7 Common parameter type definitions

7.41 UserIdentityToken parameters

7.41.5 X509IdentityTokens

The X509IdentityToken is used to pass an X.509 v3 Certificate which is issued by the user.

This token shall always be accompanied by a Signature in the userTokenSignature parameter of ActivateSession if required by the SecurityPolicy. The Server should specify a SecurityPolicy for the UserTokenPolicy if the SecureChannel has a SecurityPolicy of None.

Table 194 defines the X509IdentityToken parameter.

Table 194 – X.509 v3 Identity Token

Name	Type	Description
X509IdentityToken	structure	X.509 v3 value.
policyId	String	An identifier for the UserTokenPolicy that the token conforms to.The UserTokenPolicy structure is defined in 7.42.
certificateData	ByteString	The X.509 v3 Certificate in DER format.