<!--
{
  "availability" : [
    "macCatalyst: -",
    "macOS: 10.13.0 -"
  ],
  "documentType" : "symbol",
  "framework" : "Security",
  "identifier" : "/documentation/Security/AuthorizationCallbacks/GetTokenIdentities",
  "metadataVersion" : "0.1.0",
  "role" : "Instance Property",
  "symbol" : {
    "kind" : "Instance Property",
    "modules" : [
      "Security"
    ],
    "preciseIdentifier" : "c:@S@AuthorizationCallbacks@FI@GetTokenIdentities"
  },
  "title" : "GetTokenIdentities"
}
-->

# GetTokenIdentities

Returns an array of identities available on tokens.

```
int (*)(struct __OpaqueAuthorizationEngine *, const void *, const struct __CFArray **) GetTokenIdentities;
```

## Parameters

`inEngine`

An opaque handle that’s passed to your plug-in when the authorization engine calls your [`MechanismCreate`](/documentation/Security/AuthorizationPluginInterface/MechanismCreate) function.

`context`

A local authentication context returned by the [`GetLAContext`](/documentation/Security/AuthorizationCallbacks/GetLAContext) call.

`outValue`

A pointer the function uses to return an array of identities, each of which consists of two array elements: a [`SecIdentity`](/documentation/Security/SecIdentity) instance and a text description of the identity.

## Discussion

The caller owns the returned array and is responsible for releasing it.

> Important:
> This function is only available when the callback ``doc://com.apple.security/documentation/Security/AuthorizationCallbacks/version`` is 2 or higher.

---

Copyright &copy; 2026 Apple Inc. All rights reserved. | [Terms of Use](https://www.apple.com/legal/internet-services/terms/site.html) | [Privacy Policy](https://www.apple.com/privacy/privacy-policy)