EapHostPeerQueryUserBlobFromCredentialInputFields function

The EapHostPeerQueryUserBlobFromCredentialInputFields function obtains a credential BLOB that can be used to start authentication from user input received from the Single-Sign-On (SSO) UI.


DWORD WINAPI EapHostPeerQueryUserBlobFromCredentialInputFields(
  _In_          HANDLE                       hUserImpersonationToken,
  _In_          EAP_METHOD_TYPE              eapMethodType,
  _In_          DWORD                        dwFlags,
  _In_          DWORD                        dwEapConnDataSize,
  _In_    const BYTE                         *pbEapConnData,
  _In_    const EAP_CONFIG_INPUT_FIELD_ARRAY *pEapConfigInputFieldArray,
  _Inout_       DWORD                        *pdwUserBlobSize,
  _Inout_       BYTE                         **ppbUserBlob,
  _Out_         EAP_ERROR                    **pEapError


hUserImpersonationToken [in]

A handle to the user impersonation token to use in this session.

eapMethodType [in]

An EAP_METHOD_TYPE structure that specifies the type of EAP authentication to use for this session.

dwFlags [in]

A combination of EAP flags that describe the EAP authentication session behavior.

dwEapConnDataSize [in]

The size, in bytes, of the connection data buffer provided in pConnectionData.

pbEapConnData [in]

Connection data used for the EAP method.

pEapConfigInputFieldArray [in]

A pointer to an EAP_CONFIG_INPUT_FIELD_ARRAY structure the contains the UI input field data. The caller should free the inner pointers using the function EapHostPeerFreeMemory, starting at the innermost pointer.

pdwUserBlobSize [in, out]

A pointer to a DWORD that specifies the size, in bytes, of the buffer pointed to by ppbUserBlob. If this value is not set to zero, then a pointer to a buffer of the size specified in this parameter must be supplied to ppbUserBlob.

ppbUserBlob [in, out]

A pointer to the credential BLOB that can be used in authentication. Memory must be freed by calling EapHostPeerFreeMemory. If a non-null value is supplied for this parameter (meaning that an existing data BLOB is passed to it), the supplied data BLOB will be updated and returned in this parameter. If a non-NULL BLOB value is supplied, the LocalAlloc function should be used.

pEapError [out]

A pointer to a pointer to an EAP_ERROR structure that contains any errors raised by EAPHost during the execution of this function call. After consuming the error data, this memory must be freed by calling EapHostPeerFreeErrorMemory.


EapHostPeerQueryUserBlobFromCredentialInputFields supports SSO. This supplicant function, like EapHostPeerQueryCredentialInputFields, is used only in an SSO scenario.

After EapHostPeerQueryUserBlobFromCredentialInputFields, EAPHost calls EapHostPeerBeginSession. The supplicant uses the EAP_FLAG_PRE_LOGON flag in EapHostPeerBeginSession to indicate that EAPHost should provide SSO.


Minimum supported client

Windows Vista [desktop apps only]

Minimum supported server

Windows Server 2008 [desktop apps only]







See also

EAPHost Supplicant Configuration Functions



Community Additions

© 2015 Microsoft