Authentication Token

The Authentication Token object contains the attributes pertaining to an authentication token, ticket, or assertion e.g. Kerberos, OIDC, SAML.

Attributes

created_time

• Type: timestamp_t
• Requirement: recommended

The time that the authentication token was created.

encryption_details

• Type: encryption_details
• Requirement: recommended

The encryption details of the authentication token.

kerberos_flags

• Type: string_t
• Requirement: recommended

A bitmask, either in hexadecimal or decimal form, which encodes various attributes or permissions associated with a Kerberos ticket. These flags delineate specific characteristics of the ticket, such as its renewability or forwardability.

type

• Type: string_t
• Requirement: recommended

The type of the authentication token.

type_id

• Type: integer_t
• Requirement: recommended
• Values:
  • 0 - Unknown: The Authentication token type is unknown.
  • 1 - Ticket Granting Ticket: Ticket Granting Ticket (TGT) for Kerberos.
  • 2 - Service Ticket: Service Ticket (ST) for Kerberos.
  • 3 - Identity Token: Identity (ID) Token for OIDC.
  • 4 - Refresh Token: Refresh Token for OIDC.
  • 5 - SAML Assertion: Authentication Assertion for SAML.
  • 99 - Other: The type is not mapped. See the type attribute, which contains a data source specific value.

The normalized authentication token type identifier.

created_time_dt

• Type: datetime_t
• Requirement: optional

The time that the authentication token was created.

expiration_time

• Type: timestamp_t
• Requirement: optional

The expiration time of the authentication token.

expiration_time_dt

• Type: datetime_t
• Requirement: optional

The expiration time of the authentication token.

is_renewable

• Type: boolean_t
• Requirement: optional

Indicates whether the authentication token is renewable.

Used By

• authentication