---
title: SAIF.NetCore.NtlmApiAuth API reference
summary: Index of all public types in this library.
status: draft
owner: SAIF Platform Team
last_reviewed: 2026-10-02
library: SAIF.NetCore.NtlmApiAuth
reference_type: package
---

# SAIF.NetCore.NtlmApiAuth API reference

This page lists all public types exposed by `SAIF.NetCore.NtlmApiAuth`. Each type links to its full API reference page.

## Types

| Type | Kind | Namespace | Purpose |
| --- | --- | --- | --- |
| [Constants](SAIF.NetCore.NtlmApiAuth/Constants.md) | Class | `SAIF.NetCore.NtlmApiAuth` | Centralizes the shared claim/header name literal, plus two unused resource-suffix setting keys that are not read by this library or by the embedded AuthService rewrite. |
| [RoleRequirement](SAIF.NetCore.NtlmApiAuth.Authorization/RoleRequirement.md) | Class | `SAIF.NetCore.NtlmApiAuth.Authorization` | Self-handling authorization requirement that evaluates one role against the dual (caller + on-behalf-of) identity. |
| [AuthorizationHandlerContextExtensions](SAIF.NetCore.NtlmApiAuth.Extensions/AuthorizationHandlerContextExtensions.md) | Class | `SAIF.NetCore.NtlmApiAuth.Extensions` | Reads the on-behalf-of claim out of an in-flight authorization context. |
| [HttpContextAccessorExtensions](SAIF.NetCore.NtlmApiAuth.Extensions/HttpContextAccessorExtensions.md) | Class | `SAIF.NetCore.NtlmApiAuth.Extensions` | Reads the on-behalf-of claim from the current request and forwards it onto an outbound client call. |
| [IApplicationBuilderExtensions](SAIF.NetCore.NtlmApiAuth.Extensions/IApplicationBuilderExtensions.md) | Class | `SAIF.NetCore.NtlmApiAuth.Extensions` | Registers the on-behalf-of claim middleware in the request pipeline. |
| [IHttpJsonClientExtensions](SAIF.NetCore.NtlmApiAuth.Extensions/IHttpJsonClientExtensions.md) | Class | `SAIF.NetCore.NtlmApiAuth.Extensions` | Configures a typed HTTP client to persist headers and send the current user as the on-behalf-of header. |
| [IServiceCollectionExtensions](SAIF.NetCore.NtlmApiAuth.Extensions/IServiceCollectionExtensions.md) | Class | `SAIF.NetCore.NtlmApiAuth.Extensions` | Registers the server-side authorization services and the client-side current-user services. |
| [StringExtensions](SAIF.NetCore.NtlmApiAuth.Extensions/StringExtensions.md) | Class | `SAIF.NetCore.NtlmApiAuth.Extensions` | Normalizes usernames and rewrites AD resource-group names for the current environment. |
| [SwaggerGenOptionsExtensions](SAIF.NetCore.NtlmApiAuth.Extensions/SwaggerGenOptionsExtensions.md) | Class | `SAIF.NetCore.NtlmApiAuth.Extensions` | Adds a debug-only Swagger UI header parameter for exercising on-behalf-of authorization. |
| [ClientAppType](SAIF.NetCore.NtlmApiAuth.Extensions/ClientAppType.md) | Enum | `SAIF.NetCore.NtlmApiAuth.Extensions` | Selects which `ICurrentUserService` implementation is registered for a client application. |
| [OnBehalfOfUserClaimMiddleware](SAIF.NetCore.NtlmApiAuth.Middleware/OnBehalfOfUserClaimMiddleware.md) | Class | `SAIF.NetCore.NtlmApiAuth.Middleware` | Request-pipeline middleware that converts the on-behalf-of header into a claim on the authenticated identity. |
| [ConfigureRoleAuthorizationOptions](SAIF.NetCore.NtlmApiAuth.Options/ConfigureRoleAuthorizationOptions.md) | Class | `SAIF.NetCore.NtlmApiAuth.Options` | Abstract base consumers subclass to declare named role policies against `AuthorizationOptions`. |
| [ICurrentUserService](SAIF.NetCore.NtlmApiAuth.Services/ICurrentUserService.md) | Interface | `SAIF.NetCore.NtlmApiAuth.Services` | Resolves the current username on the client side for on-behalf-of header population. |
| [INtlmApiAuthorizationService](SAIF.NetCore.NtlmApiAuth.Services/INtlmApiAuthorizationService.md) | Interface | `SAIF.NetCore.NtlmApiAuth.Services` | Contract for the dual-identity role authorization decision. |
| [IOnBehalfOfUserClaimService](SAIF.NetCore.NtlmApiAuth.Services/IOnBehalfOfUserClaimService.md) | Interface | `SAIF.NetCore.NtlmApiAuth.Services` | Contract for converting the on-behalf-of header into a claim. |
| [BlazorCurrentUserService](SAIF.NetCore.NtlmApiAuth.Services/BlazorCurrentUserService.md) | Class | `SAIF.NetCore.NtlmApiAuth.Services` | Resolves the current username from Blazor's `AuthenticationStateProvider`. |
| [MvcCurrentUserService](SAIF.NetCore.NtlmApiAuth.Services/MvcCurrentUserService.md) | Class | `SAIF.NetCore.NtlmApiAuth.Services` | Resolves the current username from the ASP.NET Core MVC `HttpContext`. |
| [NtlmApiAuthorizationService](SAIF.NetCore.NtlmApiAuth.Services/NtlmApiAuthorizationService.md) | Class | `SAIF.NetCore.NtlmApiAuth.Services` | Performs the dual-identity role check by delegating each identity to AuthService's remote SecurityAPI, confirmed against the repository's 10.x `SecurityClient` source; applicability to the pinned `8.2023.319.2` package is inferred*. |
| [OnBehalfOfUserClaimService](SAIF.NetCore.NtlmApiAuth.Services/OnBehalfOfUserClaimService.md) | Class | `SAIF.NetCore.NtlmApiAuth.Services` | Writes the on-behalf-of header value onto the authenticated identity as a claim. |
| [OnBehalfOfUserHeaderParameterFilter](SAIF.NetCore.NtlmApiAuth.Swagger/OnBehalfOfUserHeaderParameterFilter.md) | Class | `SAIF.NetCore.NtlmApiAuth.Swagger` | Swagger operation filter that documents the on-behalf-of header as a UI parameter. |

## Related documentation
- [Index](../index.md)
- [Overview](../overview.md)
- [Architecture](../architecture.md)
- [Dependencies](../dependencies.md)
- [Operations and processes](../operations-processes.md)
- [Business rules](../business-rules.md)
- [Security and authorization](../security-authorization.md)
- [Service registration](../service-registration.md)

> **Note:** Statements marked with `*` were inferred from code structure, naming
> conventions, or contextual evidence where direct confirmation was not available
> in source artifacts.

## Sources
- `src/SAIF.NetCore.NtlmApiAuth/src/SAIF.NetCore.NtlmApiAuth/`