#### [Abblix\.Oidc\.Server](https://www.abblix.com/en/docs/api/abblix-oidc-server 'index')

## Abblix\.Oidc\.Server\.Features\.PairwiseIdentifiers Namespace

| Classes | |
| :--- | :--- |
| [PairwiseSubjectSettings](https://www.abblix.com/en/docs/api/abblix-oidc-server/Abblix.Oidc.Server.Features.PairwiseIdentifiers.PairwiseSubjectSettings 'Abblix\.Oidc\.Server\.Features\.PairwiseIdentifiers\.PairwiseSubjectSettings') | Configuration for pairwise subject identifier generation\. The salt is a server\-side secret that keys the reversible pairwise seal, so that even with knowledge of the user's real subject and the sector, an attacker cannot derive or open the pairwise identifier\. |
| [PairwiseSubjectSettingsValidator](https://www.abblix.com/en/docs/api/abblix-oidc-server/Abblix.Oidc.Server.Features.PairwiseIdentifiers.PairwiseSubjectSettingsValidator 'Abblix\.Oidc\.Server\.Features\.PairwiseIdentifiers\.PairwiseSubjectSettingsValidator') | Fails loudly at startup when the configured seal key cannot key the pairwise seal, instead of letting the first pairwise token request answer 500\. |
| [SubjectTypeConverter](https://www.abblix.com/en/docs/api/abblix-oidc-server/Abblix.Oidc.Server.Features.PairwiseIdentifiers.SubjectTypeConverter 'Abblix\.Oidc\.Server\.Features\.PairwiseIdentifiers\.SubjectTypeConverter') | Implements the OIDC Core Section 8 subject types\. A public client's subject passes through unchanged\. A pairwise client's subject is sealed into a per\-sector pseudonym that is stable \(the same user and sector always map to the same value\), opaque and unlinkable to outsiders, yet reversible by this server \- so the real subject rides inside the pseudonym itself and no separate protected claim is needed\. The seal is a deterministic \(SIV\-style\) authenticated encryption keyed by the pairwise salt and bound to the sector as associated data, so different sectors seal the same user to unlinkable values and a pseudonym cannot be opened under the wrong sector\. |
| [SubjectTypeConverterExtensions](https://www.abblix.com/en/docs/api/abblix-oidc-server/Abblix.Oidc.Server.Features.PairwiseIdentifiers.SubjectTypeConverterExtensions 'Abblix\.Oidc\.Server\.Features\.PairwiseIdentifiers\.SubjectTypeConverterExtensions') | Comparing a session against the end users a client named\. |

| Interfaces | |
| :--- | :--- |
| [ISubjectTypeConverter](https://www.abblix.com/en/docs/api/abblix-oidc-server/Abblix.Oidc.Server.Features.PairwiseIdentifiers.ISubjectTypeConverter 'Abblix\.Oidc\.Server\.Features\.PairwiseIdentifiers\.ISubjectTypeConverter') | Defines the interface for a service that converts user subject identifiers according to the client's specified subject type\. This conversion ensures that the subject identifier presented to the client is in the format that the client expects, based on its configuration\. |