#### [Abblix\.Oidc\.Server](https://www.abblix.com/en/docs/api/abblix-oidc-server 'index')
### [Abblix\.Oidc\.Server\.Features\.UserInfo](https://www.abblix.com/en/docs/api/abblix-oidc-server/Abblix.Oidc.Server.Features.UserInfo 'Abblix\.Oidc\.Server\.Features\.UserInfo')

## PairwiseSubjectSettings Class

Configuration for pairwise subject identifier generation\.
The salt is a server\-side secret that prevents external computation of pairwise identifiers,
ensuring that even with knowledge of the user's real subject and the client ID,
an attacker cannot derive the pairwise identifier\.

```csharp
public record PairwiseSubjectSettings : System.IEquatable<Abblix.Oidc.Server.Features.UserInfo.PairwiseSubjectSettings>
```

Inheritance [System\.Object](https://learn.microsoft.com/en-us/dotnet/api/system.object 'System\.Object') → PairwiseSubjectSettings

Implements [System\.IEquatable&lt;](https://learn.microsoft.com/en-us/dotnet/api/system.iequatable-1 'System\.IEquatable\`1')[PairwiseSubjectSettings](https://www.abblix.com/en/docs/api/abblix-oidc-server/Abblix.Oidc.Server.Features.UserInfo.PairwiseSubjectSettings 'Abblix\.Oidc\.Server\.Features\.UserInfo\.PairwiseSubjectSettings')[&gt;](https://learn.microsoft.com/en-us/dotnet/api/system.iequatable-1 'System\.IEquatable\`1')
### Properties

## PairwiseSubjectSettings\.HashAlgorithm Property {#Abblix.Oidc.Server.Features.UserInfo.PairwiseSubjectSettings.HashAlgorithm}

The HMAC algorithm used to compute pairwise subject identifiers\.
Defaults to HMAC\-SHA256\. Supported algorithms: SHA256, SHA384, SHA512, SHA1\.

```csharp
public System.Security.Cryptography.HashAlgorithmName HashAlgorithm { get; init; }
```

#### Property Value
[System\.Security\.Cryptography\.HashAlgorithmName](https://learn.microsoft.com/en-us/dotnet/api/system.security.cryptography.hashalgorithmname 'System\.Security\.Cryptography\.HashAlgorithmName')

## PairwiseSubjectSettings\.Salt Property {#Abblix.Oidc.Server.Features.UserInfo.PairwiseSubjectSettings.Salt}

A base64\-encoded cryptographic salt used in HMAC computation for pairwise identifiers\.
This value MUST be kept secret, generated once, and never changed
\(changing it would invalidate all existing pairwise identifiers\)\.
Minimum recommended length: 32 bytes \(256 bits\) before encoding\.

```csharp
public string Salt { get; init; }
```

#### Property Value
[System\.String](https://learn.microsoft.com/en-us/dotnet/api/system.string 'System\.String')