IMachineSecurityService

IMachineSecurityService is the contract for machine/service-account AD group authorization, implemented by MachineSecurityService.

Purpose

• Define the single-method contract for authorizing a machine/service account against an AD security group.

Context

• Namespace: SAIF.Framework.Security.Utilities
• Assembly/package: SAIF.BOF.Framework.Security (bundled into the repository-wide SAIF.BOF.Framework NuGet package)

Public members

Member	Signature	Purpose
IsAuthorized	Function IsAuthorized(machine As String, ByRef groupName As String, Optional isResource As Boolean = True, Optional useProductionSecurityResource As Boolean = True) As Boolean	Sole contract member; determines whether machine is a member of the (optionally suffixed) groupName AD security group.

Behavioral notes

• This is the only member declared on the interface; all behavior (suffixing, WCF call, matching, fail-closed error handling) is defined by the implementing class, MachineSecurityService.*

Constraints and usage notes

• Consumers should code against this interface rather than the concrete MachineSecurityService class where dependency substitution or testing is required.

Note: Statements marked with * were inferred from code structure, naming conventions, or contextual evidence where direct confirmation was not available in source artifacts.

Sources

• SAIF.Framework.Security\Utilities\IMachineSecurityService.vb