---
title: ExtensibleSSOPlatformSSO_AccessKeyObject
framework: devicemanagement
role: symbol
role_heading: Object
path: devicemanagement/extensiblessoplatformsso_accesskeyobject
---

# ExtensibleSSOPlatformSSO_AccessKeyObject

Settings for Access Key authentication.

## Declaration

```data
object ExtensibleSSOPlatformSSO_AccessKeyObject
```

## Properties

AllowExpressMode: If true, the system uses the access key in express mode, and doesn’t require authentication before use. ReaderGroupIdentifier: The reader group identifier for use with the AccessKey. The value needs to match the configured access key. Required if UserCreation.AuthenticationMethods contains AccessKey. ReaderIssuerCertificateAssetReference: The identifier of an asset declaration that contains the certificate for the issuer certificate of the Terminal identity of the access key. Other specifications refer to the key as the “Reader CA Public Key”. The key must be an elliptic curve key. Required if UserCreation.AuthenticationMethods includes AccessKey. The issuer of the Terminal identity of the access key needs to match this certificate, otherwise the device fails the authentication. TerminalIdentityAssetReference: The identifier of an asset declaration that contains the identity to use as the Terminal identity of the Access Key. The Access Key needs to trust the identity. Required if UserCreation.AuthenticationMethods includes AccessKey.

## See Also

### Objects

- [ExtensibleSSOPlatformSSO_AccountObject](devicemanagement/extensiblessoplatformsso_accountobject.md)
- [ExtensibleSSOPlatformSSO_AuthorizationObject](devicemanagement/extensiblessoplatformsso_authorizationobject.md)
- [ExtensibleSSOPlatformSSO_PoliciesObject](devicemanagement/extensiblessoplatformsso_policiesobject.md)
- [ExtensibleSSOPlatformSSO_UserCreationObject](devicemanagement/extensiblessoplatformsso_usercreationobject.md)
- [ExtensibleSSOPlatformSSO_WebAuthenticationObject](devicemanagement/extensiblessoplatformsso_webauthenticationobject.md)