# OpcIssuedTokenAcl Members

> Reference: Represents the access control list of an OpcServerSecurity which authenticates issued identity tokens containing a Kerberos token.

<dl class="api-definition">
<dt>Type</dt>
<dd><a href="./">OpcIssuedTokenAcl</a></dd>
<dt>Namespace</dt>
<dd><a href="../namespaces/opc.uafx.server">Opc.UaFx.Server</a></dd>
<dt>Assembly</dt>
<dd>Opc.UaFx.Advanced.dll</dd>
<dt>Package</dt>
<dd>Opc.UaFx.Advanced v2.59.0</dd>
</dl>

Inherits members from [OpcAccessControlList](https://www.traeger.de/en/docs/development/opcua/api/v2.59/opc.uafx.server.opcaccesscontrollist/members).

## Constructors

### OpcIssuedTokenAcl

<span class="api-meta">since v2.6</span>

Initializes a new instance of the [OpcIssuedTokenAcl](https://www.traeger.de/en/docs/development/opcua/api/v2.59/opc.uafx.server.opcissuedtokenacl/) class using the `owner` specified.

<div class="api-signature" data-lang="csharp">

```csharp
public OpcIssuedTokenAcl(OpcServerBase owner)
```

</div>

<div class="api-signature" data-lang="vbnet">

```vbnet
Public Sub New(owner As OpcServerBase)
```

</div>

**Parameters**

| Name | Type | Description |
|---|---|---|
| `owner` | [OpcServerBase](https://www.traeger.de/en/docs/development/opcua/api/v2.59/opc.uafx.server.opcserverbase/) | The [OpcServerBase](https://www.traeger.de/en/docs/development/opcua/api/v2.59/opc.uafx.server.opcserverbase/) the list belongs to. |

**Exceptions**

| Exception | Condition |
|---|---|
| [ArgumentNullException](https://learn.microsoft.com/dotnet/api/system.argumentnullexception) | The `owner` is a null reference (Nothing in Visual Basic). |

**Remarks**

The entries created by the list evaluate operations and endpoints using the mode [Whitelist](https://www.traeger.de/en/docs/development/opcua/api/v2.59/opc.uafx.server.opcaccesscontrolmode/#whitelist).

## Properties

### TokenType

<span class="api-meta">protected · override · since v2.42</span>

Gets the type of the identity tokens the list is responsible for.

<div class="api-signature" data-lang="csharp">

```csharp
protected override OpcAccessControlTokenType TokenType { get; }
```

</div>

<div class="api-signature" data-lang="vbnet">

```vbnet
Protected Overrides ReadOnly Property TokenType As OpcAccessControlTokenType
```

</div>

**Property value**

[OpcAccessControlTokenType](https://www.traeger.de/en/docs/development/opcua/api/v2.59/opc.uafx.server.opcaccesscontroltokentype/)

Always [IssuedToken](https://www.traeger.de/en/docs/development/opcua/api/v2.59/opc.uafx.server.opcaccesscontroltokentype/#issuedtoken).

**Overrides**

[TokenType](https://www.traeger.de/en/docs/development/opcua/api/v2.59/opc.uafx.server.opcaccesscontrollist/members#tokentype)

## Methods

### Authenticate

<span class="api-meta">override · since v2.42</span>

Authenticates the `identityToken` specified if it is an issued identity token.

<div class="api-signature" data-lang="csharp">

```csharp
public override OpcPrincipal Authenticate(OpcIdentityToken identityToken)
```

</div>

<div class="api-signature" data-lang="vbnet">

```vbnet
Public Overrides Function Authenticate(
    identityToken As OpcIdentityToken) As OpcPrincipal
```

</div>

**Parameters**

| Name | Type | Description |
|---|---|---|
| `identityToken` | [OpcIdentityToken](https://www.traeger.de/en/docs/development/opcua/api/v2.59/opc.uafx.opcidentitytoken/) | The [OpcIdentityToken](https://www.traeger.de/en/docs/development/opcua/api/v2.59/opc.uafx.opcidentitytoken/) to authenticate. |

**Returns**

[OpcPrincipal](https://www.traeger.de/en/docs/development/opcua/api/v2.59/opc.uafx.server.opcprincipal/)

A new [OpcPrincipal](https://www.traeger.de/en/docs/development/opcua/api/v2.59/opc.uafx.server.opcprincipal/) of the identity of the `identityToken` if it is an [OpcIssuedIdentityToken](https://www.traeger.de/en/docs/development/opcua/api/v2.59/opc.uafx.opcissuedidentitytoken/) which passes the validation; otherwise a null reference (Nothing in Visual Basic).

**Exceptions**

| Exception | Condition |
|---|---|
| [OpcException](https://www.traeger.de/en/docs/development/opcua/api/v2.59/opc.uafx.opcexception/) | The token data cannot be read as a security token or the validation of the Kerberos token fails; the exception states [BadIdentityTokenRejected](https://www.traeger.de/en/docs/development/opcua/api/v2.59/opc.uafx.opcstatuscode/#badidentitytokenrejected). |
| [PlatformNotSupportedException](https://learn.microsoft.com/dotnet/api/system.platformnotsupportedexception) | The `identityToken` is an [OpcIssuedIdentityToken](https://www.traeger.de/en/docs/development/opcua/api/v2.59/opc.uafx.opcissuedidentitytoken/) and the SDK is used in its build for .NET Standard 2.0 or .NET Core 3.1; issued identity tokens are only supported by the build for .NET Framework. |

**Overrides**

[Authenticate](https://www.traeger.de/en/docs/development/opcua/api/v2.59/opc.uafx.server.opcaccesscontrollist/members#authenticate)

**Remarks**

The entries of the list are not used to authenticate the token.