Your suggested change has been received. Thank you.

close
Thales Logo

All

  • All
  • CipherTrust Manager
  • CipherTrust Application Data Protection (CADP)
  • CipherTrust Application Key Management (CAKM)
  • CipherTrust Batch Data Transformation (BDT)
  • CipherTrust Cloud Key Management (CCKM)
  • CipherTrust Data Discovery and Classification (DDC)
  • CipherTrust Data Protection Gateway (DPG)
  • CipherTrust Database Protection (CDP)
  • CipherTrust Intelligent Protection (CIP)
  • CipherTrust Integrations
  • CipherTrust Migrations
  • CipherTrust RESTful Data Protection (CRDP)
  • CipherTrust Transparent Encryption (CTE)
  • CipherTrust Transparent Encryption Userspace (CTE-U)
  • CipherTrust Secrets Management (CSM)
  • CipherTrust Vaulted Tokenization (CT-V)
  • CipherTrust Vaultless Tokenization (CT-VL)
  • CTE-Linux
  • CTE-Windows
  • CTE-AIX
  • CTE-K8s
  • CTE-U
  • Crypto Command Center
  • Data Protection on Demand
  • Luna Cloud HSM
  • Luna Network HSM
  • Luna PCIe HSM
  • Luna USB HSM
  • OneWelcome Identity Platform
  • ProtectApp LUKS
  • ProtectServer 2 HSM
  • ProtectServer 3 HSM
  • SafeNet Trusted Access (STA)
  • SafeNet MobilePASS+
  • SafeNet MobilePASS+ for Android
  • SafeNet MobilePASS+ for Chrome
  • SafeNet MobilePASS+ for macOS
  • SafeNet MobilePASS+ for iOS
  • SafeNet MobilePASS+ for WatchOS
  • SafeNet MobilePASS+ for Windows
  • SafeNet Synchronization Agent
  • SafeNet Logging Agent
  • SafeNet Agent for FreeRADIUS
  • SafeNet Agent for NPS
  • SafeNet Agent for Windows Logon
  • SafeNet Authentication Service Private Cloud Edition (SAS PCE)
  • SafeNet Remote Logging Agent
  • SafeNet Keycloak Agent
  • SafeNet IDPrime Virtual (IDPV)
  • SafeNet FIDO Key Manager
  • SafeNet FIDO Key Manager for Android
  • SafeNet FIDO Key Manager for iOS
  • SafeNet FIDO Key Manager for Windows
back

Authenticating users

Authenticate users implicitly

search
printsuggest an editpdf paneldownload

Authenticate users implicitly

The Android SDK allows you to authenticate users implicitly (without user interaction) using the device credentials. You can use it only for regular authentication, mobile authentication is not supported. Before you start using the implicit authentication, you have to manually enable it in the client configuration in the IDAAS-core.

Note

Only one user can be implicitly authenticated at a time. Implicitly authenticating another user will cause the current implicitly authenticated user to be logged out.

copy link to clipboardDetermine if user exists

The UserClient contains the getUserProfiles method, which returns a set of all registered UserProfile value objects. If the method isRegisteredAtLeastOneUser returns false, it means no user is authenticated on the device. If the user is not registered, the user must register before they will be able to login.

Example code - verify device has a registered user

private boolean isRegisteredAtLeastOneUser() {
final Set<UserProfile> userProfiles = OneginiSDK.getOneginiClient(this).getUserClient().getUserProfiles();
return userProfiles.size() > 0;
}

copy link to clipboardImplicitly login registered user

If a user is authenticated, you can implicitly log in that user using the authenticateUserImplicitly method from the UserClient. This method requires three arguments:

  • UserProfile is the UserProfile to implicitly authenticate.
  • String[] is the list of scopes to request. It should be a subset of the scopes already granted to the UserProfile during registration, or null if you want to request all the scopes granted during user registration.
  • OneginiImplicitAuthenticationHandler is the implicit authentication handler to return the authentication result to.

The result of the implicit authentication is an access token. The implicit authentication handler contains:

  • onSuccess is the method that lets you know that authentication was finished successfully. At this point, you can request data on behalf of the user.
  • onError is the method that is called in every other case.

UserClient contains a getImplicitlyAuthenticatedUserProfile method that returns the current implicitly authenticated UserProfile object, or null if no user is implicitly authenticated.

Example code - implicitly log in registered user

private void loginUserImplicitly(final UserProfile userProfile) {
    OneginiSDK.getOneginiClient(this).getUserClient()
        .authenticateUserImplicitly(userProfile, new String[]{ "read" }, new OneginiImplicitAuthenticationHandler() {
          @Override
          public void onSuccess(final UserProfile profile) {
            //user has been logged in
          }

          @Override
          public void onError(final OneginiImplicitTokenRequestError oneginiImplicitTokenRequestError) {
            //handle implicit authentication errors
          }
        });
  }

copy link to clipboardCheck which user is implicitly authenticated

UserClient contains a method getImplicitlyAuthenticatedUserProfile that returns the currently implicitly authenticated UserProfile object or null if no user is implicitly authenticated.

On this page