Previous Topic: RefreshArcotIDs()Next Topic: UpdateOfflineKeyBag()


SignChallengeEx2()

This API selects an ArcotID PKI from a list of ArcotID PKIs available to it, based on the input parameters (userNameOrAlias, appctxName, orgName) and uses it to sign the incoming challenge. ArcotID PKI selection is based on the lookup mode that is set, see the "IsArcotIDAvailableEx()" section.

Note: The content and format of the signed challenge returned by SignChallengeEx2() is same as that returned by SignChallengeEx(). If you want to use the appctx and alias for logging, then you must pass this information to AuthMinder.

Syntax

SignChallengeEx2(challenge, PIN, userNameOrAlias, appctxName, orgName)

Parameters

Parameter

Type

Description

challenge

string

The encoded challenge string.

PIN

string

The ArcotID PKI password.

userNameorAlias

string

User name and the alias, which are the unique user identifier associated with the Arcot card.

Note: The alias is obtained from the user and stored in the ArcotID PKI as an attribute with the specified application context.

appctxName

string

The name of the application context to which the user is logging in to.

Application context is supplied by the ArcotID PKI Issuance application during ArcotID PKI issuance.

orgName

string

The name of the AuthMinder organization to which the user belongs.

Returns

Base-64 encoded string that includes the digital signature and the Arcot certificate, which contains the encrypted public key.

Example

var arcotClient = new ArcotClient();
var orgName = "safebank";
var appctx = "safebank-online";
var challengeString = "gCcBwHe/XkIxMjM0";
var userAlias" = "jdoe-sb";
var pinString = "123456";

var response = arcotClient.SignChallengeEx2(challengeString, pinString, userAlias, appctx, orgName);