ArcotID PKI Input Elements

CA Strong Authentication Web Services Guide › Performing Credential Operations › Creating Credentials › ArcotID PKI Input Elements

ArcotID PKI Input Elements

ArcotID PKI is a secure software credential that provides two-factor authentication. An ArcotID PKI is a small data file that by itself can be used for strong authentication to a variety of clients such as Web or Virtual Private Networks (VPNs). The ArcotID PKI file is associated with a password. When the user authenticates with their ArcotID PKI, they have to provide this password and their ArcotID PKI must be present on the system from where the authentication is being performed.

The arcotIDInput element contains the elements that are required for creating ArcotID PKI. The following table lists the ArcotID PKI-specific elements:

Element	Mandatory	Description
password	No	The ArcotID PKI password that has to be set for the user.
unsignedAttributes	No	You can define ArcotID PKI attributes while or after creating an ArcotID PKI for the user. Such attributes are called unsigned attributes because these attributes (name-value pairs) are set in the unsigned portion of the ArcotID PKI. The attributes are defines as follows; name The name of the unsigned attribute. value The value corresponding to the name. The value must be specified in XS:base64Binary format. Note: If you add an attribute that already exists, then the current attributes will be overwritten by the new value.
fetchAttrbutes	No	The flag that indicates whether to fetch ArcotID PKI unsigned attributes in the response.

Element

Mandatory

Description

password

The ArcotID PKI password that has to be set for the user.

unsignedAttributes

You can define ArcotID PKI attributes while or after creating an ArcotID PKI for the user. Such attributes are called unsigned attributes because these attributes (name-value pairs) are set in the unsigned portion of the ArcotID PKI. The attributes are defines as follows;

name
The name of the unsigned attribute.
value
The value corresponding to the name. The value must be specified in XS:base64Binary format.
Note: If you add an attribute that already exists, then the current attributes will be overwritten by the new value.

fetchAttrbutes

The flag that indicates whether to fetch ArcotID PKI unsigned attributes in the response.