title: How do I set the credentials flag to false?
body: <p>Seems like such a simple question but I can't find the answer and so leads me to believe maybe I don't have control of the flag!?</p>
  
  <p>Context:</p>
  
  <p>I'm developing a SignalR hub and client. All works great if (on the signalr site) I set the following in the config:</p>
  
  <pre><code>&lt;system.webServer&gt;
     &lt;httpProtocol&gt;
       &lt;customHeaders&gt;
         &lt;add name="Access-Control-Allow-Origin" value="http://example.com" /&gt;
       &lt;/customHeaders&gt;
     &lt;/httpProtocol&gt;
   &lt;/system.webServer&gt;
  </code></pre>
  
  <p>The problem is that I'd like use the wildcard here.</p>
  
  <p>When I do (i.e. <code>value="*"</code>), I get the following error (on the client):</p>
  
  <pre><code>A wildcard '*' cannot be used in the 'Access-Control-Allow-Origin' header when the credentials flag is true.
  </code></pre>
  
  <p>I could well be missing something simple here, but I can't find a relevant config entry that would allow me to set the credentials flag.</p>
  
  <p><strong>What I've Tried</strong></p>
  
  <pre><code>&lt;add name="Access-Control-Allow-Credentials" value="false"/&gt;
  </code></pre>
  
  <p>Didn't seem to make a difference (same error).</p>