Skip to content

Slot: token

The Token object is the base object for representing tokens, API keys, and

authentication credentials. This object provides common attributes for all

token types and can be used directly in API activity events to represent API

tokens (type_id: 7) or client tokens (type_id: 6) such as Okta API tokens or

Microsoft Entra ID Application Registration client secrets. The base

token object is also extended by authentication_token

for protocol-specific authentication tokens in authentication events. Note: Use

authentication_token (which extends token) for

protocol-specific authentication tokens (Kerberos, OIDC, SAML) in

authentication events, and programmatic_credential for tracking

credential lifecycle and usage patterns.

URI: ocsf:token Alias: token

Applicable Classes

Name Description Modifies Slot
Api The API, or Application Programming Interface, object represents information yes

Properties

Type and Range

Property Value
Range Token
Domain Of Api

Cardinality and Requirements

Property Value

Aliases

  • Token

Identifier and Mapping Information

Schema Source

Mappings

Mapping Type Mapped Value
self ocsf:token
native ocsf:token

LinkML Source

name: token
description: 'The Token object is the base object for representing tokens, API keys,
  and

  authentication credentials. This object provides common attributes for all

  token types and can be used directly in API activity events to represent API

  tokens (type_id: 7) or client tokens (type_id: 6) such as Okta API tokens or

  Microsoft Entra ID Application Registration client secrets. The base

  <code>token</code> object is also extended by <code>authentication_token</code>

  for protocol-specific authentication tokens in authentication events. Note: Use

  <code>authentication_token</code> (which extends <code>token</code>) for

  protocol-specific authentication tokens (Kerberos, OIDC, SAML) in

  authentication events, and <code>programmatic_credential</code> for tracking

  credential lifecycle and usage patterns.'
from_schema: https://w3id.org/lmodel/ocsf
aliases:
- Token
rank: 1000
alias: token
domain_of:
- Api
range: Token