https://answers.axonivy.com/questions/3085/how-to-verify-username-password-of-user-without-logging-in<p>Hi all</p> <p>Normally when we want to check whether user is authenticated ivy user or not, we use this api:</p> <pre><code>Ivy.session().loginSessionUser(userName, password) </code></pre> <p>But this api will also change the current login user to new one. </p> <p>Is there any other api to verify user/pass without logout current user?</p> <p>Because my process is an ivy webservice then it's run with <code>system</code> permission, if i use above api to verify another user it will throw exception that i can't logout of <code>system</code> user.</p> <p>Thanks</p>enThu, 01 Feb 2018 07:27:26 -0500https://answers.axonivy.com/questions/3085/how-to-verify-username-password-of-user-without-logging-in#3090<p>thanks Reto Weiss ♦♦ it's helpful for me</p>trungdvThu, 01 Feb 2018 07:27:26 -0500https://answers.axonivy.com/questions/3085/how-to-verify-username-password-of-user-without-logging-in#3090https://answers.axonivy.com/questions/3085/how-to-verify-username-password-of-user-without-logging-in/3089<p>Hi </p> <p>You can create a new session. Then, use it to authenticate the user and finally destroy the session again.</p> <p>See invisible API (API is not visible in content assist but is there and can be used):</p> <pre><code>ISession session = ivy.wf.getSecurityContext().createSession(); try { session.loginSessionUser(...) } finally { ivy.wf.getSecurityContext().destroySesssion(session.getIdentifier()); } </code></pre>Reto WeissThu, 01 Feb 2018 06:17:42 -0500https://answers.axonivy.com/questions/3085/how-to-verify-username-password-of-user-without-logging-in/3089