# AuthenticationSequenceType (Complex Type)

### Namespace: http://midpoint.evolveum.com/xml/ns/public/common/common-3

Authentication sequence. It is a sequence of authentication modules. The modules could be invoked in order, or they may be invoked in parallel if the specific implementation allows such approach. The purpose of the sequence is to guide user through a complete authentication process.

Item Summary
Name | Type | Multiplicity | Description
--- | --- | --- | ---
name | property string | [1,1] | Unique name of the authentication sequence.
displayName | property string | [0,1] | Display name of sequence.
description | property string | [0,1] | Free form description of the sequence (administrator comment).
documentation | property string | [0,1] | Technical documentation for a particular object or construct.
channel | container AuthenticationSequenceChannelType | [1,1] | Specification of channel for authentication sequence.
requireAssignmentTarget | reference ObjectReferenceType | [0,-1] | Required assignment target(s).
nodeGroup | reference ObjectReferenceType | [0,-1] | Required node group.
module | container AuthenticationSequenceModuleType | [1,-1] | Specification of authentication module in the sequence.
focusBehaviorUpdate | property FocusBehaviorUpdateType | [0,1] | Option for updating focus authentication behaviour attributes.

- ### Items

  - #### name

    Flags: RAM,runtime

    Multiplicity: [1,1]

    Unique name of the authentication sequence. This name is fact a short identifier. It is supposed to give some idea about purpose of the sequence to system administrator. But it is not supposed to be used as a user-friendly label. Sequence name must be unique.

  - #### displayName

    Flags: RAM,runtime

    Multiplicity: [0,1]

    Display name of sequence. This is shown for identifying of authentication sequence in GUI.

  - #### description

    Flags: RAM,runtime

    Multiplicity: [0,1]

    Free form description of the sequence (administrator comment).

  - #### documentation

    Flags: RAM,runtime

    Multiplicity: [0,1]

    Technical documentation for a particular object or construct.

    The purpose of this element is to document system configuration and behavior. The documentation will not be presented to end users. In fact, it will probably not be presented at all in midPoint user interface. This documentation element is supposed to be a part of the technical documentation of midPoint deployment. The tools than generate deployment configuration will look for these elements and combine them to compiled documentation document.

    AsciiDoc formatting is assumed for this element. Any leading or trailing whitespace is skipped. Indentation equivalent to he indentation of the first non-blank line of text is also skipped.

  - #### channel

    Flags: RAM,runtime

    Multiplicity: [1,1]

    Specification of channel for authentication sequence.

  - #### requireAssignmentTarget

    Flags: RAM

    Multiplicity: [0,-1]

    Required assignment target(s). This authentication sequence is applicable only to users that have active assignment with this target (and relation). If the sequence is attempted on a user that does not have this assignment then the authentication will fail. All targets must be present. They are checked against effective link values ("roleMembershipRef"). OID, type (if present), and relation is matched. If relation is not defined, org:default is assumed. Value of q:any may be used to denote any relation value.

  - #### nodeGroup

    Flags: RAM

    Multiplicity: [0,-1]

    Required node group. This authentication sequence is applicable only to node group that have active assignment with this archetype.

  - #### module

    Flags: RAM,runtime

    Multiplicity: [1,-1]

    Specification of authentication module in the sequence.

  - #### focusBehaviorUpdate

    Flags: RAM,runtime,AVals:3

    Multiplicity: [0,1]

    Option for updating focus authentication behaviour attributes. We can enable/disable updating of focus behavior during every login, or we can use option for updating behaviour only when login failed and during success login after fails login. Default value is 'everyLogin'.