| Interface | Description | 
|---|---|
| IdentityStore | 
IdentityStore is a mechanism for validating a caller's credentials
 and accessing a caller's identity attributes. | 
| IdentityStoreHandler | 
IdentityStoreHandler is a mechanism for validating a caller's
 credentials, and accessing a caller's identity attributes, by consulting
 a set of one or more IdentityStores. | 
| PasswordHash | 
PasswordHash is an interface for objects that can generate and verify password hashes. | 
| Pbkdf2PasswordHash | 
 This interface represents the built-in  
Pbkdf2PasswordHash implementation. | 
| RememberMeIdentityStore | 
RememberMeIdentityStore is a mechanism for validating a caller's
 credentials and accessing a caller's identity attributes that's specifically
 tailored for the "remember me" feature. | 
| Class | Description | 
|---|---|
| CredentialValidationResult | 
CredentialValidationResult is the result from an attempt to
 validate an instance of Credential. | 
| IdentityStorePermission | 
 Class for IdentityStore permissions. 
 | 
| Enum | Description | 
|---|---|
| CredentialValidationResult.Status | |
| IdentityStore.ValidationType | 
 Determines the type of validation (operations) that should be done by this store. 
 | 
| LdapIdentityStoreDefinition.LdapSearchScope | 
 Enum representing LDAP search scope values. 
 | 
| Annotation Type | Description | 
|---|---|
| DatabaseIdentityStoreDefinition | 
 Annotation used to define a container-provided  
IdentityStore that
 stores caller credentials and identity attributes in a relational database,
 and make that implementation available as an enabled CDI bean. | 
| LdapIdentityStoreDefinition | 
 Annotation used to define a container-provided  
IdentityStore that stores
 caller credentials and identity attributes (together caller identities) in an
 LDAP store, and make that implementation available as an enabled CDI bean. |