Overview

This document describes the Linux Token Management API, which allows the user to:

• List the available tokens
• Connect/disconnect a specific token from the list
• Send a new valid Java Web Token (JWT)

The library described in this document manages only the tokens and the JWT. The PKCS#11 interface is out of scope of this document.

Requirements

The Linux Token Management API uses JWT to manage user authentication. This JWT is provided by an IdP, using OIDC protocol.

The Linux Token Management API is designed to be compliant with the RedHat and CentOS latest Linux distributions as well as Ubuntu latest LTS distribution.

Prerequisites

The following prerequisites required for the Linux client:

• Linux client must work on the latest RedHat and CentOS version available when starting the project.

• JWT must be in accordance with the OIDC standard.

• Start the IDPrime Virtual Client before starting the SafeNet Authentication Client (SAC) PKCS#11 library, and must not stop the client before closing the SAC.

Deliverable

The API specified in this document is implemented in the libidpvTokenManagerCpp.so file.

The PKCS#11 library must be installed using the SAC middleware version supporting IDPrime Virtual cards. SafeNet Authentication Client package is not part of this deliverable.