IWSDSSLClientCertificate::GetMappedAccessToken method (wsdbase.h)

Gets the mapped access token.

Syntax

HRESULT GetMappedAccessToken(
  [in, out] HANDLE *phToken
);

Parameters

[in, out] phToken

A handle for the mapped access token. Upon completion, the caller must free the handle by calling CloseHandle.

Return value

Possible return values include, but are not limited to, the following.

Return code Description
S_OK
Method succeeded.
S_FALSE
The token associated with the specified handle is not available.

Remarks

If the client certificate was successfully mapped to an operating system user account, then a valid access token for this user will be returned through phToken. This token can be used to impersonate the user. Internally, HTTP.sys will do the client certificate to user account mapping and return this information through the HTTP_SSL_CLIENT_CERT_INFO structure.

Requirements

Requirement Value
Minimum supported client Windows 7 [desktop apps only]
Minimum supported server Windows Server 2008 R2 [desktop apps only]
Target Platform Windows
Header wsdbase.h (include Wsdapi.h)
DLL Wsdapi.dll

See also

IWSDSSLClientCertificate