Protected Properties

The session data structure also contains an extensible set of protected (or core) properties. The following protected properties are set by OpenSSO Enterprise and can only be modified by OpenSSO Enterprise (primarily the Authentication Service).

Organization

This is the DN of the organization to which the user belongs.

Principal

This is the DN of the user.

Principals

This is a list of names to which the user has authenticated. (This property may have more then one value defined as a pipe separated list.)

UserId

This is the user's DN as returned by the module, or in the case of modules other than LDAP or Membership, the user name. (All Principals must map to the same user. The UserId is the user DN to which they map.)

UserToken

This is a user name. (All Principals must map to the same user. The UserToken is the user name to which they map.)

Host

This is the host name or IP address for the client.

authLevel

This is the highest level to which the user has authenticated.

AuthType

This is a pipe separated list of authentication modules to which the user has authenticated (for example, module1|module2|module3).

Service

Applicable for service-based authentication only, this is the service to which the user belongs.

loginURL

This is the client's login URL.

Hostname

This is the host name of the client.

cookieSupport

This attribute contains a value of true if the client browser supports cookies.

authInstant

This is a string that specifies the time at which the authentication took place.

SessionTimedOut

This attribute contains a value of true if the session has timed out.