Partager via

2.2.7.12 FEDAUTHINFO

  • Article

Token Stream Name:

 FEDAUTHINFO

Token Stream Function:

Introduced in TDS 7.4, federated authentication information is returned to the client to be used for generating a Federated Authentication Token during the login process. This token MUST be the only token in a Federated Authentication Information message and MUST NOT be included in any other message type.<63>

Token Stream Comments:

  • The token value is 0xEE.

Token Stream-Specific Rules:

 TokenType              =   BYTE
  
 TokenLength            =   DWORD               ; (introduced in TDS 7.4)
  
 CountOfInfoIDs         =   DWORD               ; (introduced in TDS 7.4)
  
 FedAuthInfoID          =   BYTE                ; (introduced in TDS 7.4)
 FedAuthInfoDataLen     =   DWORD               ; (introduced in TDS 7.4)
 FedAuthInfoDataOffset  =   DWORD               ; (introduced in TDS 7.4)
 FedAuthInfoData        =   VARBYTES            ; (introduced in TDS 7.4)
  
 FedAuthInfoOpt         =  (FedAuthInfoID       ; (introduced in TDS 7.4)
                            FedAuthInfoDataLen
                            FedAuthInfoDataOffset)

Token Stream Definition:

 FEDAUTHINFO            =   TokenType           ; (introduced in TDS 7.4)
                            TokenLength
                            CountOfInfoIDs
                            1*FedAuthInfoOpt
                            FedAuthInfoData

Token Stream Parameter Details

Parameter

Description

TokenType

FEDAUTHINFO_TOKEN

TokenLength

The length of the whole Federated Authentication Information token, not including the size occupied by TokenLength itself. The minimum value for this field is sizeof(DWORD) because the field CountOfInfoIDs MUST be present even if no federated authentication information is sent as part of the token.

CountOfInfoIDs

The number of federated authentication information options that are sent in the token. If no FedAuthInfoOpt is sent in the token, this field MUST be present and set to 0.

FedAuthInfoID

The unique identifier number for the type of information.

FedAuthInfoDataLen

The length of FedAuthInfoData, in bytes.

FedAuthInfoDataOffset

The offset at which the federated authentication information data for FedAuthInfoID is present, measured from the address of CountOfInfoIDs.

FedAuthInfoData

The actual information data as binary, with the length in bytes equal to FedAuthInfoDataLen.

The following table describes the FedAuthInfo feature option and description.

FedAuthInfoID

FedAuthInfoData Description

%0x00

Reserved.

%0x01

(STSURL)

A Unicode string that represents the token endpoint URL from which to acquire a Federated Authentication Token.

%0x02

(SPN)

A Unicode string that represents the Service Principal Name (SPN) to use for acquiring a Federated Authentication Token. SPN is a string that represents the resource in a directory.