Device Identity Provider
IDeviceIdentityProviderService
in assembly SanteDB.Core.Api version 2.1.151.0
Summary
Represents a service which retrieves IDeviceIdentity and can authenticate to an IPrincipal for devices.
Description
In SanteDB, a security session is comprised of up to three security identities/principals:
(Optional) User identity representing the human using the application
(Optional) A IDeviceIdentity representing the device running the application, and
An IApplicationIdentity representing the application
This service is what is used to authenticate the device identity from a central credential store of registered devices. This service may be called with a shared device id/secret (like a user name and password), or may be called with a device ID and x509 certificate (if used for authenticating sessions with a client certificate)
See: SanteDB authentication architecture
Events
Event | Type | Description |
---|---|---|
Authenticated | EventHandler<AuthenticatedEventArgs> | Fired after an authentication request has been made. |
Authenticating | EventHandler<AuthenticatingEventArgs> | Fired prior to an authentication request being made. |
Operations
Operation | Response/Return | Input/Parameter | Description |
---|---|---|---|
Authenticate | IPrincipal | String deviceId String deviceSecret AuthenticationMethod authMethod | Authenticates the specified device identifier. |
GetIdentity | IIdentity | String name | Gets the specified identity for an device. |
SetLockout | void | String name Boolean lockoutState IPrincipal principal | Set the lockout status |
ChangeSecret | void | String name String deviceSecret IPrincipal principal | Change the device secret |
Implementations
ADO.NET Device Identity Provider - (SanteDB.Persistence.Data.ADO)
Represents a device identity provider.
Service Registration
Example Implementation
References
Last updated