Click or drag to resize

IDeviceIdentityProviderService Interface

Represents a service which retrieves IDeviceIdentity and can authenticate to an IPrincipal for devices.

Namespace: SanteDB.Core.Security.Services
Assembly: SanteDB.Core.Api (in SanteDB.Core.Api.dll) Version: 3.0.2081-alpha+b4ae72647f2cc271f89142f76fff26ad69e00f5a
Syntax
public interface IDeviceIdentityProviderService : IServiceImplementation

The IDeviceIdentityProviderService type exposes the following members.

Properties
 NameDescription
Public propertyServiceName Gets the service name
(Inherited from IServiceImplementation)
Top
Methods
 NameDescription
Public methodAddClaim Add a claim to deviceName
Public methodAuthenticate Authenticates the specified device identifier.
Public methodChangeSecret Change the device secret
Public methodCreateIdentity Create a basic identity in the provider
Public methodGetClaims Get all active claims for the specified device
Public methodGetIdentity(Guid) Gets the specified identity for an device.
Public methodGetIdentity(String) Gets the specified identity for an device.
Public methodGetSid Gets the SID for the specified identity
Public methodRemoveClaim Removes a claim from the specified device account
Public methodSetLockout Set the lockout status
Top
Events
 NameDescription
Public eventAuthenticated Fired after an authentication request has been made.
Public eventAuthenticating Fired prior to an authentication request being made.
Top
Remarks

In SanteDB, a security session is comprised of up to three security identities/principals:

  • (Optional) User identity representing the human using the application
  • (Optional) A IDeviceIdentity representing the device running the application, and
  • An IApplicationIdentity representing the application

This service is what is used to authenticate the device identity from a central credential store of registered devices. This service may be called with a shared device id/secret (like a user name and password), or may be called with a device ID and x509 certificate (if used for authenticating sessions with a client certificate)

See: SanteDB authentication architecture

See Also