public class BrowserSSOProfileConfiguration extends AbstractSAML1ArtifactAwareProfileConfiguration implements AuthenticationProfileConfiguration
| Modifier and Type | Field and Description |
|---|---|
private Set<String> |
authenticationFlows
Filters the usable authentication flows.
|
private com.google.common.base.Function<ProfileRequestContext,Set<String>> |
authenticationFlowsLookupStrategy
Lookup function to supply
authenticationFlows property. |
private List<AuthenticationMethodPrincipal> |
defaultAuthenticationMethods
Selects, and limits, the authentication methods to use for requests.
|
private com.google.common.base.Function<ProfileRequestContext,Collection<AuthenticationMethodPrincipal>> |
defaultAuthenticationMethodsLookupStrategy
Lookup function to supply
defaultAuthenticationMethods property. |
private com.google.common.base.Predicate<ProfileRequestContext> |
forceAuthnPredicate
Whether to mandate forced authentication for the request.
|
private com.google.common.base.Predicate<ProfileRequestContext> |
includeAttributeStatementPredicate
Whether responses to the authentication request should include an attribute statement.
|
private List<String> |
nameIDFormatPrecedence
Precedence of name identifier formats to use for requests.
|
private com.google.common.base.Function<ProfileRequestContext,Collection<String>> |
nameIDFormatPrecedenceLookupStrategy
Lookup function to supply
nameIDFormatPrecedence property. |
private List<String> |
postAuthenticationFlows
Enables post-authentication interceptor flows.
|
private com.google.common.base.Function<ProfileRequestContext,Collection<String>> |
postAuthenticationFlowsLookupStrategy
Lookup function to supply
postAuthenticationFlows property. |
static String |
PROFILE_ID
ID for this profile configuration.
|
private com.google.common.base.Predicate<ProfileRequestContext> |
resolveAttributesPredicate
Whether attributes should be resolved in the course of the profile.
|
| Modifier | Constructor and Description |
|---|---|
|
BrowserSSOProfileConfiguration()
Constructor.
|
protected |
BrowserSSOProfileConfiguration(String profileId)
Constructor.
|
| Modifier and Type | Method and Description |
|---|---|
Set<String> |
getAuthenticationFlows() |
List<Principal> |
getDefaultAuthenticationMethods() |
com.google.common.base.Predicate<ProfileRequestContext> |
getForceAuthnPredicate()
Get a condition to determine whether a fresh user presence proof should be required for this request.
|
com.google.common.base.Predicate<ProfileRequestContext> |
getIncludeAttributeStatementPredicate()
Get a condition to determine whether responses to the authentication request should include an
attribute statement.
|
List<String> |
getNameIDFormatPrecedence() |
List<String> |
getPostAuthenticationFlows() |
com.google.common.base.Predicate<ProfileRequestContext> |
getResolveAttributesPredicate()
Get a condition to determine whether attributes should be resolved during the profile.
|
boolean |
includeAttributeStatement()
Deprecated.
Use
getIncludeAttributeStatementPredicate() instead. |
boolean |
resolveAttributes()
Deprecated.
Use
getResolveAttributesPredicate() instead. |
void |
setAuthenticationFlows(Collection<String> flows)
Set the authentication flows to use.
|
void |
setAuthenticationFlowsLookupStrategy(com.google.common.base.Function<ProfileRequestContext,Set<String>> strategy)
Set a lookup strategy for the
authenticationFlows property. |
void |
setDefaultAuthenticationMethods(Collection<AuthenticationMethodPrincipal> methods)
Set the default authentication methods to use, expressed as custom principals.
|
void |
setDefaultAuthenticationMethodsLookupStrategy(com.google.common.base.Function<ProfileRequestContext,Collection<AuthenticationMethodPrincipal>> strategy)
Set a lookup strategy for the
defaultAuthenticationMethods property. |
void |
setForceAuthn(boolean flag)
Set whether a fresh user presence proof should be required for this request.
|
void |
setForceAuthnPredicate(com.google.common.base.Predicate<ProfileRequestContext> condition)
Set a condition to determine whether a fresh user presence proof should be required for this request.
|
void |
setIncludeAttributeStatement(boolean include)
Set whether responses to the authentication request should include an attribute statement.
|
void |
setIncludeAttributeStatementPredicate(com.google.common.base.Predicate<ProfileRequestContext> condition)
Set a condition to determine whether responses to the authentication request should include an
attribute statement.
|
void |
setNameIDFormatPrecedence(Collection<String> formats)
Set the name identifier formats to use.
|
void |
setNameIDFormatPrecedenceLookupStrategy(com.google.common.base.Function<ProfileRequestContext,Collection<String>> strategy)
Set a lookup strategy for the
nameIDFormatPrecedence property. |
void |
setPostAuthenticationFlows(Collection<String> flows)
Set the ordered collection of post-authentication interceptor flows to enable.
|
void |
setPostAuthenticationFlowsLookupStrategy(com.google.common.base.Function<ProfileRequestContext,Collection<String>> strategy)
Set a lookup strategy for the
postAuthenticationFlows property. |
void |
setResolveAttributes(boolean flag)
Set whether attributes should be resolved during the profile.
|
void |
setResolveAttributesPredicate(com.google.common.base.Predicate<ProfileRequestContext> condition)
Set a condition to determine whether attributes should be resolved during the profile.
|
getArtifactConfiguration, setArtifactConfiguration, setArtifactConfigurationLookupStrategygetAdditionalAudiencesForAssertion, getAssertionLifetime, getInboundInterceptorFlows, getIncludeConditionsNotBeforePredicate, getSignAssertions, getSignRequests, getSignResponses, includeConditionsNotBefore, setAdditionalAudienceForAssertion, setAdditionalAudiencesForAssertion, setAssertionAudiencesLookupStrategy, setAssertionLifetime, setAssertionLifetimeLookupStrategy, setIncludeConditionsNotBefore, setIncludeConditionsNotBeforePredicate, setSignAssertions, setSignRequests, setSignResponsesgetActivationCondition, setActivationConditionequals, getDisallowedFeatures, getId, getIndirectProperty, getOutboundInterceptorFlows, getProfileRequestContext, getSecurityConfiguration, hashCode, isFeatureDisallowed, setDisallowedFeatures, setDisallowedFeaturesLookupStrategy, setInboundFlowsLookupStrategy, setInboundInterceptorFlows, setOutboundFlowsLookupStrategy, setOutboundInterceptorFlows, setSecurityConfiguration, setSecurityConfigurationLookupStrategy, setServletRequestclone, finalize, getClass, notify, notifyAll, toString, wait, wait, waitgetInboundInterceptorFlows, getOutboundInterceptorFlows, getSecurityConfigurationgetIdgetAdditionalAudiencesForAssertion, getAssertionLifetime, getSignAssertions, getSignRequests, getSignResponses, includeConditionsNotBeforepublic static final String PROFILE_ID
@Nonnull private com.google.common.base.Predicate<ProfileRequestContext> resolveAttributesPredicate
@Nonnull private com.google.common.base.Predicate<ProfileRequestContext> includeAttributeStatementPredicate
@Nonnull private com.google.common.base.Predicate<ProfileRequestContext> forceAuthnPredicate
@Nullable private com.google.common.base.Function<ProfileRequestContext,Collection<AuthenticationMethodPrincipal>> defaultAuthenticationMethodsLookupStrategy
defaultAuthenticationMethods property.@Nonnull @NonnullElements private List<AuthenticationMethodPrincipal> defaultAuthenticationMethods
@Nullable private com.google.common.base.Function<ProfileRequestContext,Set<String>> authenticationFlowsLookupStrategy
authenticationFlows property.@Nonnull @NonnullElements private Set<String> authenticationFlows
@Nullable private com.google.common.base.Function<ProfileRequestContext,Collection<String>> postAuthenticationFlowsLookupStrategy
postAuthenticationFlows property.@Nonnull @NonnullElements private List<String> postAuthenticationFlows
@Nullable private com.google.common.base.Function<ProfileRequestContext,Collection<String>> nameIDFormatPrecedenceLookupStrategy
nameIDFormatPrecedence property.@Nonnull @NonnullElements private List<String> nameIDFormatPrecedence
public BrowserSSOProfileConfiguration()
public boolean resolveAttributes()
getResolveAttributesPredicate() instead.Default is true
public void setResolveAttributes(boolean flag)
flag - flag to set@Nonnull public com.google.common.base.Predicate<ProfileRequestContext> getResolveAttributesPredicate()
public void setResolveAttributesPredicate(@Nonnull com.google.common.base.Predicate<ProfileRequestContext> condition)
condition - condition to setpublic boolean includeAttributeStatement()
getIncludeAttributeStatementPredicate() instead.Default is true
public void setIncludeAttributeStatement(boolean include)
include - flag to set@Nonnull public com.google.common.base.Predicate<ProfileRequestContext> getIncludeAttributeStatementPredicate()
public void setIncludeAttributeStatementPredicate(@Nonnull com.google.common.base.Predicate<ProfileRequestContext> condition)
condition - condition to set@Nonnull public com.google.common.base.Predicate<ProfileRequestContext> getForceAuthnPredicate()
public void setForceAuthnPredicate(@Nonnull com.google.common.base.Predicate<ProfileRequestContext> condition)
condition - condition to setpublic void setForceAuthn(boolean flag)
flag - flag to set@Nonnull @NonnullElements @NotLive @Unmodifiable public List<Principal> getDefaultAuthenticationMethods()
getDefaultAuthenticationMethods in interface AuthenticationProfileConfigurationpublic void setDefaultAuthenticationMethods(@Nullable@NonnullElements Collection<AuthenticationMethodPrincipal> methods)
methods - default authentication methods to usepublic void setDefaultAuthenticationMethodsLookupStrategy(@Nullable com.google.common.base.Function<ProfileRequestContext,Collection<AuthenticationMethodPrincipal>> strategy)
defaultAuthenticationMethods property.strategy - lookup strategy@Nonnull @NonnullElements @NotLive @Unmodifiable public Set<String> getAuthenticationFlows()
getAuthenticationFlows in interface AuthenticationProfileConfigurationpublic void setAuthenticationFlows(@Nullable@NonnullElements Collection<String> flows)
flows - flow identifiers to usepublic void setAuthenticationFlowsLookupStrategy(@Nullable com.google.common.base.Function<ProfileRequestContext,Set<String>> strategy)
authenticationFlows property.strategy - lookup strategy@Nonnull @NonnullElements @NotLive @Unmodifiable public List<String> getPostAuthenticationFlows()
getPostAuthenticationFlows in interface AuthenticationProfileConfigurationpublic void setPostAuthenticationFlows(@Nullable@NonnullElements Collection<String> flows)
flows - flow identifiers to enablepublic void setPostAuthenticationFlowsLookupStrategy(@Nullable com.google.common.base.Function<ProfileRequestContext,Collection<String>> strategy)
postAuthenticationFlows property.strategy - lookup strategy@Nonnull @NonnullElements @NotLive @Unmodifiable public List<String> getNameIDFormatPrecedence()
getNameIDFormatPrecedence in interface AuthenticationProfileConfigurationpublic void setNameIDFormatPrecedence(@Nonnull@NonnullElements Collection<String> formats)
formats - name identifier formats to usepublic void setNameIDFormatPrecedenceLookupStrategy(@Nullable com.google.common.base.Function<ProfileRequestContext,Collection<String>> strategy)
nameIDFormatPrecedence property.strategy - lookup strategyCopyright © 1999–2018 Shibboleth Consortium. All rights reserved.