---
title: Backchannel callbacks
description: Retrieve additional information from authentication requests using backchannel callbacks for headers, certificates, and locale data
component: pingam
version: 8.1
page_id: pingam:am-authentication:callbacks-backchannel
canonical_url: https://docs.pingidentity.com/pingam/8.1/am-authentication/callbacks-backchannel.html
llms_txt: https://docs.pingidentity.com/pingam/llms.txt
docs_for_agents: https://developer.pingidentity.com/build-with-ai/docs-for-agents.md
revdate: 2026-06-04T16:52:10Z
keywords: ["Authentication", "Callbacks", "REST API"]
page_aliases: ["authn-backchannel-callbacks.adoc", "authentication-guide:callbacks-backchannel.adoc"]
section_ids:
  httpcallback: HttpCallback
  languagecallback: LanguageCallback
  scripttextoutputcallback: ScriptTextOutputCallback
  x509certificatecallback: X509CertificateCallback
---

# Backchannel callbacks

Nodes use these callbacks to recover additional information from the request, such as a header or a certificate.

## HttpCallback

Accesses user credentials sent in the `Authorization` header:

```
Authorization: Basic bXlDbGllbnQ6Zm9yZ2Vyb2Nr
```

* Class to import

  `com.sun.identity.authentication.spi.HttpCallback`

Learn more in [HttpCallback](../_attachments/apidocs/com/sun/identity/authentication/spi/HttpCallback.html).

## LanguageCallback

Retrieves the locale from the request header for localizing text presented to the user.

* Class to import

  `javax.security.auth.callback.LanguageCallback`

Learn more in [LanguageCallback](https://docs.oracle.com/en/java/javase/25/docs/api/java.base/javax/security/auth/callback/LanguageCallback.html).

## ScriptTextOutputCallback

Inserts a script into the page presented to the user; for example, to collect data about the user's environment.

|   |                                                                                                                                                                                                                                                                     |
| - | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
|   | Don't use `ScriptTextOutputCallback` to build custom user interfaces or style the login page. Scripts injected this way might rely on specific PingAM JavaScript or HTML that isn't guaranteed to remain stable. This could cause them to break in future upgrades. |

* Class to import

  `com.sun.identity.authentication.callbacks.ScriptTextOutputCallback`

Learn more in [ScriptTextOutputCallback](../_attachments/apidocs/com/sun/identity/authentication/callbacks/ScriptTextOutputCallback.html).

## X509CertificateCallback

Retrieves an X.509 certificate, for example, from a header.

* Class to import

  `com.sun.identity.authentication.spi.X509CertificateCallback`

Learn more in [X509CertificateCallback](../_attachments/apidocs/com/sun/identity/authentication/spi/X509CertificateCallback.html).