n public Trust.Types.TrustDirection TrustDirection { get; set; }\n\nRequired. The trust direction, which decides if the current domain is trusted,\ntrusting, or both.\n\n### TrustHandshakeSecret\n\n public string TrustHandshakeSecret { get; set; }\n\nRequired. The trust secret used for the handshake with the target domain. This will\nnot be stored.\n\n### TrustType\n\n public Trust.Types.TrustType TrustType { get; set; }\n\nRequired. The type of trust represented by the trust resource.\n\n### UpdateTime\n\n public Timestamp UpdateTime { get; set; }\n\nOutput only. The last update time."]]