---
id: object/codeunit/9801
type: object
title: Codeunit 9801 "Identity Management"
summary: Codeunit 9801 "Identity Management" in Base Application (System.Security.AccessControl). 20 public procedures. Present since at least BC23, still in BC30, changed in BC27.
tier: official
language: en
tags:
  - codeunit
  - base application
versions:
  introduced: null
  last_changed: "27"
  deprecated: null
review:
  state: derived
  by: null
  at: null
  flags: []
generated:
  at: "2026-10-11T00:31:51.816Z"
  pipeline: 0.2.0
  prompts: {}
  input_hash: c5d61339681634de26e310f8809b4405946c4fbd3cbcff64d5a72c4dc753949f
evidence:
  - kind: code
    url: https://github.com/microsoft/BCApps/blob/ea08af5ef2d6a9b5c5af4a029288abbe2c883220/src/Layers/W1/BaseApp/Modules/System/User/IdentityManagement.Codeunit.al
    title: src/Layers/W1/BaseApp/Modules/System/User/IdentityManagement.Codeunit.al (releases/29.x)
    date: null
    commit: ea08af5ef2d6a9b5c5af4a029288abbe2c883220
    t: null
    quote: null
links:
  learn: []
  objects: []
  features: []
  topics: []
  localizations: []
  videos: []
  posts: []
  guidelines: []
object_type: codeunit
object_id: 9801
name: Identity Management
namespace: System.Security.AccessControl
app: Base Application
extends: null
first_version: "23"
last_version: "30"
present_in:
  - "23"
  - "24"
  - "25"
  - "26"
  - "27"
  - "28"
  - "29"
  - "30"
changed_in:
  - "27"
source_major: "29"
obsolete: null
countries: []
ms_search_form_ids: []
counts:
  fields: 0
  procedures: 20
  events: 0
  subscribers: 0
relations:
  out: 0
  referenced_by: 0
  pages: 0
  extended_by: 0
  event_subscribers: 0
  calls: 0
  called_by: 8
  implements: 0
---

# Codeunit 9801 "Identity Management"

> Codeunit 9801 "Identity Management" in Base Application (System.Security.AccessControl). 20 public procedures. Present since at least BC23, still in BC30, changed in BC27.

Base Application · System.Security.AccessControl · BC23-30 · [source at ea08af5e](https://github.com/microsoft/BCApps/blob/ea08af5ef2d6a9b5c5af4a029288abbe2c883220/src/Layers/W1/BaseApp/Modules/System/User/IdentityManagement.Codeunit.al) · facts from BC29

## Procedures

- `SetAuthenticationKey(UserSecurityID: Guid; Key: Text[80])`
- `GetAuthenticationKey(UserSecurityID: Guid): Text[80]`
- `GetNameIdentifier(UserSecurityID: Guid): Text[250]`
- `GetObjectId(UserSecurityID: Guid): Text[250]`
- `CreateWebServicesKey(UserSecurityID: Guid; ExpiryDate: DateTime): Text[80]`
- `GetPuid(): Text`
- `CreateWebServicesKeyNoExpiry(UserSecurityID: Guid): Text[80]`
- `ClearWebServicesKey(UserSecurityID: Guid)`
- `GetWebServicesKey(UserSecurityID: Guid): Text[80]`
- `IsAzure(): Boolean`
- `GetWebServiceExpiryDate(UserSecurityID: Guid): DateTime`
- `GetACSStatus(UserSecurityID: Guid): Integer`
- `IsUserPasswordSet(UserSecurityID: Guid): Boolean`
- `IsWindowsAuthentication(): Boolean`
- `IsUserNamePasswordAuthentication(): Boolean`
- `IsAccessControlServiceAuthentication(): Boolean`
- `UserName(Sid: Text): Text[208]`
- `SetAuthenticationEmail(UserSecurityId: Guid; AuthenticationEmail: Text[250])`
- `IsUserDelegatedAdmin(): Boolean`
- `GetAuthenticationStatus(UserSecurityId: Guid): Integer`

## Triggers

OnRun

## Called by

From the extracted call graph of BC29 (graphify-al on the snapshot checkout): calls whose target is known from a declared type or an `Object::"Name"` argument. Interface dispatch and calls through events are not counted, so the list is not complete.

- [Page 9807 "User Card"](../page/9807.md) (12 calls: `OnAfterGetRecord → GetACSStatus`, `OnAfterGetRecord → GetAuthenticationStatus`, `OnAfterGetRecord → GetWebServiceExpiryDate`, …)
- [Page 9811 "User ACS Setup"](../page/9811.md) (4 calls: `OnAfterGetRecord → GetACSStatus`, `OnAfterGetRecord → GetAuthenticationKey`, `OnAfterGetRecord → GetNameIdentifier`, …)
- [Codeunit 4001 "Hybrid Cloud Management"](../codeunit/4001.md) (3 calls: `AddWebhookSubscription → IsUserDelegatedAdmin`, `CanGrantPermission → IsUserDelegatedAdmin`, `CanSetupIntelligentCloud → IsUserDelegatedAdmin`)
- [Page 9812 "Set Web Service Access Key"](../page/9812.md) (2 calls: `OnQueryClosePage → CreateWebServicesKey`, `OnQueryClosePage → CreateWebServicesKeyNoExpiry`)
- [Codeunit 40 "LogInManagement"](../codeunit/40.md) (1 call: `LogInStart → IsUserNamePasswordAuthentication`)
- [Codeunit 7201 "CDS Integration Impl."](../codeunit/7201.md) (1 call: `EnableAADApp → IsUserNamePasswordAuthentication`)
- [Codeunit 9178 "Application Area Mgmt."](../codeunit/9178.md) (1 call: `IsValidExperienceTierSelected → IsUserDelegatedAdmin`)
- [Page 9800 "Users"](../page/9800.md) (1 call: `OnAfterGetRecord → UserName`)

## Across versions

- Present in: BC23-30
- Changed (declaration) in: BC27

Source: AL metadata extracted from the code (names, ids, signatures, properties); no code bodies (D10).

## Ask your agent

Procedure bodies are not stored here (D10). The call sections above are our own, per object, from the BC29 call graph. For a procedure body or the calls of one procedure, ask bc-code-atlas (external, by Stefan Maron, MIT; default corpus w1-28), which the bc-observatory plugin connects: `bcatlas_resolve_node(object_type: "codeunit", object_name: "Identity Management")`, then `bcatlas_get_procedure_body` or `bcatlas_get_neighbors` on the returned id.