A B C D E F G H I J K L M N O P R S T U V W X
All Classes All Packages
All Classes All Packages
All Classes All Packages
A
- AbstractAuthenticationAction - Class in net.shibboleth.idp.authn
-
A base class for authentication related actions.
- AbstractAuthenticationAction() - Constructor for class net.shibboleth.idp.authn.AbstractAuthenticationAction
-
Constructor.
- AbstractCredentialValidator - Class in net.shibboleth.idp.authn
-
An abstract
CredentialValidatorthat handles some common behavior. - AbstractCredentialValidator() - Constructor for class net.shibboleth.idp.authn.AbstractCredentialValidator
-
Constructor.
- AbstractExtractionAction - Class in net.shibboleth.idp.authn
-
A base class for authentication actions that extract usernames for subsequent use.
- AbstractExtractionAction() - Constructor for class net.shibboleth.idp.authn.AbstractExtractionAction
-
Constructor.
- AbstractPrincipalSerializer<Type> - Class in net.shibboleth.idp.authn.principal
-
Base class for
PrincipalSerializerimplementations. - AbstractPrincipalSerializer() - Constructor for class net.shibboleth.idp.authn.principal.AbstractPrincipalSerializer
-
Constructor.
- AbstractSubjectCanonicalizationAction - Class in net.shibboleth.idp.authn
-
A base class for subject canonicalization actions.
- AbstractSubjectCanonicalizationAction() - Constructor for class net.shibboleth.idp.authn.AbstractSubjectCanonicalizationAction
-
Constructor.
- AbstractTemplateSearchDnResolver - Class in net.shibboleth.idp.authn
-
Base class for
Templatebased search dn resolvers. - AbstractTemplateSearchDnResolver(VelocityEngine, String) - Constructor for class net.shibboleth.idp.authn.AbstractTemplateSearchDnResolver
-
Creates a new abstract template search DN resolver.
- AbstractTemplateSearchDnResolver.EscapingReferenceInsertionEventHandler - Class in net.shibboleth.idp.authn
-
Escapes LDAP attribute values added to the template context.
- AbstractUsernamePasswordCredentialValidator - Class in net.shibboleth.idp.authn
-
An abstract
CredentialValidatorthat checks for aUsernamePasswordContextand delegates to subclasses to produce a result. - AbstractUsernamePasswordCredentialValidator() - Constructor for class net.shibboleth.idp.authn.AbstractUsernamePasswordCredentialValidator
-
Constructor.
- AbstractValidationAction - Class in net.shibboleth.idp.authn
-
A base class for authentication related actions that validate credentials and produce an
AuthenticationResult. - AbstractValidationAction() - Constructor for class net.shibboleth.idp.authn.AbstractValidationAction
-
Constructor.
- AbstractValidationAction.MessageChecker - Class in net.shibboleth.idp.authn
-
A predicate that examines a message to see if it contains a particular String.
- ACCOUNT_ERROR - Static variable in class net.shibboleth.idp.authn.AuthnEventIds
-
ID of event returned if the subject's account is in an invalid state.
- ACCOUNT_LOCKED - Static variable in class net.shibboleth.idp.authn.AuthnEventIds
-
ID of event returned if the subject's account is locked.
- ACCOUNT_WARNING - Static variable in class net.shibboleth.idp.authn.AuthnEventIds
-
ID of event returned if the subject's account has non-fatal but potentially useful state to report.
- AccountLockoutManager - Interface in net.shibboleth.idp.authn
-
A component that manages lockout state for accounts.
- accountStateExpirationPeriod - Variable in class net.shibboleth.idp.authn.config.LDAPAuthenticationFactoryBean
-
Authentication handler account state expiration period.
- accountStateLoginFailures - Variable in class net.shibboleth.idp.authn.config.LDAPAuthenticationFactoryBean
-
Authentication handler account state login failures.
- accountStateWarningPeriod - Variable in class net.shibboleth.idp.authn.config.LDAPAuthenticationFactoryBean
-
Authentication handler account state warning period.
- activationCondition - Variable in class net.shibboleth.idp.authn.AbstractCredentialValidator
-
Activation condition.
- activationCondition - Variable in class net.shibboleth.idp.authn.AuthenticationFlowDescriptor
-
Predicate that must be true for this flow to be usable for a given request.
- activationCondition - Variable in class net.shibboleth.idp.authn.SubjectCanonicalizationFlowDescriptor
-
Predicate that must be true for this flow to be usable for a given request.
- ACTIVE_PASSIVE - net.shibboleth.idp.authn.config.LDAPAuthenticationFactoryBean.ConnectionStrategyType
- activeResults - Variable in class net.shibboleth.idp.authn.context.AuthenticationContext
-
Authentication results associated with an active session and available for (re)use.
- activeResults - Variable in class net.shibboleth.idp.authn.context.MultiFactorAuthenticationContext
-
Authentication results that are active (may be generated earlier or during current request).
- AD - net.shibboleth.idp.authn.config.LDAPAuthenticationFactoryBean.AuthenticatorType
- addDefaultPrincipals - Variable in class net.shibboleth.idp.authn.AbstractValidationAction
-
Whether to inject the authentication flow's default custom principals into the subject.
- addDefaultPrincipals() - Method in class net.shibboleth.idp.authn.AbstractValidationAction
-
Get whether to inject the authentication flow's default custom principals into the subject.
- addException(Exception) - Method in class net.shibboleth.idp.authn.context.AuthenticationErrorContext
-
Deprecated, for removal: This API element is subject to removal in a future version.
- additionalData - Variable in class net.shibboleth.idp.authn.AuthenticationResult
-
A map of additional data to associate with the result.
- addRequestedPrincipalContext(String, String, String, boolean) - Method in class net.shibboleth.idp.authn.context.AuthenticationContext
-
Add (or replace) a
RequestedPrincipalContextas a child of this context using the supplied parameters and the previously establishedPrincipalEvalPredicateFactoryRegistryfor comparison handling. - addRequestedPrincipalContext(String, String, Collection<String>, boolean) - Method in class net.shibboleth.idp.authn.context.AuthenticationContext
-
Add (or replace) a
RequestedPrincipalContextas a child of this context using the supplied parameters and the previously establishedPrincipalEvalPredicateFactoryRegistryfor comparison handling. - addRequestedPrincipalContext(String, Principal, boolean) - Method in class net.shibboleth.idp.authn.context.AuthenticationContext
-
Add (or replace) a
RequestedPrincipalContextas a child of this context using the supplied parameters and the previously establishedPrincipalEvalPredicateFactoryRegistryfor comparison handling. - addRequestedPrincipalContext(String, List<Principal>, boolean) - Method in class net.shibboleth.idp.authn.context.AuthenticationContext
-
Add (or replace) a
RequestedPrincipalContextas a child of this context using the supplied parameters and the previously establishedPrincipalEvalPredicateFactoryRegistryfor comparison handling. - address - Variable in class net.shibboleth.idp.authn.context.UserAgentContext
-
Address of the user-agent host.
- all() - Method in class net.shibboleth.idp.authn.principal.PrincipalServiceManager
-
Get all of the registered services.
- ANON_SEARCH - net.shibboleth.idp.authn.config.LDAPAuthenticationFactoryBean.AuthenticatorType
- ANONYMOUS_BIND - net.shibboleth.idp.authn.config.LDAPAuthenticationFactoryBean.PassivatorType
- apiHost - Variable in class net.shibboleth.idp.authn.duo.BasicDuoIntegration
-
API host.
- applicationKey - Variable in class net.shibboleth.idp.authn.duo.BasicDuoIntegration
-
Application key.
- apply(Subject) - Method in class net.shibboleth.idp.authn.context.navigate.ProxyAuthenticationLookupFunction
- apply(AuthenticationContext) - Method in class net.shibboleth.idp.authn.context.navigate.PreviousResultLookupFunction
- apply(RequestedPrincipalContext) - Method in class net.shibboleth.idp.authn.context.navigate.RequestedPrincipalContextOperatorLookupFunction
- apply(RequestedPrincipalContext) - Method in class net.shibboleth.idp.authn.context.navigate.RequestedPrincipalContextPrincipalLookupFunction
- apply(SubjectCanonicalizationContext) - Method in class net.shibboleth.idp.authn.context.navigate.SubjectCanonicalizationContextSubjectLookupFunction
- apply(SubjectContext) - Method in class net.shibboleth.idp.authn.context.navigate.SubjectContextImpersonatingPrincipalLookupFunction
- apply(SubjectContext) - Method in class net.shibboleth.idp.authn.context.navigate.SubjectContextPrincipalLookupFunction
- apply(ProfileRequestContext) - Method in class net.shibboleth.idp.authn.config.navigate.AuthenticationFlowsLookupFunction
- apply(ProfileRequestContext) - Method in class net.shibboleth.idp.authn.config.navigate.PostAuthenticationFlowsLookupFunction
- apply(ProfileRequestContext) - Method in class net.shibboleth.idp.authn.principal.DefaultPrincipalDeterminationStrategy
-
Deprecated.
- applyTransforms(String) - Method in class net.shibboleth.idp.authn.AbstractExtractionAction
-
Apply any configured regular expression replacements to an input value and return the result.
- applyTransforms(String) - Method in class net.shibboleth.idp.authn.AbstractSubjectCanonicalizationAction
-
Apply any configured regular expression replacements to an input value and return the result.
- applyTransforms(String) - Method in class net.shibboleth.idp.authn.AbstractUsernamePasswordCredentialValidator
-
Apply any configured regular expression replacements to an input value and return the result.
- attemptedFlow - Variable in class net.shibboleth.idp.authn.context.AuthenticationContext
-
Authentication flow being attempted to authenticate the user.
- attemptedFlow - Variable in class net.shibboleth.idp.authn.context.SubjectCanonicalizationContext
-
The last c14 flow attempted.
- attribute - Variable in class net.shibboleth.idp.authn.principal.IdPAttributePrincipal
-
The wrapped attribute.
- ATTRIBUTES_KEY - Static variable in class net.shibboleth.idp.authn.ExternalAuthentication
-
Request attribute to which a collection of
IdPAttributeobjects may be bound. - audiences - Variable in class net.shibboleth.idp.authn.principal.ProxyAuthenticationPrincipal
-
The audiences.
- authenticatedSubject - Variable in class net.shibboleth.idp.authn.AbstractValidationAction
-
Basis for
AuthenticationResult. - AUTHENTICATING_AUTHORITIES_KEY - Static variable in class net.shibboleth.idp.authn.ExternalAuthentication
-
Request attribute to which a collection of authenticating authorities may be bound.
- authenticatingAuthorities - Variable in class net.shibboleth.idp.authn.context.ExternalAuthenticationContext
-
Proxied authenticating sources.
- authenticatingAuthority - Variable in class net.shibboleth.idp.authn.context.AuthenticationContext
-
Name of a proxied authentication source to use.
- AUTHENTICATION_ERROR_KEY - Static variable in class net.shibboleth.idp.authn.ExternalAuthentication
-
Request attribute to which an error message may be bound.
- AUTHENTICATION_EXCEPTION_KEY - Static variable in class net.shibboleth.idp.authn.ExternalAuthentication
-
Request attribute to which an exception may be bound.
- AUTHENTICATION_INSTANT_KEY - Static variable in class net.shibboleth.idp.authn.ExternalAuthentication
-
Request attribute to which an authentication timestamp may be bound.
- AuthenticationContext - Class in net.shibboleth.idp.authn.context
-
A context representing the state of an authentication attempt, this is the primary input/output context for the action flow responsible for authentication, and within that flow, the individual flows that carry out a specific kind of authentication.
- AuthenticationContext() - Constructor for class net.shibboleth.idp.authn.context.AuthenticationContext
-
Constructor.
- AuthenticationErrorContext - Class in net.shibboleth.idp.authn.context
-
A context that holds information about authentication failures.
- AuthenticationErrorContext() - Constructor for class net.shibboleth.idp.authn.context.AuthenticationErrorContext
-
Constructor.
- AuthenticationFlowDescriptor - Class in net.shibboleth.idp.authn
-
A descriptor for an authentication flow.
- AuthenticationFlowDescriptor() - Constructor for class net.shibboleth.idp.authn.AuthenticationFlowDescriptor
-
Constructor.
- AuthenticationFlowDescriptor.ProxyCountPredicate - Class in net.shibboleth.idp.authn
-
A
Predicatethat implements a cross-check between an effective proxy count of zero and whether a descriptor is honoring the limit. - AuthenticationFlowDescriptor.WeightedComparator<T> - Class in net.shibboleth.idp.authn
-
A
Comparatorthat compares the mapped weights of the two operands, using a weight of zero for any unmapped values. - authenticationFlowId - Variable in class net.shibboleth.idp.authn.AuthenticationResult
-
The identifier of the flow used to produce this result.
- AuthenticationFlowsLookupFunction - Class in net.shibboleth.idp.authn.config.navigate
-
A function that returns
AuthenticationProfileConfiguration.getAuthenticationFlows(org.opensaml.profile.context.ProfileRequestContext)() if such a profile is available from aRelyingPartyContextobtained via a lookup function, by default a child of theProfileRequestContext. - AuthenticationFlowsLookupFunction() - Constructor for class net.shibboleth.idp.authn.config.navigate.AuthenticationFlowsLookupFunction
- authenticationInstant - Variable in class net.shibboleth.idp.authn.AuthenticationResult
-
The time that the authentication completed.
- AuthenticationProfileConfiguration - Interface in net.shibboleth.idp.authn.config
-
Configuration of profiles for authentication.
- authenticationResponse - Variable in class net.shibboleth.idp.authn.context.LDAPResponseContext
-
Authentication response.
- authenticationResult - Variable in class net.shibboleth.idp.authn.context.AuthenticationContext
-
A successful authentication result (the output of the attempted flow, if any).
- AuthenticationResult - Class in net.shibboleth.idp.authn
-
Describes an act of authentication.
- AuthenticationResult(String, Principal) - Constructor for class net.shibboleth.idp.authn.AuthenticationResult
-
Constructor.
- AuthenticationResult(String, Subject) - Constructor for class net.shibboleth.idp.authn.AuthenticationResult
-
Constructor.
- AuthenticationResult.DescriptorReusePredicate - Class in net.shibboleth.idp.authn
-
Inner class that delegates reuse condition evaluation to the underlying
AuthenticationFlowDescriptor. - AuthenticationResult.DescriptorRevocationPredicate - Class in net.shibboleth.idp.authn
-
Inner class that delegates revocation condition evaluation to the underlying
AuthenticationFlowDescriptor. - AuthenticationResult.ProxyRestrictionReusePredicate - Class in net.shibboleth.idp.authn
-
Inner class implementing a predicate that checks for contained
ProxyAuthenticationPrincipalobjects and enforces any restrictions on reuse based on the current request. - AuthenticationResultPrincipal - Class in net.shibboleth.idp.authn.principal
-
Principal that wraps an
AuthenticationResult. - AuthenticationResultPrincipal(AuthenticationResult) - Constructor for class net.shibboleth.idp.authn.principal.AuthenticationResultPrincipal
-
Constructor.
- authenticationResults - Variable in class net.shibboleth.idp.authn.context.SubjectContext
-
The active authentication results for the subject.
- AuthenticationWarningContext - Class in net.shibboleth.idp.authn.context
-
A context that holds information about authentication warnings.
- AuthenticationWarningContext() - Constructor for class net.shibboleth.idp.authn.context.AuthenticationWarningContext
-
Constructor.
- authenticatorType - Variable in class net.shibboleth.idp.authn.config.LDAPAuthenticationFactoryBean
-
Type of authenticator to configure.
- AuthenticatorType(String) - Constructor for enum net.shibboleth.idp.authn.config.LDAPAuthenticationFactoryBean.AuthenticatorType
- AUTHN_EXCEPTION - Static variable in class net.shibboleth.idp.authn.AuthnEventIds
-
ID of event returned if authentication throws an exception unrelated to credential validation.
- AUTHN_FLOW_ID - Static variable in class net.shibboleth.idp.authn.AuthnAuditFields
-
Authentication flow ID field.
- AUTHN_RESULT - Static variable in class net.shibboleth.idp.authn.AuthnAuditFields
-
Authentication results, either "Success" or any classified error results.
- AuthnAuditFields - Class in net.shibboleth.idp.authn
-
Constants to use for audit logging fields stored in an
AuditContext. - AuthnAuditFields() - Constructor for class net.shibboleth.idp.authn.AuthnAuditFields
-
Constructor.
- authnContext - Variable in class net.shibboleth.idp.authn.AbstractAuthenticationAction
-
AuthenticationContext to operate on.
- authnContextLookupStrategy - Variable in class net.shibboleth.idp.authn.principal.DefaultPrincipalDeterminationStrategy
-
Deprecated.Authentication context lookup strategy.
- authnCtxLookupStrategy - Variable in class net.shibboleth.idp.authn.AbstractAuthenticationAction
-
Strategy used to extract, and create if necessary, the
AuthenticationContextfrom theProfileRequestContext. - authnError - Variable in class net.shibboleth.idp.authn.context.ExternalAuthenticationContext
-
Error message.
- AuthnEventIds - Class in net.shibboleth.idp.authn
-
Constants to use for
ProfileActionEventContextresults related to authentication and subject c14n. - AuthnEventIds() - Constructor for class net.shibboleth.idp.authn.AuthnEventIds
-
Constructor.
- authnException - Variable in class net.shibboleth.idp.authn.context.ExternalAuthenticationContext
-
Exception.
- authnInstant - Variable in class net.shibboleth.idp.authn.context.ExternalAuthenticationContext
-
Time of authentication.
- authnResult - Variable in class net.shibboleth.idp.authn.principal.AuthenticationResultPrincipal
-
The authentication result.
- authorities - Variable in class net.shibboleth.idp.authn.principal.ProxyAuthenticationPrincipal
-
The authorities.
- availableFlows - Variable in class net.shibboleth.idp.authn.context.AuthenticationContext
-
Flows that are known to the system.
B
- baseDn - Variable in class net.shibboleth.idp.authn.config.LDAPAuthenticationFactoryBean
-
Base DN used to search for users.
- BasicDuoIntegration - Class in net.shibboleth.idp.authn.duo
-
Wrapper for use of Duo.
- BasicDuoIntegration() - Constructor for class net.shibboleth.idp.authn.duo.BasicDuoIntegration
-
Constructor.
- BIND - net.shibboleth.idp.authn.config.LDAPAuthenticationFactoryBean.PassivatorType
- BIND_SEARCH - net.shibboleth.idp.authn.config.LDAPAuthenticationFactoryBean.AuthenticatorType
- bindDn - Variable in class net.shibboleth.idp.authn.config.LDAPAuthenticationFactoryBean
-
Privileged entry used to search for users.
- bindDnCredential - Variable in class net.shibboleth.idp.authn.config.LDAPAuthenticationFactoryBean
-
Credential for the privileged entry.
- bindPoolPassivatorType - Variable in class net.shibboleth.idp.authn.config.LDAPAuthenticationFactoryBean
-
Type of passivator to configure for the bind pool.
- blockWaitTime - Variable in class net.shibboleth.idp.authn.config.LDAPAuthenticationFactoryBean
-
Wait time for getting a connection from the pool.
- buildAuthenticationResult(ProfileRequestContext, AuthenticationContext) - Method in class net.shibboleth.idp.authn.AbstractValidationAction
-
Normally called upon successful completion of credential validation, calls the
AbstractValidationAction.populateSubject(Subject)abstract method, stores anAuthenticationResultin theAuthenticationContext, and attaches aSubjectCanonicalizationContextto theProfileRequestContextin preparation for c14n to occur. - byClass(Class<T>) - Method in class net.shibboleth.idp.authn.principal.PrincipalServiceManager
-
Get a
PrincipalServiceby type.
C
- canonicalizationError - Variable in class net.shibboleth.idp.authn.context.SubjectCanonicalizationContext
-
Exception raised by a failed canonicalization.
- certificate - Variable in class net.shibboleth.idp.authn.context.CertificateContext
-
The certificate to be validated.
- CERTIFICATE - net.shibboleth.idp.authn.config.LDAPAuthenticationFactoryBean.TrustType
- CertificateContext - Class in net.shibboleth.idp.authn.context
-
Context that carries a
Certificateto be validated. - CertificateContext() - Constructor for class net.shibboleth.idp.authn.context.CertificateContext
-
Constructor.
- check(ProfileRequestContext) - Method in interface net.shibboleth.idp.authn.AccountLockoutManager
-
Check if the authentication credentials associated with the request are subject to lockout.
- checkProxyRestrictions(Collection<ProxyAuthenticationPrincipal>) - Method in class net.shibboleth.idp.authn.context.AuthenticationContext
-
Check for proxy restrictions and evaluate them against the associated
RelyingPartyContext. - classifiedErrors - Variable in class net.shibboleth.idp.authn.context.AuthenticationErrorContext
-
Error conditions detected through classified error messages.
- classifiedMessages - Variable in class net.shibboleth.idp.authn.AbstractValidationAction
-
Error messages associated with a specific error condition token.
- classifiedWarnings - Variable in class net.shibboleth.idp.authn.context.AuthenticationWarningContext
-
Warning conditions detected through classified warning messages.
- classIndexedMap - Variable in class net.shibboleth.idp.authn.principal.PrincipalServiceManager
-
Service index by class.
- cleanupHook - Variable in class net.shibboleth.idp.authn.AbstractValidationAction
-
A cleanup hook to execute after successful validation.
- clear(ProfileRequestContext) - Method in interface net.shibboleth.idp.authn.AccountLockoutManager
-
Clear the lockout state for the authentication credentials associated with the request.
- clearErrorContext - Variable in class net.shibboleth.idp.authn.AbstractValidationAction
-
Indicates whether to clear any existing
AuthenticationErrorContextbefore execution. - clientAddress - Variable in class net.shibboleth.idp.authn.duo.context.DuoAuthenticationContext
-
Client address.
- clone() - Method in class net.shibboleth.idp.authn.duo.DuoPrincipal
-
Creates and returns a copy of this object.
- clone() - Method in interface net.shibboleth.idp.authn.principal.CloneablePrincipal
-
Creates and returns a copy of this object.
- clone() - Method in class net.shibboleth.idp.authn.principal.HOTPPrincipal
-
Creates and returns a copy of this object.
- clone() - Method in class net.shibboleth.idp.authn.principal.PasswordPrincipal
-
Creates and returns a copy of this object.
- clone() - Method in class net.shibboleth.idp.authn.principal.TOTPPrincipal
-
Creates and returns a copy of this object.
- clone() - Method in class net.shibboleth.idp.authn.principal.UsernamePrincipal
-
Creates and returns a copy of this object.
- CloneablePrincipal - Interface in net.shibboleth.idp.authn.principal
-
Principal that can be cloned without knowledge of the underlying type.
- compare(T, T) - Method in class net.shibboleth.idp.authn.AuthenticationFlowDescriptor.WeightedComparator
- compatiblePrincipalTypes - Variable in class net.shibboleth.idp.authn.principal.GenericPrincipalSerializer
-
A cache of Principal types that support string-based construction.
- completionInstant - Variable in class net.shibboleth.idp.authn.context.AuthenticationContext
-
Time when authentication process completed.
- connectionStrategyType - Variable in class net.shibboleth.idp.authn.config.LDAPAuthenticationFactoryBean
-
Type of connection strategy to configure.
- ConnectionStrategyType(String) - Constructor for enum net.shibboleth.idp.authn.config.LDAPAuthenticationFactoryBean.ConnectionStrategyType
- connectTimeout - Variable in class net.shibboleth.idp.authn.config.LDAPAuthenticationFactoryBean
-
Wait time for connects.
- CONVERSATION_KEY - Static variable in class net.shibboleth.idp.authn.ExternalAuthentication
-
Parameter supplied to identify the per-conversation parameter.
- createConnectionConfig() - Method in class net.shibboleth.idp.authn.config.LDAPAuthenticationFactoryBean
-
Returns a new ConnectionConfig without a connection initializer.
- createConnectionConfig(ConnectionInitializer) - Method in class net.shibboleth.idp.authn.config.LDAPAuthenticationFactoryBean
-
Returns a new ConnectionConfig with the supplied connection initializer.
- createConnectionPool(String, ConnectionConfig) - Method in class net.shibboleth.idp.authn.config.LDAPAuthenticationFactoryBean
-
Returns a new blocking connection pool.
- createConnectionPool(String, ConnectionConfig, SearchValidator) - Method in class net.shibboleth.idp.authn.config.LDAPAuthenticationFactoryBean
-
Returns a new blocking connection pool using the supplied search validator.
- createConnectionPool(String, ConnectionConfig, SearchValidator, Passivator) - Method in class net.shibboleth.idp.authn.config.LDAPAuthenticationFactoryBean
-
Returns a new blocking connection pool using the supplied search validator and passivator type.
- createInstance() - Method in class net.shibboleth.idp.authn.config.LDAPAuthenticationFactoryBean
- createPoolPassivator(LDAPAuthenticationFactoryBean.PassivatorType) - Method in class net.shibboleth.idp.authn.config.LDAPAuthenticationFactoryBean
- createSearchFilter(User) - Method in class net.shibboleth.idp.authn.AbstractTemplateSearchDnResolver
- createSearchValidator(String, String) - Method in class net.shibboleth.idp.authn.config.LDAPAuthenticationFactoryBean
- createSslConfig() - Method in class net.shibboleth.idp.authn.config.LDAPAuthenticationFactoryBean
-
Returns a new SslConfig object derived from the configured
LDAPAuthenticationFactoryBean.trustType. - CREDENTIAL_VALIDATOR - Static variable in class net.shibboleth.idp.authn.AuthnAuditFields
-
Identifies the
CredentialValidatorused. - CredentialValidator - Interface in net.shibboleth.idp.authn
-
High-level API for validating credentials and producing a Java Subject as a result.
- CredentialValidator.ErrorHandler - Interface in net.shibboleth.idp.authn
-
Interface to use to report errors to the caller.
- CredentialValidator.WarningHandler - Interface in net.shibboleth.idp.authn
-
Interface to use to report warnings to the caller.
- ctor - Variable in class net.shibboleth.idp.authn.principal.SimplePrincipalSerializer
-
Constructor.
- customPrincipals - Variable in class net.shibboleth.idp.authn.AbstractCredentialValidator
-
Container that carries additional
Principalobjects.
D
- DEFAULT_METRIC_NAME - Static variable in class net.shibboleth.idp.authn.AbstractUsernamePasswordCredentialValidator
-
Default prefix for metrics.
- DEFAULT_METRIC_NAME - Static variable in class net.shibboleth.idp.authn.AbstractValidationAction
-
Default prefix for metrics.
- defaultPrincipal - Variable in class net.shibboleth.idp.authn.principal.DefaultPrincipalDeterminationStrategy
-
Deprecated.Default Principal to return.
- DefaultPrincipalDeterminationStrategy<T extends Principal> - Class in net.shibboleth.idp.authn.principal
-
Deprecated, for removal: This API element is subject to removal in a future version.
- DefaultPrincipalDeterminationStrategy(Class<T>, T) - Constructor for class net.shibboleth.idp.authn.principal.DefaultPrincipalDeterminationStrategy
-
Deprecated.Constructor.
- deregister(Class<? extends Principal>, String) - Method in class net.shibboleth.idp.authn.principal.PrincipalEvalPredicateFactoryRegistry
-
Deregister a predicate factory for a given operator string.
- DescriptorReusePredicate() - Constructor for class net.shibboleth.idp.authn.AuthenticationResult.DescriptorReusePredicate
- DescriptorRevocationPredicate() - Constructor for class net.shibboleth.idp.authn.AuthenticationResult.DescriptorRevocationPredicate
- deserialize(long, String, String, String, Long) - Method in class net.shibboleth.idp.authn.AuthenticationFlowDescriptor
- deserialize(String) - Method in class net.shibboleth.idp.authn.principal.GenericPrincipalSerializer
-
Deserialize the supplied value.
- deserialize(String) - Method in class net.shibboleth.idp.authn.principal.SimplePrincipalSerializer
-
Deserialize the supplied value.
- deserialize(Type) - Method in interface net.shibboleth.idp.authn.principal.PrincipalSerializer
-
Deserialize the supplied value.
- desymbolize(JsonValue) - Method in class net.shibboleth.idp.authn.principal.GenericPrincipalSerializer
-
Map a field value to a string, either directly or via the symbolic map.
- DIRECT - net.shibboleth.idp.authn.config.LDAPAuthenticationFactoryBean.AuthenticatorType
- DISABLED - net.shibboleth.idp.authn.config.LDAPAuthenticationFactoryBean.TrustType
- disableHostnameVerification - Variable in class net.shibboleth.idp.authn.config.LDAPAuthenticationFactoryBean
-
Whether to use the allow-all hostname verifier.
- disablePooling - Variable in class net.shibboleth.idp.authn.config.LDAPAuthenticationFactoryBean
-
Whether to disable connection pooling for both binds and searches.
- discoveryRequired - Variable in class net.shibboleth.idp.authn.AuthenticationFlowDescriptor
-
Whether this flow should invoke discovery if no authenticating authority populated.
- dnFormat - Variable in class net.shibboleth.idp.authn.config.LDAPAuthenticationFactoryBean
-
Java format string used to construct an LDAP DN.
- doExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.authn.AbstractAuthenticationAction
- doExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.authn.AbstractSubjectCanonicalizationAction
- doExecute(ProfileRequestContext, AuthenticationContext) - Method in class net.shibboleth.idp.authn.AbstractAuthenticationAction
-
Performs this authentication action.
- doExecute(ProfileRequestContext, SubjectCanonicalizationContext) - Method in class net.shibboleth.idp.authn.AbstractSubjectCanonicalizationAction
-
Performs this authentication action.
- doFinish(HttpServletRequest, HttpServletResponse, ProfileRequestContext, ExternalAuthenticationContext) - Method in class net.shibboleth.idp.authn.ExternalAuthentication
-
Complete a request for external authentication by seeking out the information stored in request attributes and transferring to the session's conversation state, and then transfer control back to the authentication web flow.
- doInitialize() - Method in class net.shibboleth.idp.authn.AuthenticationFlowDescriptor
- doInitialize() - Method in class net.shibboleth.idp.authn.duo.BasicDuoIntegration
- doNotCache - Variable in class net.shibboleth.idp.authn.context.ExternalAuthenticationContext
-
Flag preventing caching of result for SSO.
- doNotCache() - Method in class net.shibboleth.idp.authn.context.ExternalAuthenticationContext
-
Get the "do not cache" flag.
- DONOTCACHE_KEY - Static variable in class net.shibboleth.idp.authn.ExternalAuthentication
-
Request attribute to which a signal not to cache the result may be bound.
- doPreExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.authn.AbstractAuthenticationAction
- doPreExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.authn.AbstractSubjectCanonicalizationAction
- doPreExecute(ProfileRequestContext, AuthenticationContext) - Method in class net.shibboleth.idp.authn.AbstractAuthenticationAction
-
Performs this authentication action's pre-execute step.
- doPreExecute(ProfileRequestContext, AuthenticationContext) - Method in class net.shibboleth.idp.authn.AbstractValidationAction
-
Performs this authentication action's pre-execute step.
- doPreExecute(ProfileRequestContext, SubjectCanonicalizationContext) - Method in class net.shibboleth.idp.authn.AbstractSubjectCanonicalizationAction
-
Performs this c14n action's pre-execute step.
- doStart(HttpServletRequest, ProfileRequestContext, ExternalAuthenticationContext) - Method in class net.shibboleth.idp.authn.ExternalAuthentication
-
Initialize a request for external authentication by seeking out the information stored in the servlet session and exposing it as request attributes.
- doValidate(ProfileRequestContext, AuthenticationContext, UsernamePasswordContext, CredentialValidator.WarningHandler, CredentialValidator.ErrorHandler) - Method in class net.shibboleth.idp.authn.AbstractUsernamePasswordCredentialValidator
-
Override method for subclasses to use to perform the actual validation.
- doValidate(ProfileRequestContext, AuthenticationContext, CredentialValidator.WarningHandler, CredentialValidator.ErrorHandler) - Method in class net.shibboleth.idp.authn.AbstractCredentialValidator
-
Override method for subclasses to use to perform the actual validation.
- doValidate(ProfileRequestContext, AuthenticationContext, CredentialValidator.WarningHandler, CredentialValidator.ErrorHandler) - Method in class net.shibboleth.idp.authn.AbstractUsernamePasswordCredentialValidator
-
Override method for subclasses to use to perform the actual validation.
- DUO_AUTH_RESULT_ALLOW - Static variable in class net.shibboleth.idp.authn.duo.DuoAuthAPI
-
Duo AuthAPI auth "allow" result value.
- DUO_AUTH_RESULT_DENY - Static variable in class net.shibboleth.idp.authn.duo.DuoAuthAPI
-
Duo AuthAPI auth "deny" result value.
- DUO_AUTH_STATUS_BYPASS - Static variable in class net.shibboleth.idp.authn.duo.DuoAuthAPI
-
Duo AuthAPI auth "bypass" result value.
- DUO_AUTH_STATUS_LOCKED - Static variable in class net.shibboleth.idp.authn.duo.DuoAuthAPI
-
Duo AuthAPI auth "locked_out" result value.
- DUO_CLIENT_ID - Static variable in class net.shibboleth.idp.authn.AuthnAuditFields
-
Duo client/integration key/ID.
- DUO_DEVICE - Static variable in class net.shibboleth.idp.authn.duo.DuoAuthAPI
-
Duo AuthAPI parameter name.
- DUO_DEVICE_AUTO - Static variable in class net.shibboleth.idp.authn.duo.DuoAuthAPI
-
Duo AuthAPI device "auto" value.
- DUO_DEVICE_HEADER_NAME - Static variable in class net.shibboleth.idp.authn.duo.DuoAuthAPI
-
Duo flow default header name for device ID.
- DUO_DEVICE_ID - Static variable in class net.shibboleth.idp.authn.AuthnAuditFields
-
Duo device ID.
- DUO_FACTOR - Static variable in class net.shibboleth.idp.authn.AuthnAuditFields
-
Duo factor.
- DUO_FACTOR - Static variable in class net.shibboleth.idp.authn.duo.DuoAuthAPI
-
Duo AuthAPI parameter name.
- DUO_FACTOR_AUTO - Static variable in class net.shibboleth.idp.authn.duo.DuoAuthAPI
-
Duo AuthAPI factor "auto" value.
- DUO_FACTOR_HEADER_NAME - Static variable in class net.shibboleth.idp.authn.duo.DuoAuthAPI
-
Duo flow default header name for factor.
- DUO_FACTOR_PASSCODE - Static variable in class net.shibboleth.idp.authn.duo.DuoAuthAPI
-
Duo AuthAPI factor "passcode" value.
- DUO_FACTOR_PHONE - Static variable in class net.shibboleth.idp.authn.duo.DuoAuthAPI
-
Duo AuthAPI factor "enum" value.
- DUO_FACTOR_PUSH - Static variable in class net.shibboleth.idp.authn.duo.DuoAuthAPI
-
Duo AuthAPI factor "push" value.
- DUO_FACTOR_SMS - Static variable in class net.shibboleth.idp.authn.duo.DuoAuthAPI
-
Duo AuthAPI factor "sms" value.
- DUO_IPADDR - Static variable in class net.shibboleth.idp.authn.duo.DuoAuthAPI
-
Duo AuthAPI parameter name.
- DUO_PASSCODE - Static variable in class net.shibboleth.idp.authn.duo.DuoAuthAPI
-
Duo AuthAPI parameter name.
- DUO_PASSCODE_HEADER_NAME - Static variable in class net.shibboleth.idp.authn.duo.DuoAuthAPI
-
Duo flow default header name for passcode.
- DUO_PREAUTH_RESULT_ALLOW - Static variable in class net.shibboleth.idp.authn.duo.DuoAuthAPI
-
Duo AuthAPI preauth "allow" result value.
- DUO_PREAUTH_RESULT_AUTH - Static variable in class net.shibboleth.idp.authn.duo.DuoAuthAPI
-
Duo AuthAPI preauth "auth" result value.
- DUO_PREAUTH_RESULT_DENY - Static variable in class net.shibboleth.idp.authn.duo.DuoAuthAPI
-
Duo AuthAPI preauth "deny" result value.
- DUO_PREAUTH_RESULT_ENROLL - Static variable in class net.shibboleth.idp.authn.duo.DuoAuthAPI
-
Duo AuthAPI preauth "enroll" result value.
- DUO_PUSHINFO - Static variable in class net.shibboleth.idp.authn.duo.DuoAuthAPI
-
Duo AuthAPI parameter name.
- DUO_USERNAME - Static variable in class net.shibboleth.idp.authn.duo.DuoAuthAPI
-
Duo AuthAPI parameter name.
- DuoAuthAPI - Class in net.shibboleth.idp.authn.duo
-
Constants defined in the Duo AuthAPI.
- DuoAuthAPI() - Constructor for class net.shibboleth.idp.authn.duo.DuoAuthAPI
-
Constructor.
- DuoAuthenticationContext - Class in net.shibboleth.idp.authn.duo.context
-
Context that carries Duo factor and device or passcode to be used in validation.
- DuoAuthenticationContext() - Constructor for class net.shibboleth.idp.authn.duo.context.DuoAuthenticationContext
-
Constructor.
- duoDevice - Variable in class net.shibboleth.idp.authn.duo.context.DuoAuthenticationContext
-
Device ID.
- duoFactor - Variable in class net.shibboleth.idp.authn.duo.context.DuoAuthenticationContext
-
Factor.
- DuoIntegration - Interface in net.shibboleth.idp.authn.duo
-
Interface to a particular Duo integration point.
- duoPasscode - Variable in class net.shibboleth.idp.authn.duo.context.DuoAuthenticationContext
-
Passcode.
- DuoPrincipal - Class in net.shibboleth.idp.authn.duo
-
Principal based on a Duo authentication.
- DuoPrincipal(String) - Constructor for class net.shibboleth.idp.authn.duo.DuoPrincipal
-
Constructor.
E
- encode(Object) - Method in class net.shibboleth.idp.authn.AbstractTemplateSearchDnResolver.EscapingReferenceInsertionEventHandler
-
Returns
SearchFilter.encodeValue(byte[])if value is a string or byte array. - equals(Object) - Method in class net.shibboleth.idp.authn.AuthenticationFlowDescriptor
- equals(Object) - Method in class net.shibboleth.idp.authn.AuthenticationResult
- equals(Object) - Method in class net.shibboleth.idp.authn.duo.DuoPrincipal
- equals(Object) - Method in class net.shibboleth.idp.authn.principal.AuthenticationResultPrincipal
- equals(Object) - Method in class net.shibboleth.idp.authn.principal.HOTPPrincipal
- equals(Object) - Method in class net.shibboleth.idp.authn.principal.IdPAttributePrincipal
- equals(Object) - Method in class net.shibboleth.idp.authn.principal.PasswordPrincipal
- equals(Object) - Method in class net.shibboleth.idp.authn.principal.ProxyAuthenticationPrincipal
- equals(Object) - Method in class net.shibboleth.idp.authn.principal.TOTPPrincipal
- equals(Object) - Method in class net.shibboleth.idp.authn.principal.UsernamePrincipal
- equals(Object) - Method in class net.shibboleth.idp.authn.SubjectCanonicalizationFlowDescriptor
- EscapingReferenceInsertionEventHandler() - Constructor for class net.shibboleth.idp.authn.AbstractTemplateSearchDnResolver.EscapingReferenceInsertionEventHandler
- evalRegistry - Variable in class net.shibboleth.idp.authn.context.AuthenticationContext
-
Instance of registry used for auto-creation of
RequestedPrincipalContext. - evalRegistry - Variable in class net.shibboleth.idp.authn.context.RequestedPrincipalContext
-
The registry of predicate factories for custom principal evaluation.
- event - Variable in class net.shibboleth.idp.authn.context.MultiFactorAuthenticationContext
-
A SWF event to signal as the completion of the MFA flow.
- eventHandler - Variable in class net.shibboleth.idp.authn.AbstractTemplateSearchDnResolver
-
Event handler used for escaping.
- exceptions - Variable in class net.shibboleth.idp.authn.context.AuthenticationErrorContext
-
Ordered list of exceptions encountered.
- EXTENDED_FLOW_PARAM - Static variable in class net.shibboleth.idp.authn.ExternalAuthentication
-
Request attribute that indicates whether we're being called as an extension of another login flow.
- externalAuthentication - Variable in class net.shibboleth.idp.authn.context.ExternalAuthenticationContext
-
Implementation object.
- ExternalAuthentication - Class in net.shibboleth.idp.authn
-
Public interface supporting external authentication outside the webflow engine.
- ExternalAuthentication() - Constructor for class net.shibboleth.idp.authn.ExternalAuthentication
- ExternalAuthenticationContext - Class in net.shibboleth.idp.authn.context
-
A context representing the state of an externalized authentication attempt, a case where authentication happens outside of a web flow.
- ExternalAuthenticationContext(ExternalAuthentication) - Constructor for class net.shibboleth.idp.authn.context.ExternalAuthenticationContext
-
Constructor.
- ExternalAuthenticationException - Exception in net.shibboleth.idp.authn
-
Exception indicating a problem with the external authentication process.
- ExternalAuthenticationException() - Constructor for exception net.shibboleth.idp.authn.ExternalAuthenticationException
-
Constructor.
- ExternalAuthenticationException(Exception) - Constructor for exception net.shibboleth.idp.authn.ExternalAuthenticationException
-
Constructor.
- ExternalAuthenticationException(String) - Constructor for exception net.shibboleth.idp.authn.ExternalAuthenticationException
-
Constructor.
- ExternalAuthenticationException(String, Exception) - Constructor for exception net.shibboleth.idp.authn.ExternalAuthenticationException
-
Constructor.
F
- factory - Variable in class net.shibboleth.idp.authn.PooledTemplateSearchDnResolver
-
Connection factory.
- factory - Variable in class net.shibboleth.idp.authn.TemplateSearchDnResolver
-
Connection factory.
- fieldName - Variable in class net.shibboleth.idp.authn.principal.SimplePrincipalSerializer
-
Field name.
- finishExternalAuthentication(String, HttpServletRequest, HttpServletResponse) - Static method in class net.shibboleth.idp.authn.ExternalAuthentication
-
Complete a request for external authentication by seeking out the information stored in request attributes and transferring to the session's conversation state, and then transfer control back to the authentication web flow.
- fixedEventLookupStrategy - Variable in class net.shibboleth.idp.authn.context.AuthenticationContext
-
Lookup strategy for a fixed event to return from validators for testing.
- FLOW_ID_PREFIX - Static variable in class net.shibboleth.idp.authn.AuthenticationFlowDescriptor
-
Prefix convention for flow IDs.
- flowExecutionUrl - Variable in class net.shibboleth.idp.authn.context.ExternalAuthenticationContext
-
Value of flowExecutionUrl on branching from flow.
- FORCE_AUTHN_PARAM - Static variable in class net.shibboleth.idp.authn.ExternalAuthentication
-
Request attribute that indicates whether the authentication request requires forced authentication.
- forceAuthn - Variable in class net.shibboleth.idp.authn.context.AuthenticationContext
-
Whether to require fresh subject interaction to succeed.
- ForceAuthnProfileConfigPredicate - Class in net.shibboleth.idp.authn.config.navigate
-
A predicate that evaluates a
ProfileRequestContextand determines whether forced authentication should be set based on the associatedAuthenticationProfileConfiguration. - ForceAuthnProfileConfigPredicate() - Constructor for class net.shibboleth.idp.authn.config.navigate.ForceAuthnProfileConfigPredicate
- fromLabel(String) - Static method in enum net.shibboleth.idp.authn.config.LDAPAuthenticationFactoryBean.AuthenticatorType
- fromLabel(String) - Static method in enum net.shibboleth.idp.authn.config.LDAPAuthenticationFactoryBean.ConnectionStrategyType
- fromLabel(String) - Static method in enum net.shibboleth.idp.authn.config.LDAPAuthenticationFactoryBean.PassivatorType
- fromLabel(String) - Static method in enum net.shibboleth.idp.authn.config.LDAPAuthenticationFactoryBean.TrustType
G
- generatorFactory - Variable in class net.shibboleth.idp.authn.principal.AbstractPrincipalSerializer
-
JSON generator factory.
- GenericPrincipalSerializer - Class in net.shibboleth.idp.authn.principal
-
Principal serializer for arbitrary principal types.
- GenericPrincipalSerializer() - Constructor for class net.shibboleth.idp.authn.principal.GenericPrincipalSerializer
-
Constructor.
- GenericPrincipalService<T extends Principal> - Class in net.shibboleth.idp.authn.principal
-
PrincipalServicefor most principal types that just exposes the properPrincipalSerializer. - GenericPrincipalService(Class<T>, PrincipalSerializer<String>) - Constructor for class net.shibboleth.idp.authn.principal.GenericPrincipalService
-
Constructor.
- getActiveResults() - Method in class net.shibboleth.idp.authn.context.AuthenticationContext
-
Get previous authentication results currently active for the subject.
- getActiveResults() - Method in class net.shibboleth.idp.authn.context.MultiFactorAuthenticationContext
-
Get a live list of the
AuthenticationResultobjects produced during the flow. - getAdditionalData() - Method in class net.shibboleth.idp.authn.AuthenticationResult
-
Gets a mutable map of additional name/value string properties to associate with and store with the result.
- getAddress() - Method in class net.shibboleth.idp.authn.context.UserAgentContext
-
Get the address of the user-agent host.
- getAPIHost() - Method in class net.shibboleth.idp.authn.duo.BasicDuoIntegration
-
Get the name of the API host to contact.
- getAPIHost() - Method in interface net.shibboleth.idp.authn.duo.DuoIntegration
-
Get the name of the API host to contact.
- getApplicationKey() - Method in class net.shibboleth.idp.authn.duo.BasicDuoIntegration
-
Get the application key.
- getApplicationKey() - Method in interface net.shibboleth.idp.authn.duo.DuoIntegration
-
Get the application key.
- getAttemptedFlow() - Method in class net.shibboleth.idp.authn.context.AuthenticationContext
-
Get the authentication flow that was attempted in order to authenticate the user.
- getAttemptedFlow() - Method in class net.shibboleth.idp.authn.context.SubjectCanonicalizationContext
-
Get the last flow that was attempted for subject c14n.
- getAttribute() - Method in class net.shibboleth.idp.authn.principal.IdPAttributePrincipal
-
Get the
IdPAttribute. - getAudiences() - Method in class net.shibboleth.idp.authn.principal.ProxyAuthenticationPrincipal
-
Get the mutable audience set, the set of relying parties for which proxying is permissable.
- getAuthenticatingAuthorities() - Method in class net.shibboleth.idp.authn.context.ExternalAuthenticationContext
-
Get a mutable, ordered list of proxied authentication sources.
- getAuthenticatingAuthority() - Method in class net.shibboleth.idp.authn.context.AuthenticationContext
-
Gets the identifier or location, depending on protocol, of an authentication system to use as a proxied source of authentication.
- getAuthenticationFlowDescriptor() - Method in class net.shibboleth.idp.authn.context.MultiFactorAuthenticationContext
-
Get the
AuthenticationFlowDescriptorrepresenting the MFA flow. - getAuthenticationFlowId() - Method in class net.shibboleth.idp.authn.AuthenticationResult
-
Get the flow used to authenticate the principal.
- getAuthenticationFlows(ProfileRequestContext) - Method in interface net.shibboleth.idp.authn.config.AuthenticationProfileConfiguration
-
Get the allowable authentication flows for this profile.
- getAuthenticationInstant() - Method in class net.shibboleth.idp.authn.AuthenticationResult
-
Get the time that the authentication completed.
- getAuthenticationResponse() - Method in class net.shibboleth.idp.authn.context.LDAPResponseContext
-
Get the LDAP authentication response.
- getAuthenticationResult() - Method in class net.shibboleth.idp.authn.context.AuthenticationContext
-
Get the authentication result produced by the attempted flow, or reused for SSO.
- getAuthenticationResult() - Method in class net.shibboleth.idp.authn.principal.AuthenticationResultPrincipal
-
Get the
AuthenticationResult. - getAuthenticationResults() - Method in class net.shibboleth.idp.authn.context.SubjectContext
-
Get a mutable map of authentication flow IDs to authentication results.
- getAuthenticationStateMap() - Method in class net.shibboleth.idp.authn.context.AuthenticationContext
-
Get the map of intermediate state that flows can use to pass information amongst themselves.
- getAuthnError() - Method in class net.shibboleth.idp.authn.context.ExternalAuthenticationContext
-
Get an error message from the authentication process.
- getAuthnException() - Method in class net.shibboleth.idp.authn.context.ExternalAuthenticationContext
-
Get an exception from the authentication process.
- getAuthnInstant() - Method in class net.shibboleth.idp.authn.context.ExternalAuthenticationContext
-
Get the time of authentication.
- getAuthorities() - Method in class net.shibboleth.idp.authn.principal.ProxyAuthenticationPrincipal
-
Get the mutable authority collection.
- getAvailableFlows() - Method in class net.shibboleth.idp.authn.context.AuthenticationContext
-
Get the set of flows known to the system overall.
- getCertificate() - Method in class net.shibboleth.idp.authn.context.CertificateContext
-
Get the certificate to be validated.
- getClassifiedErrors() - Method in class net.shibboleth.idp.authn.AbstractValidationAction
-
Get the error messages mapped to specific events.
- getClassifiedErrors() - Method in class net.shibboleth.idp.authn.context.AuthenticationErrorContext
-
Get a mutable collection of error "tokens" associated with the context.
- getClassifiedWarnings() - Method in class net.shibboleth.idp.authn.context.AuthenticationWarningContext
-
Get a mutable collection of warning "tokens" associated with the context.
- getCleanupHook() - Method in class net.shibboleth.idp.authn.AbstractValidationAction
-
Get the cleanup hook to execute after successful validation.
- getClientAddress() - Method in class net.shibboleth.idp.authn.duo.context.DuoAuthenticationContext
-
Get the client address.
- getCompletionInstant() - Method in class net.shibboleth.idp.authn.context.AuthenticationContext
-
Get the time when the authentication process ended.
- getConnection() - Method in class net.shibboleth.idp.authn.PooledTemplateSearchDnResolver
- getConnection() - Method in class net.shibboleth.idp.authn.TemplateSearchDnResolver
- getConnectionFactory() - Method in class net.shibboleth.idp.authn.PooledTemplateSearchDnResolver
- getConnectionFactory() - Method in class net.shibboleth.idp.authn.TemplateSearchDnResolver
- getDefaultAuthenticationMethods(ProfileRequestContext) - Method in interface net.shibboleth.idp.authn.config.AuthenticationProfileConfiguration
-
Get the default authentication methods to use, expressed as custom principals.
- getDeviceID() - Method in class net.shibboleth.idp.authn.duo.context.DuoAuthenticationContext
-
Get the device ID.
- getEvent() - Method in class net.shibboleth.idp.authn.context.MultiFactorAuthenticationContext
-
Get an event that should be signaled as the result of the MFA flow.
- getException() - Method in class net.shibboleth.idp.authn.context.SubjectCanonicalizationContext
-
Get the exception raised by a failed canonicalization.
- getExceptions() - Method in class net.shibboleth.idp.authn.context.AuthenticationErrorContext
-
Get an immutable list of the exceptions encountered.
- getExternalAuthentication() - Method in class net.shibboleth.idp.authn.context.ExternalAuthenticationContext
-
Get the
ExternalAuthenticationobject installed in the context. - getExternalAuthenticationContext(ProfileRequestContext) - Static method in class net.shibboleth.idp.authn.ExternalAuthentication
-
Utility method to access the
ExternalAuthenticationContext. - getExternalRedirect(String, String) - Static method in class net.shibboleth.idp.authn.ExternalAuthentication
-
Computes the appropriate location to pass control to to invoke an external authentication mechanism.
- getFactor() - Method in class net.shibboleth.idp.authn.duo.context.DuoAuthenticationContext
-
Get the factor to use.
- getFixedEventLookupStrategy() - Method in class net.shibboleth.idp.authn.context.AuthenticationContext
-
Get optional lookup strategy to return a fixed event to return from credential validation to exercise error and warning logic.
- getFlowExecutionUrl() - Method in class net.shibboleth.idp.authn.context.ExternalAuthenticationContext
-
Get the flow execution URL to return control to.
- getHighestWeighted(Collection<T>) - Method in class net.shibboleth.idp.authn.AuthenticationFlowDescriptor
-
Apply the current weighted map to find the highest-weighted object amongst the inputs.
- getHintedName() - Method in class net.shibboleth.idp.authn.context.AuthenticationContext
-
Get a non-normative hint provided by the request about the user's identity.
- getIdentifier() - Method in class net.shibboleth.idp.authn.context.UserAgentContext
-
Get the user agent identifier.
- getImpersonatingPrincipalName() - Method in class net.shibboleth.idp.authn.context.SubjectContext
-
Get the canonical principal name of an identity that is impersonating the subject.
- getInactivityTimeout() - Method in class net.shibboleth.idp.authn.AuthenticationFlowDescriptor
-
Get the maximum amount of time, since the last usage, a flow should be considered active.
- getInitiationInstant() - Method in class net.shibboleth.idp.authn.context.AuthenticationContext
-
Get the time when the authentication process started.
- getIntegrationKey() - Method in class net.shibboleth.idp.authn.duo.BasicDuoIntegration
-
Get the integration key.
- getIntegrationKey() - Method in interface net.shibboleth.idp.authn.duo.DuoIntegration
-
Get the integration key.
- getIntermediateFlows() - Method in class net.shibboleth.idp.authn.context.AuthenticationContext
-
Get the set of flows that have been executed, successfully or otherwise, without producing a completed result.
- getIntermediateFlows() - Method in class net.shibboleth.idp.authn.context.SubjectCanonicalizationContext
-
Get the set of flows that have been executed, successfully or otherwise, without producing a completed result.
- getIntermediates() - Method in class net.shibboleth.idp.authn.context.CertificateContext
-
Get any additional certificates accompanying the end-entity certificate.
- getJsonGenerator(Writer) - Method in class net.shibboleth.idp.authn.principal.AbstractPrincipalSerializer
-
Get a
JsonGenerator, synchronized for thread-safety. - getJsonReader(Reader) - Method in class net.shibboleth.idp.authn.principal.AbstractPrincipalSerializer
-
Get a
JsonReader, synchronized for thread-safety. - getKey() - Method in class net.shibboleth.idp.authn.context.LockoutManagerContext
-
Get the account lockout key to check or modify.
- getLastActivityInstant() - Method in class net.shibboleth.idp.authn.AuthenticationResult
-
Get the last time this result was used for authentication.
- getLifetime() - Method in class net.shibboleth.idp.authn.AuthenticationFlowDescriptor
-
Get the maximum amount of time, since first usage, a flow should be considered active.
- getLogPrefix() - Method in class net.shibboleth.idp.authn.AbstractCredentialValidator
-
Return a prefix for logging messages for this component.
- getMatchingPrincipal() - Method in class net.shibboleth.idp.authn.context.RequestedPrincipalContext
-
Get the principal that matched the request's requirements, if any.
- getMatchingPrincipal() - Method in interface net.shibboleth.idp.authn.principal.PrincipalEvalPredicate
-
Get the
Principalobject from the evaluatedPrincipalSupportingComponentthat actually satisfied the predicate, if any. - getMaxAge() - Method in class net.shibboleth.idp.authn.context.AuthenticationContext
-
Get duration since an
AuthenticationResultwas created that allows it to be reused for this request. - getMetricName() - Method in class net.shibboleth.idp.authn.AbstractValidationAction
-
Get the base name to use for metrics reported.
- getName() - Method in class net.shibboleth.idp.authn.duo.DuoPrincipal
- getName() - Method in class net.shibboleth.idp.authn.principal.AuthenticationResultPrincipal
- getName() - Method in class net.shibboleth.idp.authn.principal.HOTPPrincipal
- getName() - Method in class net.shibboleth.idp.authn.principal.IdPAttributePrincipal
- getName() - Method in class net.shibboleth.idp.authn.principal.PasswordPrincipal
- getName() - Method in class net.shibboleth.idp.authn.principal.ProxyAuthenticationPrincipal
- getName() - Method in class net.shibboleth.idp.authn.principal.TOTPPrincipal
- getName() - Method in class net.shibboleth.idp.authn.principal.UsernamePrincipal
- getName(String) - Method in class net.shibboleth.idp.authn.principal.SealedPrincipalSerializer
-
Return the appropriate value to create the
Principalaround based on the serialized form. - getName(String) - Method in class net.shibboleth.idp.authn.principal.SimplePrincipalSerializer
-
Return the appropriate value to create the
Principalaround based on the serialized form. - getName(Principal) - Method in class net.shibboleth.idp.authn.principal.SealedPrincipalSerializer
-
Return the appropriate value to serialize from the input object.
- getName(Principal) - Method in class net.shibboleth.idp.authn.principal.SimplePrincipalSerializer
-
Return the appropriate value to serialize from the input object.
- getNextFlowId() - Method in class net.shibboleth.idp.authn.context.MultiFactorAuthenticationContext
-
Get the next flow due to execute (or that is currently executing).
- getNextFlowStrategy(String) - Method in class net.shibboleth.idp.authn.MultiFactorAuthenticationTransition
-
Get the function to run to determine the next subflow to run.
- getNextFlowStrategyMap() - Method in class net.shibboleth.idp.authn.MultiFactorAuthenticationTransition
-
Get the map of transition rules to follow.
- getObjectType() - Method in class net.shibboleth.idp.authn.config.LDAPAuthenticationFactoryBean
- getOperator() - Method in class net.shibboleth.idp.authn.context.RequestedPrincipalContext
-
Get the comparison operator for matching requested principals.
- getOrder() - Method in class net.shibboleth.idp.authn.AuthenticationFlowDescriptor
- getPasscode() - Method in class net.shibboleth.idp.authn.duo.context.DuoAuthenticationContext
-
Get the passcode.
- getPassword() - Method in class net.shibboleth.idp.authn.context.UsernamePasswordContext
-
Gets the password associated with the username.
- getPostAuthenticationFlows(ProfileRequestContext) - Method in interface net.shibboleth.idp.authn.config.AuthenticationProfileConfiguration
-
Get an ordered list of post-authentication interceptor flows to run for this profile.
- getPotentialFlows() - Method in class net.shibboleth.idp.authn.context.AuthenticationContext
-
Get the set of flows that could potentially be used for authentication.
- getPotentialFlows() - Method in class net.shibboleth.idp.authn.context.SubjectCanonicalizationContext
-
Get the set of flows that could potentially be used for subject canonicalization.
- getPredicate(Principal) - Method in class net.shibboleth.idp.authn.context.RequestedPrincipalContext
-
Get a predicate to apply based on a principal type and the content of this context.
- getPredicate(Principal) - Method in interface net.shibboleth.idp.authn.principal.PrincipalEvalPredicateFactory
-
Get a predicate to compare a candidate
Principalobject against aPrincipalSupportingComponentfor a "match", where the definition of a match is implementation-specific. - getPredicateFactory() - Method in class net.shibboleth.idp.authn.principal.PrincipalEvalPredicateFactoryRegistration
-
Gets the factory for this registration.
- getPreferredPrincipals() - Method in class net.shibboleth.idp.authn.context.PreferredPrincipalContext
-
Get an immutable list of principals reflecting the request preferences.
- getPrincipal() - Method in class net.shibboleth.idp.authn.context.ExternalAuthenticationContext
-
Get a
Principalthat was authenticated. - getPrincipalEvalPredicateFactoryRegistry() - Method in class net.shibboleth.idp.authn.context.AuthenticationContext
-
Get the registry of predicate factories for custom principal evaluation.
- getPrincipalEvalPredicateFactoryRegistry() - Method in class net.shibboleth.idp.authn.context.RequestedPrincipalContext
-
Get the registry of predicate factories for custom principal evaluation.
- getPrincipalName() - Method in class net.shibboleth.idp.authn.context.ExternalAuthenticationContext
-
Get the name of a principal that was authenticated.
- getPrincipalName() - Method in class net.shibboleth.idp.authn.context.SubjectCanonicalizationContext
-
Get the canonical principal name of the subject.
- getPrincipalName() - Method in class net.shibboleth.idp.authn.context.SubjectContext
-
Get the canonical principal name of the subject.
- getProfileRequestContext(String, HttpServletRequest) - Static method in class net.shibboleth.idp.authn.ExternalAuthentication
-
Get the
ProfileRequestContextassociated with a request. - getProxiableAuthorities() - Method in class net.shibboleth.idp.authn.context.AuthenticationContext
-
Get a live set of the authorities to which proxying is suggested.
- getProxyCount() - Method in class net.shibboleth.idp.authn.context.AuthenticationContext
-
Get the allowable number of hops upstream to permit for proxied authentication.
- getProxyCount() - Method in class net.shibboleth.idp.authn.principal.ProxyAuthenticationPrincipal
-
Gets the number of additional proxy hops that should be permitted.
- getProxyCount(ProfileRequestContext) - Method in interface net.shibboleth.idp.authn.config.AuthenticationProfileConfiguration
-
Gets the maximum number of times an assertion may be proxied outbound and/or the maximum number of hops between the relying party and a proxied authentication authority inbound.
- getPushInfo() - Method in class net.shibboleth.idp.authn.duo.context.DuoAuthenticationContext
-
Get the pushinfo.
- getRequestedPrincipals() - Method in class net.shibboleth.idp.authn.context.RequestedPrincipalContext
-
Get an immutable list of principals reflecting the request requirements.
- getRequesterId() - Method in class net.shibboleth.idp.authn.context.SubjectCanonicalizationContext
-
Get the requester's ID.
- getRequesterLookupStrategy() - Method in class net.shibboleth.idp.authn.AbstractValidationAction
-
Get the strategy used to locate the requester ID for canonicalization.
- getRequiredName() - Method in class net.shibboleth.idp.authn.context.AuthenticationContext
-
Get a normative hint provided by the request about the user's identity.
- getResponderId() - Method in class net.shibboleth.idp.authn.context.SubjectCanonicalizationContext
-
Get the responder's ID.
- getResponderLookupStrategy() - Method in class net.shibboleth.idp.authn.AbstractValidationAction
-
Get the strategy used to locate the responder ID for canonicalization.
- getResultCachingPredicate() - Method in class net.shibboleth.idp.authn.AbstractValidationAction
-
Get predicate to apply to determine cacheability of
AuthenticationResult. - getReuseCondition() - Method in class net.shibboleth.idp.authn.AuthenticationFlowDescriptor
-
Get condition controlling whether results from this flow should be reused for SSO.
- getReuseCondition() - Method in class net.shibboleth.idp.authn.AuthenticationResult
-
Gets condition controlling whether this result should be reused for SSO.
- getRevocationCondition() - Method in class net.shibboleth.idp.authn.AuthenticationFlowDescriptor
-
Get condition controlling whether a result from this flow should be considered revoked.
- getSecretKey() - Method in class net.shibboleth.idp.authn.duo.BasicDuoIntegration
-
Get the secret key.
- getSecretKey() - Method in interface net.shibboleth.idp.authn.duo.DuoIntegration
-
Get the secret key.
- getSerializer() - Method in class net.shibboleth.idp.authn.principal.GenericPrincipalService
-
Get a serializer instance for this type of
Principal. - getSerializer() - Method in interface net.shibboleth.idp.authn.principal.PrincipalService
-
Get a serializer instance for this type of
Principal. - getSignaledFlowId() - Method in class net.shibboleth.idp.authn.context.AuthenticationContext
-
Get the flow ID signaled as the next selection.
- getSubject() - Method in class net.shibboleth.idp.authn.AbstractValidationAction
-
Get the subject to be produced by successful execution of this action.
- getSubject() - Method in class net.shibboleth.idp.authn.AuthenticationResult
-
Gets the Subject identifying the authenticated entity.
- getSubject() - Method in class net.shibboleth.idp.authn.context.ExternalAuthenticationContext
-
Get a
Subjectthat was authenticated. - getSubject() - Method in class net.shibboleth.idp.authn.context.SubjectCanonicalizationContext
-
Get the
Subjectto canonicalize. - getSubjectDecorator() - Method in class net.shibboleth.idp.authn.AuthenticationFlowDescriptor
-
Gets a subject decorating component called prior to completing authentication and passing control to subject canonicalization.
- getSubjectName() - Method in class net.shibboleth.idp.authn.AuthenticationResult
-
Get a suitable principal name for logging/debugging use.
- getSubjects() - Method in class net.shibboleth.idp.authn.context.SubjectContext
-
Get an immutable list of Subjects extracted from every AuthenticationResult associated with the context.
- getSupportedPrincipals() - Method in class net.shibboleth.idp.authn.AuthenticationFlowDescriptor
-
Get a collection of supported non-user-specific principals that the flow may produce when it operates.
- getSupportedPrincipals(Class<T>) - Method in class net.shibboleth.idp.authn.AbstractCredentialValidator
-
Get an immutable set of supported custom principals that the component produces, supports, contains, etc.
- getSupportedPrincipals(Class<T>) - Method in class net.shibboleth.idp.authn.AbstractValidationAction
-
Get an immutable set of supported custom principals that the component produces, supports, contains, etc.
- getSupportedPrincipals(Class<T>) - Method in class net.shibboleth.idp.authn.AuthenticationFlowDescriptor
-
Get an immutable set of supported custom principals that the component produces, supports, contains, etc.
- getSupportedPrincipals(Class<T>) - Method in class net.shibboleth.idp.authn.AuthenticationResult
-
Get an immutable set of supported custom principals that the component produces, supports, contains, etc.
- getSupportedPrincipals(Class<T>) - Method in class net.shibboleth.idp.authn.duo.BasicDuoIntegration
-
Get an immutable set of supported custom principals that the component produces, supports, contains, etc.
- getSupportedPrincipals(Class<T>) - Method in interface net.shibboleth.idp.authn.principal.PrincipalSupportingComponent
-
Get an immutable set of supported custom principals that the component produces, supports, contains, etc.
- getTemplate() - Method in class net.shibboleth.idp.authn.AbstractTemplateSearchDnResolver
-
Returns the template.
- getTicket() - Method in class net.shibboleth.idp.authn.context.KerberosTicketContext
-
Get the Kerberos ticket to be validated.
- getTransformedUsername() - Method in class net.shibboleth.idp.authn.context.UsernamePasswordContext
-
Gets the transformed username after undergoing some kind of reformatting or normalization.
- getTransitionMap() - Method in class net.shibboleth.idp.authn.context.MultiFactorAuthenticationContext
-
Get a live map of the transitions to apply.
- getType() - Method in class net.shibboleth.idp.authn.principal.GenericPrincipalService
-
Get the type of object supported.
- getType() - Method in interface net.shibboleth.idp.authn.principal.PrincipalService
-
Get the type of object supported.
- getTypeAndOperator() - Method in class net.shibboleth.idp.authn.principal.PrincipalEvalPredicateFactoryRegistration
-
Gets the type and operator pair for this registration.
- getUserAgent() - Method in class net.shibboleth.idp.authn.context.UserAgentContext
-
Deprecated, for removal: This API element is subject to removal in a future version.
- getUsername() - Method in class net.shibboleth.idp.authn.context.UsernameContext
-
Gets the username.
- getUsername() - Method in class net.shibboleth.idp.authn.context.UsernamePasswordContext
-
Gets the username.
- getUsername() - Method in class net.shibboleth.idp.authn.duo.context.DuoAuthenticationContext
-
Get the username.
H
- handleError(ProfileRequestContext, AuthenticationContext, Exception, String) - Method in class net.shibboleth.idp.authn.AbstractValidationAction
-
Adds an exception encountered during the action to an
AuthenticationErrorContext, creating one if necessary, beneath theAuthenticationContext. - handleError(ProfileRequestContext, AuthenticationContext, Exception, String) - Method in interface net.shibboleth.idp.authn.CredentialValidator.ErrorHandler
-
Reports an error state to the caller.
- handleError(ProfileRequestContext, AuthenticationContext, String, String) - Method in class net.shibboleth.idp.authn.AbstractValidationAction
-
Evaluates a message as a potential match as a "classified" error and if matched, the classification label is attached to an
AuthenticationErrorContextand used as the resulting event for the action. - handleError(ProfileRequestContext, AuthenticationContext, String, String) - Method in interface net.shibboleth.idp.authn.CredentialValidator.ErrorHandler
-
Reports an error state to the caller.
- handleWarning(ProfileRequestContext, AuthenticationContext, String, String) - Method in class net.shibboleth.idp.authn.AbstractValidationAction
-
Evaluates a message as a potential match as a "classified" warning and if matched, the classification label is attached to an
AuthenticationWarningContextand used as the resulting event for the action. - handleWarning(ProfileRequestContext, AuthenticationContext, String, String) - Method in interface net.shibboleth.idp.authn.CredentialValidator.WarningHandler
-
Reports a warning state to the caller.
- hasAccountStateError() - Method in class net.shibboleth.idp.authn.context.LDAPResponseContext
-
Check for the presence of account state errors.
- hasAccountStateWarning() - Method in class net.shibboleth.idp.authn.context.LDAPResponseContext
-
Check for the presence of account state warnings.
- hashCode() - Method in class net.shibboleth.idp.authn.AuthenticationFlowDescriptor
- hashCode() - Method in class net.shibboleth.idp.authn.AuthenticationResult
- hashCode() - Method in class net.shibboleth.idp.authn.duo.DuoPrincipal
- hashCode() - Method in class net.shibboleth.idp.authn.principal.AuthenticationResultPrincipal
- hashCode() - Method in class net.shibboleth.idp.authn.principal.HOTPPrincipal
- hashCode() - Method in class net.shibboleth.idp.authn.principal.IdPAttributePrincipal
- hashCode() - Method in class net.shibboleth.idp.authn.principal.PasswordPrincipal
- hashCode() - Method in class net.shibboleth.idp.authn.principal.ProxyAuthenticationPrincipal
- hashCode() - Method in class net.shibboleth.idp.authn.principal.TOTPPrincipal
- hashCode() - Method in class net.shibboleth.idp.authn.principal.UsernamePrincipal
- hashCode() - Method in class net.shibboleth.idp.authn.SubjectCanonicalizationFlowDescriptor
- hintedName - Variable in class net.shibboleth.idp.authn.context.AuthenticationContext
-
A non-normative hint some protocols support to indicate who the subject might be.
- HOTPPrincipal - Class in net.shibboleth.idp.authn.principal
-
Principal based on an HOTP authentication.
- HOTPPrincipal(String) - Constructor for class net.shibboleth.idp.authn.principal.HOTPPrincipal
-
Constructor.
I
- identifier - Variable in class net.shibboleth.idp.authn.context.UserAgentContext
-
An identification string (such as a User-Agent header).
- IDENTITY_SWITCH - Static variable in class net.shibboleth.idp.authn.AuthnEventIds
-
ID of event returned if an authenticated subject doesn't match the identity in an existing session.
- idIndexedMap - Variable in class net.shibboleth.idp.authn.principal.PrincipalServiceManager
-
Service index by ID.
- idleTime - Variable in class net.shibboleth.idp.authn.config.LDAPAuthenticationFactoryBean
-
Time at which a connection has been idle and should be removed from the pool.
- IdPAttributePrincipal - Class in net.shibboleth.idp.authn.principal
-
Principal that wraps an
IdPAttribute. - IdPAttributePrincipal(IdPAttribute) - Constructor for class net.shibboleth.idp.authn.principal.IdPAttributePrincipal
-
Constructor.
- impersonatingPrincipalName - Variable in class net.shibboleth.idp.authn.context.SubjectContext
-
Canonical principal name of an impersonating identity.
- inactivityTimeout - Variable in class net.shibboleth.idp.authn.AuthenticationFlowDescriptor
-
Maximum amount of time since last usage that a flow should be considered active.
- increment(ProfileRequestContext) - Method in interface net.shibboleth.idp.authn.AccountLockoutManager
-
Increment the lockout counter for the authentication credentials associated with the request.
- initiationInstant - Variable in class net.shibboleth.idp.authn.context.AuthenticationContext
-
Time when the authentication process started.
- integrationKey - Variable in class net.shibboleth.idp.authn.duo.BasicDuoIntegration
-
Integration key.
- intermediateFlows - Variable in class net.shibboleth.idp.authn.context.AuthenticationContext
-
Previously attempted flows (could be failures or intermediate results).
- intermediateFlows - Variable in class net.shibboleth.idp.authn.context.SubjectCanonicalizationContext
-
Previously attempted flows (could be failures or intermediate results).
- intermediates - Variable in class net.shibboleth.idp.authn.context.CertificateContext
-
Additional certificates as input to validation.
- INVALID_AUTHN_CTX - Static variable in class net.shibboleth.idp.authn.AuthnEventIds
-
ID of event returned if the
AuthenticationContextis missing or invalid. - INVALID_CREDENTIALS - Static variable in class net.shibboleth.idp.authn.AuthnEventIds
-
ID of event returned if the given credentials are invalid.
- INVALID_SUBJECT - Static variable in class net.shibboleth.idp.authn.AuthnEventIds
-
ID of event returned if a Subject cannot be canonicalized.
- INVALID_SUBJECT_C14N_CTX - Static variable in class net.shibboleth.idp.authn.AuthnEventIds
-
ID of event returned if the
SubjectCanonicalizationContextis missing or invalid. - isAcceptable() - Method in class net.shibboleth.idp.authn.context.MultiFactorAuthenticationContext
-
Get whether one or more of the active results in this context satisfies the request.
- isAcceptable(Collection<Principal>) - Method in class net.shibboleth.idp.authn.context.AuthenticationContext
-
Helper method that evaluates
Principalobjects against aRequestedPrincipalContextchild of this context, if present, to determine if the input is compatible with them. - isAcceptable(Collection<Principal>) - Method in class net.shibboleth.idp.authn.context.PreferredPrincipalContext
-
Helper method that evaluates
Principalobjects against this context to determine if the input is compatible with it. - isAcceptable(Collection<Principal>) - Method in class net.shibboleth.idp.authn.context.RequestedPrincipalContext
-
Helper method that evaluates
Principalobjects against this context to determine if the input is compatible with it. - isAcceptable(RequestedPrincipalContext, Subject, String) - Method in class net.shibboleth.idp.authn.AbstractCredentialValidator
-
Checks a particular request and principal collection for suitability.
- isAcceptable(PrincipalSupportingComponent) - Method in class net.shibboleth.idp.authn.context.AuthenticationContext
-
Helper method that evaluates a
PrincipalSupportingComponentagainst aRequestedPrincipalContextchild of this context, if present, to determine if the input is compatible with it. - isAcceptable(PrincipalSupportingComponent) - Method in class net.shibboleth.idp.authn.context.PreferredPrincipalContext
-
Helper method that evaluates a
PrincipalSupportingComponentagainst this context to determine if the input is compatible with it. - isAcceptable(PrincipalSupportingComponent) - Method in class net.shibboleth.idp.authn.context.RequestedPrincipalContext
-
Helper method that evaluates a
PrincipalSupportingComponentagainst this context to determine if the input is compatible with it. - isAcceptable(T) - Method in class net.shibboleth.idp.authn.context.AuthenticationContext
-
Helper method that evaluates a
Principalobject against aRequestedPrincipalContextchild of this context, if present, to determine if the input is compatible with it. - isAcceptable(T) - Method in class net.shibboleth.idp.authn.context.PreferredPrincipalContext
-
Helper method that evaluates a
Principalobject against this context to determine if the input is compatible with it. - isAcceptable(T) - Method in class net.shibboleth.idp.authn.context.RequestedPrincipalContext
-
Helper method that evaluates a
Principalobject against this context to determine if the input is compatible with it. - isActiveDirectory - Variable in class net.shibboleth.idp.authn.config.LDAPAuthenticationFactoryBean
-
Whether to use account state data as defined by active directory diagnostic messages.
- isClassifiedError(String) - Method in class net.shibboleth.idp.authn.context.AuthenticationErrorContext
-
Check for the presence of a particular error condition in the context.
- isClassifiedWarning(String) - Method in class net.shibboleth.idp.authn.context.AuthenticationWarningContext
-
Check for the presence of a particular warning condition in the context.
- isDiscoveryRequired() - Method in class net.shibboleth.idp.authn.AuthenticationFlowDescriptor
-
Gets whether to invoke discovery subflow if
AuthenticationContext.getAuthenticatingAuthority()is null. - isEDirectory - Variable in class net.shibboleth.idp.authn.config.LDAPAuthenticationFactoryBean
-
Whether to use account state data as defined by the EDirectory schema.
- isForceAuthn() - Method in class net.shibboleth.idp.authn.context.AuthenticationContext
-
Get whether to require fresh subject interaction to succeed.
- isForceAuthn(ProfileRequestContext) - Method in interface net.shibboleth.idp.authn.config.AuthenticationProfileConfiguration
-
Get whether the authentication process should include a proof of user presence.
- isForcedAuthenticationSupported() - Method in class net.shibboleth.idp.authn.AuthenticationFlowDescriptor
-
Get whether this flow supports forced authentication.
- isFreeIPA - Variable in class net.shibboleth.idp.authn.config.LDAPAuthenticationFactoryBean
-
Whether to use account state data as defined by the FreeIPA directory schema.
- isInstance(Browser) - Method in class net.shibboleth.idp.authn.context.UserAgentContext
-
Deprecated, for removal: This API element is subject to removal in a future version.
- isInstance(OperatingSystem) - Method in class net.shibboleth.idp.authn.context.UserAgentContext
-
Deprecated, for removal: This API element is subject to removal in a future version.
- isLocal() - Method in interface net.shibboleth.idp.authn.config.AuthenticationProfileConfiguration
-
Get whether this profile is for functionality local to the IdP.
- isNonBrowserSupported() - Method in class net.shibboleth.idp.authn.AuthenticationFlowDescriptor
-
Get whether this flow supports non-browser clients.
- isPassive - Variable in class net.shibboleth.idp.authn.context.AuthenticationContext
-
Whether authentication must not involve subject interaction.
- isPassive() - Method in class net.shibboleth.idp.authn.context.AuthenticationContext
-
Get whether subject interaction is allowed.
- isPassiveAuthenticationSupported() - Method in class net.shibboleth.idp.authn.AuthenticationFlowDescriptor
-
Get whether this flow supports passive authentication.
- isPreviousResult() - Method in class net.shibboleth.idp.authn.AuthenticationResult
-
Get whether this result was loaded from a session as the product of a previous request.
- isPreviousResult() - Method in class net.shibboleth.idp.authn.context.ExternalAuthenticationContext
-
Get whether this result is the product of an external SSO event and not a new act of authentication.
- isProxyRestrictionsEnforced() - Method in class net.shibboleth.idp.authn.AuthenticationFlowDescriptor
-
Gets whether this flow's results should honor restrictions on proxying toward RPs.
- isProxyScopingEnforced() - Method in class net.shibboleth.idp.authn.AuthenticationFlowDescriptor
-
Gets whether this flow's results should honor restrictions on proxying toward IdPs.
- isResultActive(AuthenticationResult) - Method in class net.shibboleth.idp.authn.AuthenticationFlowDescriptor
-
Check if a result generated by this flow is still active.
- isResultCacheable() - Method in class net.shibboleth.idp.authn.context.AuthenticationContext
-
Get whether the result is suitable for caching (such as in a session) for reuse.
J
- JSON_PATTERN - Static variable in class net.shibboleth.idp.authn.principal.GenericPrincipalSerializer
-
Pattern used to determine if input is supported.
- jsonPattern - Variable in class net.shibboleth.idp.authn.principal.SimplePrincipalSerializer
-
Pattern used to determine if input is supported.
- JVM - net.shibboleth.idp.authn.config.LDAPAuthenticationFactoryBean.TrustType
K
- KerberosTicketContext - Class in net.shibboleth.idp.authn.context
-
Context that carries a
KerberosTicketto be validated. - KerberosTicketContext() - Constructor for class net.shibboleth.idp.authn.context.KerberosTicketContext
- key - Variable in class net.shibboleth.idp.authn.context.LockoutManagerContext
-
Account lockout key.
- KEYSTORE - net.shibboleth.idp.authn.config.LDAPAuthenticationFactoryBean.TrustType
L
- label - Variable in enum net.shibboleth.idp.authn.config.LDAPAuthenticationFactoryBean.AuthenticatorType
-
Label for this type.
- label - Variable in enum net.shibboleth.idp.authn.config.LDAPAuthenticationFactoryBean.ConnectionStrategyType
-
Label for this type.
- label - Variable in enum net.shibboleth.idp.authn.config.LDAPAuthenticationFactoryBean.PassivatorType
-
Label for this type.
- label - Variable in enum net.shibboleth.idp.authn.config.LDAPAuthenticationFactoryBean.TrustType
-
Label for this type.
- label() - Method in enum net.shibboleth.idp.authn.config.LDAPAuthenticationFactoryBean.AuthenticatorType
- label() - Method in enum net.shibboleth.idp.authn.config.LDAPAuthenticationFactoryBean.ConnectionStrategyType
- label() - Method in enum net.shibboleth.idp.authn.config.LDAPAuthenticationFactoryBean.PassivatorType
- label() - Method in enum net.shibboleth.idp.authn.config.LDAPAuthenticationFactoryBean.TrustType
- lastActivityInstant - Variable in class net.shibboleth.idp.authn.AuthenticationResult
-
The last time this result was used to bypass authentication.
- LDAPAuthenticationFactoryBean - Class in net.shibboleth.idp.authn.config
-
LDAP Authentication configuration.
- LDAPAuthenticationFactoryBean() - Constructor for class net.shibboleth.idp.authn.config.LDAPAuthenticationFactoryBean
- LDAPAuthenticationFactoryBean.AuthenticatorType - Enum in net.shibboleth.idp.authn.config
-
Enum that defines authenticator configuration.
- LDAPAuthenticationFactoryBean.ConnectionStrategyType - Enum in net.shibboleth.idp.authn.config
-
Enum that defines LDAP connection strategy.
- LDAPAuthenticationFactoryBean.PassivatorType - Enum in net.shibboleth.idp.authn.config
-
Enum that defines an LDAP pool passivator.
- LDAPAuthenticationFactoryBean.TrustType - Enum in net.shibboleth.idp.authn.config
-
Enum that defines LDAP trust configuration.
- LDAPResponseContext - Class in net.shibboleth.idp.authn.context
-
A context containing data about an LDAP authentication operation.
- LDAPResponseContext() - Constructor for class net.shibboleth.idp.authn.context.LDAPResponseContext
- ldapUrl - Variable in class net.shibboleth.idp.authn.config.LDAPAuthenticationFactoryBean
-
LDAP URL.
- lifetime - Variable in class net.shibboleth.idp.authn.AuthenticationFlowDescriptor
-
Maximum amount of time since first usage that a flow should be considered active.
- LockoutManagerContext - Class in net.shibboleth.idp.authn.context
-
A context that holds information about a management operation on an
AccountLockoutManager. - LockoutManagerContext() - Constructor for class net.shibboleth.idp.authn.context.LockoutManagerContext
- log - Variable in class net.shibboleth.idp.authn.AbstractCredentialValidator
-
Class logger.
- log - Variable in class net.shibboleth.idp.authn.AbstractExtractionAction
-
Class logger.
- log - Variable in class net.shibboleth.idp.authn.AbstractSubjectCanonicalizationAction
-
Class logger.
- log - Variable in class net.shibboleth.idp.authn.AbstractUsernamePasswordCredentialValidator
-
Class logger.
- log - Variable in class net.shibboleth.idp.authn.AbstractValidationAction
-
Class logger.
- log - Variable in class net.shibboleth.idp.authn.config.LDAPAuthenticationFactoryBean
-
Class logger.
- log - Variable in class net.shibboleth.idp.authn.principal.GenericPrincipalSerializer
-
Class logger.
- log - Variable in class net.shibboleth.idp.authn.principal.PrincipalEvalPredicateFactoryRegistry
-
Class logger.
- log - Variable in class net.shibboleth.idp.authn.principal.PrincipalServiceManager
-
Class logger.
- log - Variable in class net.shibboleth.idp.authn.principal.SealedPrincipalSerializer
-
Class logger.
- log - Variable in class net.shibboleth.idp.authn.principal.SimplePrincipalSerializer
-
Class logger.
- logPrefix - Variable in class net.shibboleth.idp.authn.AbstractCredentialValidator
-
Cached log prefix.
- lookup(Class<? extends Principal>, String) - Method in class net.shibboleth.idp.authn.principal.PrincipalEvalPredicateFactoryRegistry
-
Get a registered predicate factory for a given principal type and operator string, if any.
- lowercase - Variable in class net.shibboleth.idp.authn.AbstractExtractionAction
-
Convert to lowercase prior to transforms?
- lowercase - Variable in class net.shibboleth.idp.authn.AbstractSubjectCanonicalizationAction
-
Convert to lowercase prior to transforms?
- lowercase - Variable in class net.shibboleth.idp.authn.AbstractUsernamePasswordCredentialValidator
-
Convert username to lowercase prior to transforms?
M
- matchExpression - Variable in class net.shibboleth.idp.authn.AbstractUsernamePasswordCredentialValidator
-
A regular expression to apply for acceptance testing.
- matchingPrincipal - Variable in class net.shibboleth.idp.authn.context.RequestedPrincipalContext
-
The principal that satisfied the request, if any.
- maxAge - Variable in class net.shibboleth.idp.authn.context.AuthenticationContext
-
Allowed time since an
AuthenticationResultwas created that it can be reused for this request. - maxPoolSize - Variable in class net.shibboleth.idp.authn.config.LDAPAuthenticationFactoryBean
-
Maximum pool size.
- MessageChecker(String) - Constructor for class net.shibboleth.idp.authn.AbstractValidationAction.MessageChecker
-
Constructor.
- metricName - Variable in class net.shibboleth.idp.authn.AbstractValidationAction
-
Base name of metrics.
- mfaFlowDescriptor - Variable in class net.shibboleth.idp.authn.context.MultiFactorAuthenticationContext
-
Login flow descriptor for the MFA flow.
- minPoolSize - Variable in class net.shibboleth.idp.authn.config.LDAPAuthenticationFactoryBean
-
Minimum pool size.
- MultiFactorAuthenticationContext - Class in net.shibboleth.idp.authn.context
-
A context that holds information about the intermediate state of the multi-factor login flow.
- MultiFactorAuthenticationContext() - Constructor for class net.shibboleth.idp.authn.context.MultiFactorAuthenticationContext
-
Constructor.
- MultiFactorAuthenticationTransition - Class in net.shibboleth.idp.authn
-
A ruleset for managing the transition out of a step during the multi-factor authn flow.
- MultiFactorAuthenticationTransition() - Constructor for class net.shibboleth.idp.authn.MultiFactorAuthenticationTransition
-
Constructor.
N
- net.shibboleth.idp.authn - package net.shibboleth.idp.authn
-
APIs related to the authentication of a subject.
- net.shibboleth.idp.authn.config - package net.shibboleth.idp.authn.config
-
Configuration touchpoints for authentication flows.
- net.shibboleth.idp.authn.config.navigate - package net.shibboleth.idp.authn.config.navigate
-
Functions for traversing authentication configurations.
- net.shibboleth.idp.authn.context - package net.shibboleth.idp.authn.context
-
Context classes for managing authentication-related state.
- net.shibboleth.idp.authn.context.navigate - package net.shibboleth.idp.authn.context.navigate
-
Functions for traversing authentication contexts.
- net.shibboleth.idp.authn.duo - package net.shibboleth.idp.authn.duo
-
Public APIs related to Duo authentication.
- net.shibboleth.idp.authn.duo.context - package net.shibboleth.idp.authn.duo.context
-
Context classes related to Duo authentication.
- net.shibboleth.idp.authn.principal - package net.shibboleth.idp.authn.principal
-
Classes supporting Java
Principalusage. - newAuthenticationResult(Subject) - Method in class net.shibboleth.idp.authn.AuthenticationFlowDescriptor
-
Creates a new instance of a compatible
AuthenticationResultfor use with the corresponding flow. - nextFlowId - Variable in class net.shibboleth.idp.authn.context.MultiFactorAuthenticationContext
-
The next flow due to execute (or the currently executing flow during subflow execution).
- nextFlowStrategyMap - Variable in class net.shibboleth.idp.authn.MultiFactorAuthenticationTransition
-
A function that determines the next flow to execute.
- NO_CREDENTIALS - Static variable in class net.shibboleth.idp.authn.AuthnEventIds
-
ID of event returned if there are no credentials available in the request.
- NO_PASSIVE - Static variable in class net.shibboleth.idp.authn.AuthnEventIds
-
ID of the event returned if passive authentication isn't possible.
- NO_POTENTIAL_FLOW - Static variable in class net.shibboleth.idp.authn.AuthnEventIds
-
ID of event returned if there are no flows that could be used for authentication or c14n.
- NONE - net.shibboleth.idp.authn.config.LDAPAuthenticationFactoryBean.PassivatorType
O
- operatorString - Variable in class net.shibboleth.idp.authn.context.RequestedPrincipalContext
-
Comparison operator specific to request protocol.
- order - Variable in class net.shibboleth.idp.authn.AuthenticationFlowDescriptor
-
Spring auto-wiring order.
P
- PassivatorType(String) - Constructor for enum net.shibboleth.idp.authn.config.LDAPAuthenticationFactoryBean.PassivatorType
- PASSIVE_AUTHN_PARAM - Static variable in class net.shibboleth.idp.authn.ExternalAuthentication
-
Request attribute that indicates whether the authentication requires passive authentication.
- password - Variable in class net.shibboleth.idp.authn.context.UsernamePasswordContext
-
The password associated with the username.
- password - Variable in class net.shibboleth.idp.authn.principal.PasswordPrincipal
-
The password.
- PASSWORD_FIELD - Static variable in class net.shibboleth.idp.authn.principal.SealedPrincipalSerializer
-
Field name of password.
- PasswordPrincipal - Class in net.shibboleth.idp.authn.principal
-
Principal that wraps a password.
- PasswordPrincipal(String) - Constructor for class net.shibboleth.idp.authn.principal.PasswordPrincipal
-
Constructor.
- PooledTemplateSearchDnResolver - Class in net.shibboleth.idp.authn
-
Template-based pooled search dn resolver. - PooledTemplateSearchDnResolver(VelocityEngine, String) - Constructor for class net.shibboleth.idp.authn.PooledTemplateSearchDnResolver
-
Creates a new pooled template search DN resolver.
- PooledTemplateSearchDnResolver(PooledConnectionFactory, VelocityEngine, String) - Constructor for class net.shibboleth.idp.authn.PooledTemplateSearchDnResolver
-
Creates a new pooled template search DN resolver.
- populateSubject(Subject) - Method in class net.shibboleth.idp.authn.AbstractCredentialValidator
-
Decorate the subject with custom principals if needed.
- populateSubject(Subject) - Method in class net.shibboleth.idp.authn.AbstractValidationAction
- populateSubject(Subject, UsernamePasswordContext) - Method in class net.shibboleth.idp.authn.AbstractUsernamePasswordCredentialValidator
-
Decorate the subject with "standard" content from the validation and clean up as instructed.
- PostAuthenticationFlowsLookupFunction - Class in net.shibboleth.idp.authn.config.navigate
-
A function that returns
AuthenticationProfileConfiguration.getPostAuthenticationFlows(org.opensaml.profile.context.ProfileRequestContext)() if such a profile is available from aRelyingPartyContextobtained via a lookup function, by default a child of theProfileRequestContext. - PostAuthenticationFlowsLookupFunction() - Constructor for class net.shibboleth.idp.authn.config.navigate.PostAuthenticationFlowsLookupFunction
- potentialFlows - Variable in class net.shibboleth.idp.authn.context.AuthenticationContext
-
Flows that could potentially be used to authenticate the user.
- potentialFlows - Variable in class net.shibboleth.idp.authn.context.SubjectCanonicalizationContext
-
Flows that could potentially be used.
- predicateFactory - Variable in class net.shibboleth.idp.authn.principal.PrincipalEvalPredicateFactoryRegistration
-
Predicate factory.
- PreferredPrincipalContext - Class in net.shibboleth.idp.authn.context
-
A context that holds information about an authentication request's preference for a specific custom
Principal. - PreferredPrincipalContext() - Constructor for class net.shibboleth.idp.authn.context.PreferredPrincipalContext
-
Constructor.
- preferredPrincipals - Variable in class net.shibboleth.idp.authn.context.PreferredPrincipalContext
-
The principals reflecting the preference.
- previousResult - Variable in class net.shibboleth.idp.authn.AuthenticationResult
-
Tracks whether a result was loaded from a previous session or created as part of the current request.
- previousResult - Variable in class net.shibboleth.idp.authn.context.ExternalAuthenticationContext
-
Flag indicating this "new" result is really "old".
- PREVIOUSRESULT_KEY - Static variable in class net.shibboleth.idp.authn.ExternalAuthentication
-
Request attribute to which a signal to set
AuthenticationResult.setPreviousResult(boolean)may be bound. - PreviousResultLookupFunction - Class in net.shibboleth.idp.authn.context.navigate
-
A function that returns the value of
AuthenticationResult.isPreviousResult()or null if the input context is null orAuthenticationContext.getAuthenticationResult()is null. - PreviousResultLookupFunction() - Constructor for class net.shibboleth.idp.authn.context.navigate.PreviousResultLookupFunction
- principal - Variable in class net.shibboleth.idp.authn.context.ExternalAuthenticationContext
-
A
Principalthat was authenticated. - PRINCIPAL_KEY - Static variable in class net.shibboleth.idp.authn.ExternalAuthentication
-
Request attribute to which user's principal should be bound.
- PRINCIPAL_NAME_FIELD - Static variable in class net.shibboleth.idp.authn.principal.GenericPrincipalSerializer
-
Field name of principal name.
- PRINCIPAL_NAME_KEY - Static variable in class net.shibboleth.idp.authn.ExternalAuthentication
-
Request attribute to which user's principal name should be bound.
- PRINCIPAL_TYPE_FIELD - Static variable in class net.shibboleth.idp.authn.principal.GenericPrincipalSerializer
-
Field name of principal type.
- PrincipalEvalPredicate - Interface in net.shibboleth.idp.authn.principal
-
A
Predicateto evaluate aPrincipalthat represents a requested form of authentication against a set of principals supported by aPrincipalSupportingComponent. - PrincipalEvalPredicateFactory - Interface in net.shibboleth.idp.authn.principal
-
Generates a
Predicateto evaluate aPrincipalSupportingComponentagainst a requested form of authentication expressed in terms of aPrincipal. - PrincipalEvalPredicateFactoryRegistration - Class in net.shibboleth.idp.authn.principal
-
Wraps the association of a
PrincipalEvalPredicateFactoryagainst a particularPrincipalsubtype and a string operator. - PrincipalEvalPredicateFactoryRegistration(Pair<Class<? extends Principal>, String>, PrincipalEvalPredicateFactory) - Constructor for class net.shibboleth.idp.authn.principal.PrincipalEvalPredicateFactoryRegistration
-
Constructor.
- PrincipalEvalPredicateFactoryRegistry - Class in net.shibboleth.idp.authn.principal
-
A registry of mappings between a custom
Principalsubtype with a matching operator and a correspondingPrincipalEvalPredicateFactorythat returns predicates enforcing a particular set of matching rules for that operator and subtype. - PrincipalEvalPredicateFactoryRegistry() - Constructor for class net.shibboleth.idp.authn.principal.PrincipalEvalPredicateFactoryRegistry
-
Constructor.
- PrincipalEvalPredicateFactoryRegistry(Collection<PrincipalEvalPredicateFactoryRegistration>) - Constructor for class net.shibboleth.idp.authn.principal.PrincipalEvalPredicateFactoryRegistry
-
Constructor.
- PrincipalEvalPredicateFactoryRegistry(Map<Pair<Class<? extends Principal>, String>, PrincipalEvalPredicateFactory>) - Constructor for class net.shibboleth.idp.authn.principal.PrincipalEvalPredicateFactoryRegistry
-
Deprecated, for removal: This API element is subject to removal in a future version.
- principalFromString(String) - Method in class net.shibboleth.idp.authn.principal.PrincipalServiceManager
-
Manufacture a
Principalfrom a string of the format "type/value" where type matches the ID of aPrincipalServiceand the value is supplied to a single-arg String constructor if one exists. - principalName - Variable in class net.shibboleth.idp.authn.context.ExternalAuthenticationContext
-
Name of a principal that was authenticated.
- principalName - Variable in class net.shibboleth.idp.authn.context.SubjectCanonicalizationContext
-
Canonical principal name of subject.
- principalName - Variable in class net.shibboleth.idp.authn.context.SubjectContext
-
Canonical principal name of subject.
- principalSerializer - Variable in class net.shibboleth.idp.authn.principal.GenericPrincipalService
-
Generic principal serializer.
- PrincipalSerializer<Type> - Interface in net.shibboleth.idp.authn.principal
-
Interface for the serialization/deserialization of principals.
- PrincipalService<T extends Principal> - Interface in net.shibboleth.idp.authn.principal
-
Interface that provides services for a
Principalof a given type. - principalServiceManager - Variable in class net.shibboleth.idp.authn.AuthenticationFlowDescriptor
-
Access to principal services.
- PrincipalServiceManager - Class in net.shibboleth.idp.authn.principal
-
Manages and exposes instances of the
PrincipalServiceinterface. - PrincipalServiceManager(Collection<PrincipalService<?>>) - Constructor for class net.shibboleth.idp.authn.principal.PrincipalServiceManager
-
Constructor.
- PrincipalSupportingComponent - Interface in net.shibboleth.idp.authn.principal
-
Interface for an authentication component that exposes custom
Principalobjects. - principalType - Variable in class net.shibboleth.idp.authn.principal.DefaultPrincipalDeterminationStrategy
-
Deprecated.Type of Principal to return.
- principalType - Variable in class net.shibboleth.idp.authn.principal.GenericPrincipalService
-
Type of principal.
- principalType - Variable in class net.shibboleth.idp.authn.principal.SimplePrincipalSerializer
-
Principal type.
- principalWeightMap - Variable in class net.shibboleth.idp.authn.AuthenticationFlowDescriptor
-
Weighted sort oredering of custom Principals produced by flow(s).
- proxiableAuthorities - Variable in class net.shibboleth.idp.authn.context.AuthenticationContext
-
Allowable proxied sources of authority.
- PROXY_COUNT_EXCEEDED - Static variable in class net.shibboleth.idp.authn.AuthnEventIds
-
ID of event returned if proxying is disallowed.
- ProxyAuthenticationLookupFunction - Class in net.shibboleth.idp.authn.context.navigate
-
A function that returns the first value stored in a
ProxyAuthenticationPrincipalcontained in aSubject. - ProxyAuthenticationLookupFunction() - Constructor for class net.shibboleth.idp.authn.context.navigate.ProxyAuthenticationLookupFunction
- ProxyAuthenticationPrincipal - Class in net.shibboleth.idp.authn.principal
-
Principal that wraps a set of proxied authentication authorities and any restrictions on subsequent re-use.
- ProxyAuthenticationPrincipal() - Constructor for class net.shibboleth.idp.authn.principal.ProxyAuthenticationPrincipal
-
Constructor.
- ProxyAuthenticationPrincipal(Collection<String>) - Constructor for class net.shibboleth.idp.authn.principal.ProxyAuthenticationPrincipal
-
Constructor.
- proxyCount - Variable in class net.shibboleth.idp.authn.context.AuthenticationContext
-
Allowable proxy count upstream.
- proxyCount - Variable in class net.shibboleth.idp.authn.principal.ProxyAuthenticationPrincipal
-
Constrains additional proxy hops.
- ProxyCountPredicate() - Constructor for class net.shibboleth.idp.authn.AuthenticationFlowDescriptor.ProxyCountPredicate
- ProxyRestrictionReusePredicate() - Constructor for class net.shibboleth.idp.authn.AuthenticationResult.ProxyRestrictionReusePredicate
- proxyRestrictionsEnforced - Variable in class net.shibboleth.idp.authn.AuthenticationFlowDescriptor
-
Whether this flow should honor proxy restrictions toward RPs.
- proxyScopingEnforced - Variable in class net.shibboleth.idp.authn.AuthenticationFlowDescriptor
-
Whether this flow should honor proxy scoping restrictions toward IdPs.
- prunePeriod - Variable in class net.shibboleth.idp.authn.config.LDAPAuthenticationFactoryBean
-
Period at which to check and enforce the idle time.
- pushInfo - Variable in class net.shibboleth.idp.authn.duo.context.DuoAuthenticationContext
-
PushInfo data.
R
- RANDOM - net.shibboleth.idp.authn.config.LDAPAuthenticationFactoryBean.ConnectionStrategyType
- readerFactory - Variable in class net.shibboleth.idp.authn.principal.AbstractPrincipalSerializer
-
JSON reader factory.
- recordFailure() - Method in class net.shibboleth.idp.authn.AbstractValidationAction
-
Deprecated, for removal: This API element is subject to removal in a future version.
- recordFailure(ProfileRequestContext) - Method in class net.shibboleth.idp.authn.AbstractValidationAction
-
Record a failed authentication attempt against the configured counter.
- recordSuccess() - Method in class net.shibboleth.idp.authn.AbstractValidationAction
-
Deprecated, for removal: This API element is subject to removal in a future version.
- recordSuccess(ProfileRequestContext) - Method in class net.shibboleth.idp.authn.AbstractValidationAction
-
Record a successful authentication attempt against the configured counter.
- referenceInsert(Context, String, Object) - Method in class net.shibboleth.idp.authn.AbstractTemplateSearchDnResolver.EscapingReferenceInsertionEventHandler
- register(Class<? extends Principal>, String, PrincipalEvalPredicateFactory) - Method in class net.shibboleth.idp.authn.principal.PrincipalEvalPredicateFactoryRegistry
-
Register a predicate factory for a given operator string.
- registry - Variable in class net.shibboleth.idp.authn.principal.PrincipalEvalPredicateFactoryRegistry
-
Storage for the registry mappings.
- RELYING_PARTY_PARAM - Static variable in class net.shibboleth.idp.authn.ExternalAuthentication
-
Request attribute that provides the entity ID of the relying party that is requesting authentication.
- removeContextAfterValidation - Variable in class net.shibboleth.idp.authn.AbstractUsernamePasswordCredentialValidator
-
Whether to remove the
UsernamePasswordContextafter successful validation. - removeContextAfterValidation() - Method in class net.shibboleth.idp.authn.AbstractUsernamePasswordCredentialValidator
-
Deprecated, for removal: This API element is subject to removal in a future version.
- REQ_PRINC - Static variable in class net.shibboleth.idp.authn.AuthnAuditFields
-
Requested principal(s) field.
- REQ_PRINC_OP - Static variable in class net.shibboleth.idp.authn.AuthnAuditFields
-
Requested principal(s) operator field.
- REQUEST_UNSUPPORTED - Static variable in class net.shibboleth.idp.authn.AuthnEventIds
-
ID of event returned if the request's authentication requirements can't be met by an action or flow.
- RequestedPrincipalContext - Class in net.shibboleth.idp.authn.context
-
A context that holds information about an authentication request's requirement for a specific custom
Principal. - RequestedPrincipalContext() - Constructor for class net.shibboleth.idp.authn.context.RequestedPrincipalContext
-
Constructor.
- RequestedPrincipalContextOperatorLookupFunction - Class in net.shibboleth.idp.authn.context.navigate
-
A function that returns
RequestedPrincipalContext.getOperator(). - RequestedPrincipalContextOperatorLookupFunction() - Constructor for class net.shibboleth.idp.authn.context.navigate.RequestedPrincipalContextOperatorLookupFunction
- RequestedPrincipalContextPrincipalLookupFunction - Class in net.shibboleth.idp.authn.context.navigate
-
A function that returns
RequestedPrincipalContext.getRequestedPrincipals()but transforms the values into strings. - RequestedPrincipalContextPrincipalLookupFunction() - Constructor for class net.shibboleth.idp.authn.context.navigate.RequestedPrincipalContextPrincipalLookupFunction
- requestedPrincipals - Variable in class net.shibboleth.idp.authn.context.RequestedPrincipalContext
-
The principals reflecting the request requirements.
- requesterId - Variable in class net.shibboleth.idp.authn.context.SubjectCanonicalizationContext
-
Requester ID.
- requesterLookupStrategy - Variable in class net.shibboleth.idp.authn.AbstractValidationAction
-
Function used to obtain the requester ID.
- requiredName - Variable in class net.shibboleth.idp.authn.context.AuthenticationContext
-
A normative hint some protocols support to indicate who the subject MUST be.
- RESELECT_FLOW - Static variable in class net.shibboleth.idp.authn.AuthnEventIds
-
ID of event returned if a flow wishes to indicate that another flow should be selected instead.
- resolveEntryOnFailure - Variable in class net.shibboleth.idp.authn.config.LDAPAuthenticationFactoryBean
-
Whether to return the LDAP entry even if the user BIND fails.
- resolveEntryWithBindDn - Variable in class net.shibboleth.idp.authn.config.LDAPAuthenticationFactoryBean
-
Whether to resolve the user entry with the bind credentials.
- responderId - Variable in class net.shibboleth.idp.authn.context.SubjectCanonicalizationContext
-
Responder ID.
- responderLookupStrategy - Variable in class net.shibboleth.idp.authn.AbstractValidationAction
-
Function used to obtain the responder ID.
- responseTimeout - Variable in class net.shibboleth.idp.authn.config.LDAPAuthenticationFactoryBean
-
Wait time for operation responses.
- RESTART_AUTHN - Static variable in class net.shibboleth.idp.authn.AuthnEventIds
-
ID of event returned if the authentication process should be restarted from scratch.
- resultCacheable - Variable in class net.shibboleth.idp.authn.context.AuthenticationContext
-
Result may be cached for reuse in the normal way.
- resultCachingPredicate - Variable in class net.shibboleth.idp.authn.AbstractValidationAction
-
Predicate to apply when setting AuthenticationResult cacheability.
- resultSerializer - Variable in class net.shibboleth.idp.authn.AuthenticationFlowDescriptor
-
Custom serializer for the results generated by this flow.
- reuseCondition - Variable in class net.shibboleth.idp.authn.AuthenticationFlowDescriptor
-
Whether this flow allows reuse of its results.
- reuseCondition - Variable in class net.shibboleth.idp.authn.AuthenticationResult
-
Whether this result can be reused.
- revocationCondition - Variable in class net.shibboleth.idp.authn.AuthenticationFlowDescriptor
-
Whether a result from this flow should be considered revoked.
- revocationCondition - Variable in class net.shibboleth.idp.authn.AuthenticationResult
-
Whether this result should be considered revoked.
- REVOKECONSENT_KEY - Static variable in class net.shibboleth.idp.authn.ExternalAuthentication
-
Request attribute to which a signal to revoke consent for attribute release may be bound.
- ROUND_ROBIN - net.shibboleth.idp.authn.config.LDAPAuthenticationFactoryBean.ConnectionStrategyType
S
- s - Variable in class net.shibboleth.idp.authn.AbstractValidationAction.MessageChecker
-
Message to operate on.
- savePasswordToCredentialSet - Variable in class net.shibboleth.idp.authn.AbstractUsernamePasswordCredentialValidator
-
Whether to save the password in the Java Subject's private credentials.
- savePasswordToCredentialSet() - Method in class net.shibboleth.idp.authn.AbstractUsernamePasswordCredentialValidator
-
Get whether to save the password in the private credential set.
- scContext - Variable in class net.shibboleth.idp.authn.AbstractSubjectCanonicalizationAction
-
SubjectCanonicalizationContextto operate on. - scCtxLookupStrategy - Variable in class net.shibboleth.idp.authn.AbstractSubjectCanonicalizationAction
-
Strategy used to find the
SubjectCanonicalizationContextfrom theProfileRequestContext. - SealedPrincipalSerializer<T extends Principal> - Class in net.shibboleth.idp.authn.principal
-
Principal serializer that encrypts/decrypts the data when serializing.
- SealedPrincipalSerializer(Class<T>, String) - Constructor for class net.shibboleth.idp.authn.principal.SealedPrincipalSerializer
-
Constructor.
- sealer - Variable in class net.shibboleth.idp.authn.principal.SealedPrincipalSerializer
-
Data sealer.
- secretKey - Variable in class net.shibboleth.idp.authn.duo.BasicDuoIntegration
-
Secret key.
- serialize(Principal) - Method in class net.shibboleth.idp.authn.principal.GenericPrincipalSerializer
-
Serialize the supplied principal.
- serialize(Principal) - Method in interface net.shibboleth.idp.authn.principal.PrincipalSerializer
-
Serialize the supplied principal.
- serialize(Principal) - Method in class net.shibboleth.idp.authn.principal.SimplePrincipalSerializer
-
Serialize the supplied principal.
- serialize(AuthenticationResult) - Method in class net.shibboleth.idp.authn.AuthenticationFlowDescriptor
- serialVersionUID - Static variable in exception net.shibboleth.idp.authn.ExternalAuthenticationException
-
Serial UID.
- serialVersionUID - Static variable in exception net.shibboleth.idp.authn.SubjectCanonicalizationException
-
Serial version UID.
- setAccountStateExpirationPeriod(Period) - Method in class net.shibboleth.idp.authn.config.LDAPAuthenticationFactoryBean
- setAccountStateLoginFailures(int) - Method in class net.shibboleth.idp.authn.config.LDAPAuthenticationFactoryBean
- setAccountStateWarningPeriod(Period) - Method in class net.shibboleth.idp.authn.config.LDAPAuthenticationFactoryBean
- setActivationCondition(Predicate<ProfileRequestContext>) - Method in class net.shibboleth.idp.authn.AbstractCredentialValidator
-
Set the activation condition controlling use of validator.
- setActivationCondition(Predicate<ProfileRequestContext>) - Method in class net.shibboleth.idp.authn.AuthenticationFlowDescriptor
-
Set the activation condition in the form of a
Predicatesuch that iff the condition evaluates to true should the corresponding flow be allowed/possible. - setActivationCondition(Predicate<ProfileRequestContext>) - Method in class net.shibboleth.idp.authn.SubjectCanonicalizationFlowDescriptor
-
Set the activation condition in the form of a
Predicatesuch that iff the condition evaluates to true should the corresponding flow be allowed/possible. - setActiveDirectory(boolean) - Method in class net.shibboleth.idp.authn.config.LDAPAuthenticationFactoryBean
- setActiveResults(Iterable<AuthenticationResult>) - Method in class net.shibboleth.idp.authn.context.AuthenticationContext
-
Set the authentication results currently active for the subject.
- setAddDefaultPrincipals(boolean) - Method in class net.shibboleth.idp.authn.AbstractValidationAction
-
Set whether to inject the authentication flow's default custom principals into the subject.
- setAddress(InetAddress) - Method in class net.shibboleth.idp.authn.context.UserAgentContext
-
Set the address of the user-agent host.
- setAPIHost(String) - Method in class net.shibboleth.idp.authn.duo.BasicDuoIntegration
-
Set the API host to use.
- setApplicationKey(String) - Method in class net.shibboleth.idp.authn.duo.BasicDuoIntegration
-
Set the application key to use.
- setAttemptedFlow(AuthenticationFlowDescriptor) - Method in class net.shibboleth.idp.authn.context.AuthenticationContext
-
Set the authentication flow that was attempted in order to authenticate the user.
- setAttemptedFlow(SubjectCanonicalizationFlowDescriptor) - Method in class net.shibboleth.idp.authn.context.SubjectCanonicalizationContext
-
Set the last flow that was attempted for subject c14n.
- setAuthenticatingAuthority(String) - Method in class net.shibboleth.idp.authn.context.AuthenticationContext
-
Sets the identifier or location, depending on protocol, of an authentication system to use as a proxied source of authentication.
- setAuthenticationContextLookupStrategy(Function<ProfileRequestContext, AuthenticationContext>) - Method in class net.shibboleth.idp.authn.AbstractAuthenticationAction
-
Set the context lookup strategy.
- setAuthenticationContextLookupStrategy(Function<ProfileRequestContext, AuthenticationContext>) - Method in class net.shibboleth.idp.authn.principal.DefaultPrincipalDeterminationStrategy
-
Deprecated.Set lookup strategy for
AuthenticationContext. - setAuthenticationFlowDescriptor(AuthenticationFlowDescriptor) - Method in class net.shibboleth.idp.authn.context.MultiFactorAuthenticationContext
-
Set the
AuthenticationFlowDescriptorrepresenting the MFA flow. - setAuthenticationInstant(Instant) - Method in class net.shibboleth.idp.authn.AuthenticationResult
-
Set the time that the authentication completed.
- setAuthenticationResponse(AuthenticationResponse) - Method in class net.shibboleth.idp.authn.context.LDAPResponseContext
-
Set the LDAP authentication response.
- setAuthenticationResult(AuthenticationResult) - Method in class net.shibboleth.idp.authn.context.AuthenticationContext
-
Set the authentication result produced by the attempted flow, or reused for SSO.
- setAuthenticatorType(String) - Method in class net.shibboleth.idp.authn.config.LDAPAuthenticationFactoryBean
- setAuthnError(String) - Method in class net.shibboleth.idp.authn.context.ExternalAuthenticationContext
-
Set an error message from the authentication process.
- setAuthnException(Exception) - Method in class net.shibboleth.idp.authn.context.ExternalAuthenticationContext
-
Set an exception from the authentication process.
- setAuthnInstant(Instant) - Method in class net.shibboleth.idp.authn.context.ExternalAuthenticationContext
-
Set the time of authentication.
- setBaseDn(String) - Method in class net.shibboleth.idp.authn.config.LDAPAuthenticationFactoryBean
- setBindDn(String) - Method in class net.shibboleth.idp.authn.config.LDAPAuthenticationFactoryBean
- setBindDnCredential(String) - Method in class net.shibboleth.idp.authn.config.LDAPAuthenticationFactoryBean
- setBindPoolPassivatorType(String) - Method in class net.shibboleth.idp.authn.config.LDAPAuthenticationFactoryBean
- setBlockWaitTime(Duration) - Method in class net.shibboleth.idp.authn.config.LDAPAuthenticationFactoryBean
- setCertificate(Certificate) - Method in class net.shibboleth.idp.authn.context.CertificateContext
-
Set the certificate to be validated.
- setClassifiedMessages(Map<String, Collection<String>>) - Method in class net.shibboleth.idp.authn.AbstractValidationAction
-
Set the error messages to map to specific events.
- setCleanupHook(Consumer<ProfileRequestContext>) - Method in class net.shibboleth.idp.authn.AbstractValidationAction
-
Set the cleanup hook to execute after successful validation.
- setClientAddress(String) - Method in class net.shibboleth.idp.authn.duo.context.DuoAuthenticationContext
-
Set the client address.
- setCompletionInstant() - Method in class net.shibboleth.idp.authn.context.AuthenticationContext
-
Set the completion time of the authentication attempt to the current time.
- setConnectionFactory(ConnectionFactory) - Method in class net.shibboleth.idp.authn.TemplateSearchDnResolver
- setConnectionFactory(PooledConnectionFactory) - Method in class net.shibboleth.idp.authn.PooledTemplateSearchDnResolver
- setConnectionStrategyType(String) - Method in class net.shibboleth.idp.authn.config.LDAPAuthenticationFactoryBean
- setConnectTimeout(Duration) - Method in class net.shibboleth.idp.authn.config.LDAPAuthenticationFactoryBean
- setDataSealer(DataSealer) - Method in class net.shibboleth.idp.authn.principal.SealedPrincipalSerializer
-
Set the
DataSealerto use. - setDeviceID(String) - Method in class net.shibboleth.idp.authn.duo.context.DuoAuthenticationContext
-
Set the device ID.
- setDisableHostnameVerification(boolean) - Method in class net.shibboleth.idp.authn.config.LDAPAuthenticationFactoryBean
- setDisablePooling(boolean) - Method in class net.shibboleth.idp.authn.config.LDAPAuthenticationFactoryBean
- setDiscoveryRequired(boolean) - Method in class net.shibboleth.idp.authn.AuthenticationFlowDescriptor
-
Sets whether to invoke discovery subflow if
AuthenticationContext.getAuthenticatingAuthority()is null. - setDnFormat(String) - Method in class net.shibboleth.idp.authn.config.LDAPAuthenticationFactoryBean
- setDoNotCache(boolean) - Method in class net.shibboleth.idp.authn.context.ExternalAuthenticationContext
-
Set the "do not cache" flag.
- setEDirectory(boolean) - Method in class net.shibboleth.idp.authn.config.LDAPAuthenticationFactoryBean
- setEvent(String) - Method in class net.shibboleth.idp.authn.context.MultiFactorAuthenticationContext
-
Set an event that should be signaled as the result of the MFA flow.
- setException(Exception) - Method in class net.shibboleth.idp.authn.context.SubjectCanonicalizationContext
-
Set the exception raised by a failed canonicalization.
- setFactor(String) - Method in class net.shibboleth.idp.authn.duo.context.DuoAuthenticationContext
-
Set the factor to use.
- setFixedEventLookupStrategy(Function<ProfileRequestContext, String>) - Method in class net.shibboleth.idp.authn.context.AuthenticationContext
-
Set optional lookup strategy to return a fixed event to return from credential validation to exercise error and warning logic.
- setFlowExecutionUrl(String) - Method in class net.shibboleth.idp.authn.context.ExternalAuthenticationContext
-
Set the flow execution URL to return control to.
- setForceAuthn(boolean) - Method in class net.shibboleth.idp.authn.context.AuthenticationContext
-
Set whether to require fresh subject interaction to succeed.
- setForcedAuthenticationSupported(boolean) - Method in class net.shibboleth.idp.authn.AuthenticationFlowDescriptor
-
Set whether this flow supports forced authentication.
- setFreeIPA(boolean) - Method in class net.shibboleth.idp.authn.config.LDAPAuthenticationFactoryBean
- setHintedName(String) - Method in class net.shibboleth.idp.authn.context.AuthenticationContext
-
Set a non-normative hint provided by the request about the user's identity.
- setId(String) - Method in class net.shibboleth.idp.authn.AbstractCredentialValidator
- setIdentifier(String) - Method in class net.shibboleth.idp.authn.context.UserAgentContext
-
Set the user agent identifier.
- setIdleTime(Duration) - Method in class net.shibboleth.idp.authn.config.LDAPAuthenticationFactoryBean
- setImpersonatingPrincipalName(String) - Method in class net.shibboleth.idp.authn.context.SubjectContext
-
Set the canonical principal name of an identity that is impersonating the subject.
- setInactivityTimeout(Duration) - Method in class net.shibboleth.idp.authn.AuthenticationFlowDescriptor
-
Set the maximum amount of time, since the last usage, a flow should be considered active.
- setIntegrationKey(String) - Method in class net.shibboleth.idp.authn.duo.BasicDuoIntegration
-
Set the integration key to use.
- setIntermediates(Collection<Certificate>) - Method in class net.shibboleth.idp.authn.context.CertificateContext
-
Set the additional certificates accompanying the end-entity certificate.
- setIsPassive(boolean) - Method in class net.shibboleth.idp.authn.context.AuthenticationContext
-
Set whether subject interaction is allowed.
- setKey(String) - Method in class net.shibboleth.idp.authn.context.LockoutManagerContext
-
Set the account lockout key to check or modify.
- setLastActivityInstant(Instant) - Method in class net.shibboleth.idp.authn.AuthenticationResult
-
Set the last time result was used for authentication.
- setLastActivityInstantToNow() - Method in class net.shibboleth.idp.authn.AuthenticationResult
-
Set the last activity instant for this result to the current time.
- setLdapUrl(String) - Method in class net.shibboleth.idp.authn.config.LDAPAuthenticationFactoryBean
- setLifetime(Duration) - Method in class net.shibboleth.idp.authn.AuthenticationFlowDescriptor
-
Set the maximum amount of time, since first usage, a flow should be considered active.
- setLookupStrategy(Function<ProfileRequestContext, SubjectCanonicalizationContext>) - Method in class net.shibboleth.idp.authn.AbstractSubjectCanonicalizationAction
-
Set the context lookup strategy.
- setLowercase(boolean) - Method in class net.shibboleth.idp.authn.AbstractExtractionAction
-
Controls conversion to lowercase prior to applying any transforms.
- setLowercase(boolean) - Method in class net.shibboleth.idp.authn.AbstractSubjectCanonicalizationAction
-
Controls conversion to lowercase prior to applying any transforms.
- setLowercase(boolean) - Method in class net.shibboleth.idp.authn.AbstractUsernamePasswordCredentialValidator
-
Controls conversion to lowercase prior to applying any transforms.
- setMatchExpression(Pattern) - Method in class net.shibboleth.idp.authn.AbstractUsernamePasswordCredentialValidator
-
Set a matching expression to apply to the username for acceptance.
- setMatchingPrincipal(Principal) - Method in class net.shibboleth.idp.authn.context.RequestedPrincipalContext
-
Set the principal that matched the request's requirements, if any.
- setMaxAge(Duration) - Method in class net.shibboleth.idp.authn.context.AuthenticationContext
-
Set duration since an
AuthenticationResultwas created that allows it to be reused for this request. - setMaxPoolSize(int) - Method in class net.shibboleth.idp.authn.config.LDAPAuthenticationFactoryBean
- setMetricName(String) - Method in class net.shibboleth.idp.authn.AbstractValidationAction
-
Set the base name to use for metrics reported.
- setMinPoolSize(int) - Method in class net.shibboleth.idp.authn.config.LDAPAuthenticationFactoryBean
- setNextFlow(String) - Method in class net.shibboleth.idp.authn.MultiFactorAuthenticationTransition
-
Set the next flow to run directly, instead of using a strategy map.
- setNextFlowId(String) - Method in class net.shibboleth.idp.authn.context.MultiFactorAuthenticationContext
-
Set the next flow due to execute.
- setNextFlowStrategy(Function<ProfileRequestContext, String>) - Method in class net.shibboleth.idp.authn.MultiFactorAuthenticationTransition
-
Set a function to run directly instead of using a strategy map.
- setNextFlowStrategyMap(Map<String, Object>) - Method in class net.shibboleth.idp.authn.MultiFactorAuthenticationTransition
-
Set the map of transition rules to follow.
- setNonBrowserSupported(boolean) - Method in class net.shibboleth.idp.authn.AuthenticationFlowDescriptor
-
Set whether this flow supports non-browser clients.
- setOperator(String) - Method in class net.shibboleth.idp.authn.context.RequestedPrincipalContext
-
Set the comparison operator for matching requested principals.
- setOrder(int) - Method in class net.shibboleth.idp.authn.AuthenticationFlowDescriptor
-
Set the order/priority value for the bean.
- setPasscode(String) - Method in class net.shibboleth.idp.authn.duo.context.DuoAuthenticationContext
-
Set the passcode.
- setPassiveAuthenticationSupported(boolean) - Method in class net.shibboleth.idp.authn.AuthenticationFlowDescriptor
-
Set whether this flow supports passive authentication.
- setPassword(String) - Method in class net.shibboleth.idp.authn.context.UsernamePasswordContext
-
Sets the password associated with the username.
- setPreferredPrincipals(List<Principal>) - Method in class net.shibboleth.idp.authn.context.PreferredPrincipalContext
-
Set list of principals reflecting the request preferences.
- setPreviousResult(boolean) - Method in class net.shibboleth.idp.authn.AuthenticationResult
-
Set whether this result was loaded from a session as the product of a previous request.
- setPreviousResult(boolean) - Method in class net.shibboleth.idp.authn.context.ExternalAuthenticationContext
-
Set whether this result is the product of an external SSO event and not a new act of authentication.
- setPrincipal(Principal) - Method in class net.shibboleth.idp.authn.context.ExternalAuthenticationContext
-
Set a
Principalthat was authenticated. - setPrincipalEvalPredicateFactoryRegistry(PrincipalEvalPredicateFactoryRegistry) - Method in class net.shibboleth.idp.authn.context.AuthenticationContext
-
Set the registry of predicate factories for custom principal evaluation to inject into instances of
RequestedPrincipalContextcreated via theAuthenticationContext.addRequestedPrincipalContext(String, List, boolean)helper method. - setPrincipalEvalPredicateFactoryRegistry(PrincipalEvalPredicateFactoryRegistry) - Method in class net.shibboleth.idp.authn.context.RequestedPrincipalContext
-
Set the registry of predicate factories for custom principal evaluation.
- setPrincipalName(String) - Method in class net.shibboleth.idp.authn.context.ExternalAuthenticationContext
-
Set the name of a principal that was authenticated.
- setPrincipalName(String) - Method in class net.shibboleth.idp.authn.context.SubjectCanonicalizationContext
-
Set the canonical principal name of the subject.
- setPrincipalName(String) - Method in class net.shibboleth.idp.authn.context.SubjectContext
-
Set the canonical principal name of the subject.
- setPrincipalServiceManager(PrincipalServiceManager) - Method in class net.shibboleth.idp.authn.AuthenticationFlowDescriptor
-
Sets a
PrincipalServiceManagerto use for string-based principal processing. - setPrincipalWeightMap(Map<Principal, Integer>) - Method in class net.shibboleth.idp.authn.AuthenticationFlowDescriptor
-
Set the map of Principals to weight values to impose a sort order on any matching Principals found in the authentication result.
- setProxyCount(Integer) - Method in class net.shibboleth.idp.authn.context.AuthenticationContext
-
Set the allowable number of hops upstream to permit for proxied authentication.
- setProxyCount(Integer) - Method in class net.shibboleth.idp.authn.principal.ProxyAuthenticationPrincipal
-
Sets the number of additional proxy hops that should be permitted.
- setProxyRestrictionsEnforced(boolean) - Method in class net.shibboleth.idp.authn.AuthenticationFlowDescriptor
-
Sets whether this flow's results should honor restrictions on proxying toward RPs
- setProxyScopingEnforced(boolean) - Method in class net.shibboleth.idp.authn.AuthenticationFlowDescriptor
-
Sets whether this flow's results should honor restrictions on proxying toward IdPs.
- setPrunePeriod(Duration) - Method in class net.shibboleth.idp.authn.config.LDAPAuthenticationFactoryBean
- setRegistrations(Map<Pair<Class<? extends Principal>, String>, PrincipalEvalPredicateFactory>) - Method in class net.shibboleth.idp.authn.principal.PrincipalEvalPredicateFactoryRegistry
-
Add registrations from a map, overwriting any previously matching entries.
- setRemoveContextAfterValidation(boolean) - Method in class net.shibboleth.idp.authn.AbstractUsernamePasswordCredentialValidator
-
Deprecated, for removal: This API element is subject to removal in a future version.
- setRequestedPrincipals(List<Principal>) - Method in class net.shibboleth.idp.authn.context.RequestedPrincipalContext
-
Set list of principals reflecting the request requirements.
- setRequesterId(String) - Method in class net.shibboleth.idp.authn.context.SubjectCanonicalizationContext
-
Set the requester's ID.
- setRequesterLookupStrategy(Function<ProfileRequestContext, String>) - Method in class net.shibboleth.idp.authn.AbstractValidationAction
-
Set the strategy used to locate the requester ID for canonicalization.
- setRequiredName(String) - Method in class net.shibboleth.idp.authn.context.AuthenticationContext
-
Set a normative hint provided by the request about the user's identity.
- setResolveEntryOnFailure(boolean) - Method in class net.shibboleth.idp.authn.config.LDAPAuthenticationFactoryBean
- setResolveEntryWithBindDn(boolean) - Method in class net.shibboleth.idp.authn.config.LDAPAuthenticationFactoryBean
- setResponderId(String) - Method in class net.shibboleth.idp.authn.context.SubjectCanonicalizationContext
-
Set the responder's ID.
- setResponderLookupStrategy(Function<ProfileRequestContext, String>) - Method in class net.shibboleth.idp.authn.AbstractValidationAction
-
Set the strategy used to locate the responder ID for canonicalization.
- setResponseTimeout(Duration) - Method in class net.shibboleth.idp.authn.config.LDAPAuthenticationFactoryBean
- setResultCacheable(boolean) - Method in class net.shibboleth.idp.authn.context.AuthenticationContext
-
Set whether the result is suitable for caching (such as in a session) for reuse.
- setResultCachingPredicate(Predicate<ProfileRequestContext>) - Method in class net.shibboleth.idp.authn.AbstractValidationAction
-
Set predicate to apply to determine cacheability of
AuthenticationResult. - setResultSerializer(StorageSerializer<AuthenticationResult>) - Method in class net.shibboleth.idp.authn.AuthenticationFlowDescriptor
-
Set a custom serializer for results produced by this flow.
- setReuseCondition(Predicate<ProfileRequestContext>) - Method in class net.shibboleth.idp.authn.AuthenticationFlowDescriptor
-
Set condition controlling whether results from this flow should be reused for SSO.
- setReuseCondition(Predicate<ProfileRequestContext>) - Method in class net.shibboleth.idp.authn.AuthenticationResult
-
Sets condition controlling whether this result should be reused for SSO.
- setRevocationCondition(BiPredicate<ProfileRequestContext, AuthenticationResult>) - Method in class net.shibboleth.idp.authn.AuthenticationFlowDescriptor
-
Set condition controlling whether a result from this flow should be considered revoked.
- setRevocationCondition(BiPredicate<ProfileRequestContext, AuthenticationResult>) - Method in class net.shibboleth.idp.authn.AuthenticationResult
-
Sets condition controlling whether this result has been revoked subsequent to creation.
- setSavePasswordToCredentialSet(boolean) - Method in class net.shibboleth.idp.authn.AbstractUsernamePasswordCredentialValidator
-
Set whether to save the password in the private credential set.
- setSecretKey(String) - Method in class net.shibboleth.idp.authn.duo.BasicDuoIntegration
-
Set the secret key to use.
- setSignaledFlowId(String) - Method in class net.shibboleth.idp.authn.context.AuthenticationContext
-
Set the flow ID signaled as the next selection.
- setSubject(Subject) - Method in class net.shibboleth.idp.authn.context.ExternalAuthenticationContext
-
Set a
Subjectthat was authenticated. - setSubject(Subject) - Method in class net.shibboleth.idp.authn.context.SubjectCanonicalizationContext
-
Set the
Subjectto canonicalize. - setSubjectDecorator(BiConsumer<ProfileRequestContext, Subject>) - Method in class net.shibboleth.idp.authn.AuthenticationFlowDescriptor
-
Sets a subject decorating component called prior to completing authentication and passing control to subject canonicalization.
- setSubtreeSearch(boolean) - Method in class net.shibboleth.idp.authn.config.LDAPAuthenticationFactoryBean
- setSupportedPrincipals(Collection<Principal>) - Method in class net.shibboleth.idp.authn.AbstractCredentialValidator
-
Set supported non-user-specific principals that the validator will include in the subjects it generates.
- setSupportedPrincipals(Collection<Principal>) - Method in class net.shibboleth.idp.authn.AbstractValidationAction
-
Set supported non-user-specific principals that the action will include in the subjects it generates, in place of any default principals from the flow.
- setSupportedPrincipals(Collection<Principal>) - Method in class net.shibboleth.idp.authn.AuthenticationFlowDescriptor
-
Set supported non-user-specific principals that the flow may produce when it operates.
- setSupportedPrincipals(Collection<T>) - Method in class net.shibboleth.idp.authn.duo.BasicDuoIntegration
-
Set supported non-user-specific principals that the action will include in the subjects it generates, in place of any default principals from the flow.
- setSupportedPrincipalsByString(Collection<String>) - Method in class net.shibboleth.idp.authn.AuthenticationFlowDescriptor
-
Set supported non-user-specific principals that the flow may produce when it operates.
- setSymbolics(Map<String, Integer>) - Method in class net.shibboleth.idp.authn.principal.GenericPrincipalSerializer
-
Sets mappings of string constants to symbolic constants.
- setTicket(KerberosTicket) - Method in class net.shibboleth.idp.authn.context.KerberosTicketContext
-
Set the Kerberos ticket to be validated.
- setTransformedUsername(String) - Method in class net.shibboleth.idp.authn.context.UsernamePasswordContext
-
Sets the transformed username.
- setTransforms(Collection<Pair<String, String>>) - Method in class net.shibboleth.idp.authn.AbstractExtractionAction
-
A collection of regular expression and replacement pairs.
- setTransforms(Collection<Pair<String, String>>) - Method in class net.shibboleth.idp.authn.AbstractSubjectCanonicalizationAction
-
A collection of regular expression and replacement pairs.
- setTransforms(Collection<Pair<String, String>>) - Method in class net.shibboleth.idp.authn.AbstractUsernamePasswordCredentialValidator
-
A collection of regular expression and replacement pairs.
- setTransitionMap(Map<String, MultiFactorAuthenticationTransition>) - Method in class net.shibboleth.idp.authn.context.MultiFactorAuthenticationContext
-
Set the map of transitions to apply, replacing any existing entries.
- setTrim(boolean) - Method in class net.shibboleth.idp.authn.AbstractExtractionAction
-
Controls whitespace trimming prior to applying any transforms.
- setTrim(boolean) - Method in class net.shibboleth.idp.authn.AbstractSubjectCanonicalizationAction
-
Controls whitespace trimming prior to applying any transforms.
- setTrim(boolean) - Method in class net.shibboleth.idp.authn.AbstractUsernamePasswordCredentialValidator
-
Controls whitespace trimming prior to applying any transforms.
- setTrustCertificatesCredentialConfig(CredentialConfig) - Method in class net.shibboleth.idp.authn.config.LDAPAuthenticationFactoryBean
- setTruststoreCredentialConfig(CredentialConfig) - Method in class net.shibboleth.idp.authn.config.LDAPAuthenticationFactoryBean
- setTrustType(String) - Method in class net.shibboleth.idp.authn.config.LDAPAuthenticationFactoryBean
- setUppercase(boolean) - Method in class net.shibboleth.idp.authn.AbstractExtractionAction
-
Controls conversion to uppercase prior to applying any transforms.
- setUppercase(boolean) - Method in class net.shibboleth.idp.authn.AbstractSubjectCanonicalizationAction
-
Controls conversion to uppercase prior to applying any transforms.
- setUppercase(boolean) - Method in class net.shibboleth.idp.authn.AbstractUsernamePasswordCredentialValidator
-
Controls conversion to uppercase prior to applying any transforms.
- setUsePasswordExpiration(boolean) - Method in class net.shibboleth.idp.authn.config.LDAPAuthenticationFactoryBean
- setUsePasswordPolicy(boolean) - Method in class net.shibboleth.idp.authn.config.LDAPAuthenticationFactoryBean
- setUserFilter(String) - Method in class net.shibboleth.idp.authn.config.LDAPAuthenticationFactoryBean
- setUsername(String) - Method in class net.shibboleth.idp.authn.context.UsernameContext
-
Sets the username.
- setUsername(String) - Method in class net.shibboleth.idp.authn.context.UsernamePasswordContext
-
Sets the username and resets the transformed version to be identical.
- setUsername(String) - Method in class net.shibboleth.idp.authn.duo.context.DuoAuthenticationContext
-
Set the username.
- setUsernamePasswordContextLookupStrategy(Function<AuthenticationContext, UsernamePasswordContext>) - Method in class net.shibboleth.idp.authn.AbstractUsernamePasswordCredentialValidator
-
Set the lookup strategy to locate the
UsernamePasswordContext. - setUseSSL(boolean) - Method in class net.shibboleth.idp.authn.config.LDAPAuthenticationFactoryBean
- setUseStartTLS(boolean) - Method in class net.shibboleth.idp.authn.config.LDAPAuthenticationFactoryBean
- setValidateDn(String) - Method in class net.shibboleth.idp.authn.config.LDAPAuthenticationFactoryBean
- setValidateFilter(String) - Method in class net.shibboleth.idp.authn.config.LDAPAuthenticationFactoryBean
- setValidateOnCheckout(boolean) - Method in class net.shibboleth.idp.authn.config.LDAPAuthenticationFactoryBean
- setValidatePeriod(Duration) - Method in class net.shibboleth.idp.authn.config.LDAPAuthenticationFactoryBean
- setValidatePeriodically(boolean) - Method in class net.shibboleth.idp.authn.config.LDAPAuthenticationFactoryBean
- setVelocityEngine(VelocityEngine) - Method in class net.shibboleth.idp.authn.config.LDAPAuthenticationFactoryBean
- signaledFlowId - Variable in class net.shibboleth.idp.authn.context.AuthenticationContext
-
Signals authentication flow to run next, to influence selection logic.
- SimplePrincipalSerializer<T extends Principal> - Class in net.shibboleth.idp.authn.principal
-
Principal serializer for string-based principals that serialize to a simple JSON structure.
- SimplePrincipalSerializer(Class<T>, String) - Constructor for class net.shibboleth.idp.authn.principal.SimplePrincipalSerializer
-
Constructor.
- SSO - Static variable in class net.shibboleth.idp.authn.AuthnAuditFields
-
SSO indicator signaling authentication was not "freshly" performed.
- startExternalAuthentication(HttpServletRequest) - Static method in class net.shibboleth.idp.authn.ExternalAuthentication
-
Initialize a request for external authentication by seeking out the information stored in the servlet session and exposing it as request attributes.
- stateMap - Variable in class net.shibboleth.idp.authn.context.AuthenticationContext
-
Storage map for interflow communication.
- STORAGE_EXPIRATION_OFFSET - Static variable in class net.shibboleth.idp.authn.AuthenticationFlowDescriptor
-
Additional allowance for storage of result records to avoid race conditions during use.
- stringBasedPrincipals - Variable in class net.shibboleth.idp.authn.AuthenticationFlowDescriptor
-
Supported principals provided by delimited strings, for post-initialization override via
PrincipalServiceManager. - subject - Variable in class net.shibboleth.idp.authn.AuthenticationResult
-
The Subject established by the authentication result.
- subject - Variable in class net.shibboleth.idp.authn.context.ExternalAuthenticationContext
-
Name of a
Subjectthat was authenticated. - subject - Variable in class net.shibboleth.idp.authn.context.SubjectCanonicalizationContext
-
Subject to canonicalize.
- SUBJECT_C14N_ERROR - Static variable in class net.shibboleth.idp.authn.AuthnEventIds
-
ID of event returned if an error occurs canonicalizing a Subject.
- SUBJECT_KEY - Static variable in class net.shibboleth.idp.authn.ExternalAuthentication
-
Request attribute to which user's subject should be bound.
- SubjectCanonicalizationContext - Class in net.shibboleth.idp.authn.context
-
A context that holds an input
Subjectto canonicalize into a principal name, and the collection of c14n flows to attempt. - SubjectCanonicalizationContext() - Constructor for class net.shibboleth.idp.authn.context.SubjectCanonicalizationContext
-
Constructor.
- SubjectCanonicalizationContextSubjectLookupFunction - Class in net.shibboleth.idp.authn.context.navigate
-
A function that returns the
Subjectfrom aSubjectCanonicalizationContext. - SubjectCanonicalizationContextSubjectLookupFunction() - Constructor for class net.shibboleth.idp.authn.context.navigate.SubjectCanonicalizationContextSubjectLookupFunction
- SubjectCanonicalizationException - Exception in net.shibboleth.idp.authn
-
Exception indicating a problem translating a subject between forms.
- SubjectCanonicalizationException() - Constructor for exception net.shibboleth.idp.authn.SubjectCanonicalizationException
-
Constructor.
- SubjectCanonicalizationException(Exception) - Constructor for exception net.shibboleth.idp.authn.SubjectCanonicalizationException
-
Constructor.
- SubjectCanonicalizationException(String) - Constructor for exception net.shibboleth.idp.authn.SubjectCanonicalizationException
-
Constructor.
- SubjectCanonicalizationException(String, Exception) - Constructor for exception net.shibboleth.idp.authn.SubjectCanonicalizationException
-
Constructor.
- SubjectCanonicalizationFlowDescriptor - Class in net.shibboleth.idp.authn
-
A descriptor for a subject canonicalization flow.
- SubjectCanonicalizationFlowDescriptor() - Constructor for class net.shibboleth.idp.authn.SubjectCanonicalizationFlowDescriptor
-
Constructor.
- SubjectContext - Class in net.shibboleth.idp.authn.context
-
A context that holds information about the subject of a request.
- SubjectContext() - Constructor for class net.shibboleth.idp.authn.context.SubjectContext
-
Constructor.
- SubjectContextImpersonatingPrincipalLookupFunction - Class in net.shibboleth.idp.authn.context.navigate
-
A function that returns the impersonating principal name from a
SubjectContext. - SubjectContextImpersonatingPrincipalLookupFunction() - Constructor for class net.shibboleth.idp.authn.context.navigate.SubjectContextImpersonatingPrincipalLookupFunction
- SubjectContextPrincipalLookupFunction - Class in net.shibboleth.idp.authn.context.navigate
-
A function that returns the principal name from a
SubjectContext. - SubjectContextPrincipalLookupFunction() - Constructor for class net.shibboleth.idp.authn.context.navigate.SubjectContextPrincipalLookupFunction
- subjectDecorator - Variable in class net.shibboleth.idp.authn.AuthenticationFlowDescriptor
-
Customizes subject prior to triggering subject canonicalization.
- subtreeSearch - Variable in class net.shibboleth.idp.authn.config.LDAPAuthenticationFactoryBean
-
Whether to use a SUBTREE search with the baseDn.
- supportedPrincipals - Variable in class net.shibboleth.idp.authn.AuthenticationFlowDescriptor
-
Supported principals, indexed by type, that the flow can produce.
- supportedPrincipals - Variable in class net.shibboleth.idp.authn.duo.BasicDuoIntegration
-
Container for supported principals.
- supports(String) - Method in class net.shibboleth.idp.authn.principal.GenericPrincipalSerializer
-
Whether the supplied value can be deserialized.
- supports(String) - Method in class net.shibboleth.idp.authn.principal.SealedPrincipalSerializer
-
Whether the supplied value can be deserialized.
- supports(String) - Method in class net.shibboleth.idp.authn.principal.SimplePrincipalSerializer
-
Whether the supplied value can be deserialized.
- supports(Principal) - Method in class net.shibboleth.idp.authn.principal.GenericPrincipalSerializer
-
Whether the supplied principal can be serialized.
- supports(Principal) - Method in interface net.shibboleth.idp.authn.principal.PrincipalSerializer
-
Whether the supplied principal can be serialized.
- supports(Principal) - Method in class net.shibboleth.idp.authn.principal.SealedPrincipalSerializer
-
Whether the supplied principal can be serialized.
- supports(Principal) - Method in class net.shibboleth.idp.authn.principal.SimplePrincipalSerializer
-
Whether the supplied principal can be serialized.
- supports(Type) - Method in interface net.shibboleth.idp.authn.principal.PrincipalSerializer
-
Whether the supplied value can be deserialized.
- supportsForced - Variable in class net.shibboleth.idp.authn.AuthenticationFlowDescriptor
-
Whether this flow supports forced authentication.
- supportsNonBrowser - Variable in class net.shibboleth.idp.authn.AuthenticationFlowDescriptor
-
Whether this flow supports non-browser clients.
- supportsPassive - Variable in class net.shibboleth.idp.authn.AuthenticationFlowDescriptor
-
Whether this flow supports passive authentication.
- SWF_KEY - Static variable in class net.shibboleth.idp.authn.ExternalAuthentication
-
Parameter supplied to locate the SWF object needed in the servlet context.
- symbolics - Variable in class net.shibboleth.idp.authn.principal.GenericPrincipalSerializer
-
Shrinkage of long constants into symbolic numbers.
T
- template - Variable in class net.shibboleth.idp.authn.AbstractTemplateSearchDnResolver
-
Template.
- TemplateSearchDnResolver - Class in net.shibboleth.idp.authn
-
Template-based search dn resolver. - TemplateSearchDnResolver(VelocityEngine, String) - Constructor for class net.shibboleth.idp.authn.TemplateSearchDnResolver
-
Creates a new template search DN resolver.
- TemplateSearchDnResolver(ConnectionFactory, VelocityEngine, String) - Constructor for class net.shibboleth.idp.authn.TemplateSearchDnResolver
-
Creates a new template search DN resolver.
- test(String) - Method in class net.shibboleth.idp.authn.AbstractValidationAction.MessageChecker
- test(ProfileRequestContext) - Method in class net.shibboleth.idp.authn.AuthenticationFlowDescriptor.ProxyCountPredicate
- test(ProfileRequestContext) - Method in class net.shibboleth.idp.authn.AuthenticationFlowDescriptor
- test(ProfileRequestContext) - Method in class net.shibboleth.idp.authn.AuthenticationResult.DescriptorReusePredicate
- test(ProfileRequestContext) - Method in class net.shibboleth.idp.authn.AuthenticationResult.ProxyRestrictionReusePredicate
- test(ProfileRequestContext) - Method in class net.shibboleth.idp.authn.AuthenticationResult
- test(ProfileRequestContext) - Method in class net.shibboleth.idp.authn.config.navigate.ForceAuthnProfileConfigPredicate
- test(ProfileRequestContext) - Method in class net.shibboleth.idp.authn.principal.ProxyAuthenticationPrincipal
- test(ProfileRequestContext) - Method in class net.shibboleth.idp.authn.SubjectCanonicalizationFlowDescriptor
- test(ProfileRequestContext, AuthenticationResult) - Method in class net.shibboleth.idp.authn.AuthenticationResult.DescriptorRevocationPredicate
- ticket - Variable in class net.shibboleth.idp.authn.context.KerberosTicketContext
-
Kerberos ticket to be validated.
- toString() - Method in class net.shibboleth.idp.authn.AuthenticationFlowDescriptor
- toString() - Method in class net.shibboleth.idp.authn.AuthenticationResult
- toString() - Method in class net.shibboleth.idp.authn.config.LDAPAuthenticationFactoryBean
- toString() - Method in class net.shibboleth.idp.authn.context.AuthenticationContext
- toString() - Method in class net.shibboleth.idp.authn.context.LDAPResponseContext
- toString() - Method in class net.shibboleth.idp.authn.duo.DuoPrincipal
- toString() - Method in class net.shibboleth.idp.authn.PooledTemplateSearchDnResolver
- toString() - Method in class net.shibboleth.idp.authn.principal.AuthenticationResultPrincipal
- toString() - Method in class net.shibboleth.idp.authn.principal.HOTPPrincipal
- toString() - Method in class net.shibboleth.idp.authn.principal.IdPAttributePrincipal
- toString() - Method in class net.shibboleth.idp.authn.principal.PasswordPrincipal
- toString() - Method in class net.shibboleth.idp.authn.principal.ProxyAuthenticationPrincipal
- toString() - Method in class net.shibboleth.idp.authn.principal.TOTPPrincipal
- toString() - Method in class net.shibboleth.idp.authn.principal.UsernamePrincipal
- toString() - Method in class net.shibboleth.idp.authn.SubjectCanonicalizationFlowDescriptor
- toString() - Method in class net.shibboleth.idp.authn.TemplateSearchDnResolver
- TOTPPrincipal - Class in net.shibboleth.idp.authn.principal
-
Principal based on a TOTP authentication.
- TOTPPrincipal(String) - Constructor for class net.shibboleth.idp.authn.principal.TOTPPrincipal
-
Constructor.
- TRANSFORMED_USERNAME - Static variable in class net.shibboleth.idp.authn.AuthnAuditFields
-
A username after undergoing transformation for input to validation.
- transformedUsername - Variable in class net.shibboleth.idp.authn.context.UsernamePasswordContext
-
The transformed username.
- transforms - Variable in class net.shibboleth.idp.authn.AbstractExtractionAction
-
Match patterns and replacement strings to apply.
- transforms - Variable in class net.shibboleth.idp.authn.AbstractSubjectCanonicalizationAction
-
Match patterns and replacement strings to apply.
- transforms - Variable in class net.shibboleth.idp.authn.AbstractUsernamePasswordCredentialValidator
-
Match patterns and replacement strings to apply prior to use.
- transitionMap - Variable in class net.shibboleth.idp.authn.context.MultiFactorAuthenticationContext
-
Map of login "factors" (flows) and the transition rules to run after them.
- trim - Variable in class net.shibboleth.idp.authn.AbstractExtractionAction
-
Trim prior to transforms?
- trim - Variable in class net.shibboleth.idp.authn.AbstractSubjectCanonicalizationAction
-
Trim prior to transforms?
- trim - Variable in class net.shibboleth.idp.authn.AbstractUsernamePasswordCredentialValidator
-
Trim username prior to transforms?
- trustCertificatesCredentialConfig - Variable in class net.shibboleth.idp.authn.config.LDAPAuthenticationFactoryBean
-
Trust configuration when using certificate based trust.
- truststoreCredentialConfig - Variable in class net.shibboleth.idp.authn.config.LDAPAuthenticationFactoryBean
-
Trust configuration when using truststore based trust.
- trustType - Variable in class net.shibboleth.idp.authn.config.LDAPAuthenticationFactoryBean
-
Type of trust model to configure.
- TrustType(String) - Constructor for enum net.shibboleth.idp.authn.config.LDAPAuthenticationFactoryBean.TrustType
- typeAndOperator - Variable in class net.shibboleth.idp.authn.principal.PrincipalEvalPredicateFactoryRegistration
-
The class and operator pair.
U
- UNKNOWN_USERNAME - Static variable in class net.shibboleth.idp.authn.AuthnEventIds
-
ID of event returned if a username is unknown.
- uppercase - Variable in class net.shibboleth.idp.authn.AbstractExtractionAction
-
Convert to uppercase prior to transforms?
- uppercase - Variable in class net.shibboleth.idp.authn.AbstractSubjectCanonicalizationAction
-
Convert to uppercase prior to transforms?
- uppercase - Variable in class net.shibboleth.idp.authn.AbstractUsernamePasswordCredentialValidator
-
Convert username to uppercase prior to transforms?
- usePasswordExpiration - Variable in class net.shibboleth.idp.authn.config.LDAPAuthenticationFactoryBean
-
Whether to use the password expiration control with the BIND operation.
- usePasswordPolicy - Variable in class net.shibboleth.idp.authn.config.LDAPAuthenticationFactoryBean
-
Whether to use the password policy control with the BIND operation.
- userAgent - Variable in class net.shibboleth.idp.authn.context.UserAgentContext
-
Parsed User-Agent.
- UserAgentContext - Class in net.shibboleth.idp.authn.context
-
A context containing data about the user agent.
- UserAgentContext() - Constructor for class net.shibboleth.idp.authn.context.UserAgentContext
- userFilter - Variable in class net.shibboleth.idp.authn.config.LDAPAuthenticationFactoryBean
-
LDAP filter used to search for users.
- username - Variable in class net.shibboleth.idp.authn.context.UsernameContext
-
The username.
- username - Variable in class net.shibboleth.idp.authn.context.UsernamePasswordContext
-
The original username.
- username - Variable in class net.shibboleth.idp.authn.duo.context.DuoAuthenticationContext
-
Username.
- username - Variable in class net.shibboleth.idp.authn.duo.DuoPrincipal
-
The username.
- username - Variable in class net.shibboleth.idp.authn.principal.HOTPPrincipal
-
The username.
- username - Variable in class net.shibboleth.idp.authn.principal.TOTPPrincipal
-
The username.
- username - Variable in class net.shibboleth.idp.authn.principal.UsernamePrincipal
-
The username.
- UsernameContext - Class in net.shibboleth.idp.authn.context
-
Context that carries a username (without a password) to be validated.
- UsernameContext() - Constructor for class net.shibboleth.idp.authn.context.UsernameContext
- UsernamePasswordContext - Class in net.shibboleth.idp.authn.context
-
Context that carries a username/password pair to be validated.
- UsernamePasswordContext() - Constructor for class net.shibboleth.idp.authn.context.UsernamePasswordContext
- usernamePasswordContextLookupStrategy - Variable in class net.shibboleth.idp.authn.AbstractUsernamePasswordCredentialValidator
-
Lookup strategy for UP context.
- UsernamePrincipal - Class in net.shibboleth.idp.authn.principal
-
Principal based on a username.
- UsernamePrincipal(String) - Constructor for class net.shibboleth.idp.authn.principal.UsernamePrincipal
-
Constructor.
- useSSL - Variable in class net.shibboleth.idp.authn.config.LDAPAuthenticationFactoryBean
-
Whether to use LDAPS for connections.
- useStartTLS - Variable in class net.shibboleth.idp.authn.config.LDAPAuthenticationFactoryBean
-
Whether to use startTLS for connections.
V
- validate(ProfileRequestContext, AuthenticationContext, CredentialValidator.WarningHandler, CredentialValidator.ErrorHandler) - Method in class net.shibboleth.idp.authn.AbstractCredentialValidator
-
Validate any credentials found in a supported form within the input context tree and produce a
Subjectas the outcome. - validate(ProfileRequestContext, AuthenticationContext, CredentialValidator.WarningHandler, CredentialValidator.ErrorHandler) - Method in interface net.shibboleth.idp.authn.CredentialValidator
-
Validate any credentials found in a supported form within the input context tree and produce a
Subjectas the outcome. - validateDn - Variable in class net.shibboleth.idp.authn.config.LDAPAuthenticationFactoryBean
-
DN to perform connection pool validation against.
- validateFilter - Variable in class net.shibboleth.idp.authn.config.LDAPAuthenticationFactoryBean
-
Filter to execute against
LDAPAuthenticationFactoryBean.validateDn. - validateOnCheckout - Variable in class net.shibboleth.idp.authn.config.LDAPAuthenticationFactoryBean
-
Whether to validate connections when checked out from the pool.
- validatePeriod - Variable in class net.shibboleth.idp.authn.config.LDAPAuthenticationFactoryBean
-
Period at which to validate periodically.
- validatePeriodically - Variable in class net.shibboleth.idp.authn.config.LDAPAuthenticationFactoryBean
-
Whether to validate connections periodically on a background thread.
- valueOf(String) - Static method in enum net.shibboleth.idp.authn.config.LDAPAuthenticationFactoryBean.AuthenticatorType
-
Returns the enum constant of this type with the specified name.
- valueOf(String) - Static method in enum net.shibboleth.idp.authn.config.LDAPAuthenticationFactoryBean.ConnectionStrategyType
-
Returns the enum constant of this type with the specified name.
- valueOf(String) - Static method in enum net.shibboleth.idp.authn.config.LDAPAuthenticationFactoryBean.PassivatorType
-
Returns the enum constant of this type with the specified name.
- valueOf(String) - Static method in enum net.shibboleth.idp.authn.config.LDAPAuthenticationFactoryBean.TrustType
-
Returns the enum constant of this type with the specified name.
- values() - Static method in enum net.shibboleth.idp.authn.config.LDAPAuthenticationFactoryBean.AuthenticatorType
-
Returns an array containing the constants of this enum type, in the order they are declared.
- values() - Static method in enum net.shibboleth.idp.authn.config.LDAPAuthenticationFactoryBean.ConnectionStrategyType
-
Returns an array containing the constants of this enum type, in the order they are declared.
- values() - Static method in enum net.shibboleth.idp.authn.config.LDAPAuthenticationFactoryBean.PassivatorType
-
Returns an array containing the constants of this enum type, in the order they are declared.
- values() - Static method in enum net.shibboleth.idp.authn.config.LDAPAuthenticationFactoryBean.TrustType
-
Returns an array containing the constants of this enum type, in the order they are declared.
- velocityEngine - Variable in class net.shibboleth.idp.authn.config.LDAPAuthenticationFactoryBean
-
Velocity engine used to materialize the LDAP filter.
W
- WeightedComparator() - Constructor for class net.shibboleth.idp.authn.AuthenticationFlowDescriptor.WeightedComparator
X
- X509_ISSUER - Static variable in class net.shibboleth.idp.authn.AuthnAuditFields
-
X.509 cerificate subject.
- X509_SUBJECT - Static variable in class net.shibboleth.idp.authn.AuthnAuditFields
-
X.509 cerificate subject.
All Classes All Packages