The UserIdentityToken structure used in the Server Service Set allows Clients to specify the identity of the user they are acting on behalf of. The exact mechanism used to identify users depends on the system configuration. The different types of identity tokens are based on the most common mechanisms that are used in systems today. Table 180 defines the current set of user identity tokens. The ExtensibleParameter type is defined in 7.12.

Table 180 – UserIdentityToken parameterTypeIds

Symbolic Id



No user information is available.


A user identified by user name and password.


A user identified by an X.509 v3 Certificate.


A user identified by a token issued by an external Authorization Service.