IHttpUser::GetAuthenticationType Method

IIS 7.0

Returns the request authentication type.

virtual PCWSTR GetAuthenticationType(
) = 0;

This method takes no parameters.

A pointer to a constant null-terminated Unicode string that contains the authentication type.

You can use the values returned from methods such as GetUserName, GetRemoteUserName, GetPassword, and GetAuthenticationType on an IHttpUser pointer to create custom user authentication. For an example, see the IAuthenticationProvider interface.

The following table shows authentication types with the return values from the GetAuthenticationType method.

Authentication type

Return value


Empty string








Negotiate or NTLM

IHttpUser implementers are responsible for memory management with this data; therefore, IHttpUser implementers that use dynamic memory allocation must release or call delete on the PCWSTR pointer when it is no longer needed.

IHttpUser implementers are responsible for memory management with this data; therefore, IHttpUser clients must not release or call delete on the returned PCWSTR pointer when this data is no longer needed. Furthermore, clients must not cast this data to a pointer that is not a const or change the state of the memory referenced by this PCWSTR; otherwise, an access violation will be thrown or the data will become invalid.


The following code example demonstrates how to create an HTTP module that clears the response headers and body and then returns user information to the client as an XML document.

The above code writes XML that is similar to the following to the response stream.

<?xml version="1.0" ?>
<user authType="Negotiate" />

Your module must export the RegisterModule function. You can export this function by creating a module definition (.def) file for your project, or you can compile the module by using the /EXPORT:RegisterModule switch. For more information, see Walkthrough: Creating a Request-Level HTTP Module By Using Native Code.

You can optionally compile the code by using the __stdcall (/Gz) calling convention instead of explicitly declaring the calling convention for each function.





  • IIS 7.0 on Windows Vista

  • IIS 7.5 on Windows 7

  • IIS 8.0 on Windows 8

  • IIS 10.0 on Windows 10


  • IIS 7.0 on Windows Server 2008

  • IIS 7.5 on Windows Server 2008 R2

  • IIS 8.0 on Windows Server 2012

  • IIS 8.5 on Windows Server 2012 R2

  • IIS 10.0 on Windows Server 2016 Technical Preview


  • IIS 7.0, IIS 7.5, IIS 8.0, IIS 8.5, IIS 10.0

  • IIS Express 7.5, IIS Express 8.0, IIS Express 10.0