Pkeyauth

It is better to encapsulate url extraction inside the ADPkeyAuthHelper . Your challenge handler class should return challenge response which will have url and header to use. This way you dont need to change "SubmitUrl" if it is changed in the future.