Interface IdentityService


public interface IdentityService
This service provides operations to query for principal and identity data.

A principal represents an identity that can authenticate. In essence, a principal can be thought of as an "account" or as an identity's authentication credentials. A principal has an id which is used to uniquely identify it. It also has a name which represents the principal's username and is typically what is entered when authenticating. All principals are associated with one and only one identity.

An identity represents a person or system. Additionally, other "types" of entities can be defined in KIM. Information like name, phone number, etc. is associated with an identity. It is the representation of a concrete person or system. While an identity will typically have a single principal associated with it, it is possible for an identity to have more than one principal or even no principals at all (in the case where the identity does not actually authenticate).

This service also provides operations for querying various pieces of reference data, such as address types, affiliation types, phone types, etc.

Author:
Kuali Rice Team (rice.collab@kuali.org)