AuthenticatorSequenceGroup

Group information

Content

• Sequence [1..1]
  1. PreviousSession [0..1] Indicates that the Principal has been strongly authenticated in a previous session during which the IdP has set a cookie in the UA. During the present session the Principal has only been authenticated by the UA returning the cookie to the IdP.
  2. ResumeSession [0..1] Rather like PreviousSession but using stronger security. A secret that was established in a previous session with the Authentication Authority has been cached by the local system and is now re-used (e.g. a Master Secret is used to derive new session keys in TLS, SSL, WTLS).
  3. DigSig [0..1] This element indicates that the Principal has been authenticated by a mechanism which involves the Principal computing a digital signature over at least challenge data provided by the IdP.
  4. Password [0..1] This element indicates that a password (or passphrase) has been used to authenticate the Principal to a remote system.
  5. RestrictedPassword [0..1]
  6. ZeroKnowledge [0..1] This element indicates that the Principal has been authenticated by a zero knowledge technique as specified in ISO/IEC 9798-5.
  7. SharedSecretChallengeResponse [0..1]
  8. SharedSecretDynamicPlaintext [0..1] The local system and Authentication Authority share a secret key. The local system uses this to encrypt a randomised string to pass to the Authentication Authority.
  9. IPAddress [0..1] This element indicates that the Principal has been authenticated through connection from a particular IP address.
  10. AsymmetricDecryption [0..1] The local system has a private key but it is used in decryption mode, rather than signature mode. For example, the Authentication Authority generates a secret and encrypts it using the local system's public key: the local system then proves it has decrypted the secret.
  11. AsymmetricKeyAgreement [0..1] The local system has a private key and uses it for shared secret key agreement with the Authentication Authority (e.g. via Diffie Helman).
  12. SubscriberLineNumber [0..1]
  13. UserSuffix [0..1]
  14. Extension [0..*]

Used in

• Type AuthenticatorBaseType (Element Authenticator)
• Type ComplexAuthenticatorType (Element ComplexAuthenticator)