All Classes and Interfaces
Class
Description
A base class for authentication related actions.
An abstract
CredentialValidator that handles some common behavior.A base class for authentication actions that extract usernames for subsequent use.
Base class for
PrincipalSerializer implementations.A base class for subject canonicalization actions.
Base class for
Template based search dn resolvers.Escapes LDAP attribute values added to the template context.
An abstract
CredentialValidator that checks for a UsernamePasswordContext and delegates
to subclasses to produce a result.A base class for authentication related actions that validate credentials and produce an
AuthenticationResult.A component that manages lockout state for accounts.
A context representing the state of an authentication attempt, this is the primary
input/output context for the action flow responsible for authentication, and
within that flow, the individual flows that carry out a specific kind of
authentication.
A context that holds information about authentication failures.
A descriptor for an authentication flow.
A function that returns
AuthenticationProfileConfiguration.getAuthenticationFlows(org.opensaml.profile.context.ProfileRequestContext)()
if such a profile is available from a RelyingPartyContext obtained via a lookup function,
by default a child of the ProfileRequestContext.Configuration of profiles for authentication.
Describes an act of authentication.
Principal that wraps an
AuthenticationResult.A context that holds information about authentication warnings.
Constants to use for audit logging fields stored in an
AuditContext.Constants to use for
ProfileAction
EventContext results related to
authentication and subject c14n.Context that carries a
Certificate to be validated.Principal that can be cloned without knowledge of the underlying type.
High-level API for validating credentials and producing a Java Subject as a result.
Interface to use to report errors to the caller.
Interface to use to report warnings to the caller.
An extension to
AccountLockoutManager that allows for enumeration over
partial matches of a key.Public interface supporting external authentication outside the webflow engine.
A context representing the state of an externalized authentication attempt,
a case where authentication happens outside of a web flow.
Exception indicating a problem with the external authentication process.
A predicate that evaluates a
ProfileRequestContext and determines whether forced
authentication should be set based on the associated AuthenticationProfileConfiguration.Principal serializer for arbitrary principal types.
PrincipalService for most principal types that just exposes the proper PrincipalSerializer.Principal based on an HOTP authentication.
Principal that wraps an
IdPAttribute.Context that carries a
KerberosTicket to be validated.LDAP Authentication configuration.
Enum that defines authenticator configuration.
Enum that defines LDAP connection strategy.
Enum that defines an LDAP pool passivator.
Enum that defines LDAP trust configuration.
A context containing data about an LDAP authentication operation.
A context that holds information about a management operation on an
AccountLockoutManager.A context that holds information about the intermediate state of the multi-factor login flow.
A ruleset for managing the transition out of a step during the multi-factor authn flow.
Principal that wraps a password.
A function that returns
AuthenticationProfileConfiguration.getPostAuthenticationFlows(org.opensaml.profile.context.ProfileRequestContext)()
if such a profile is available from a RelyingPartyContext obtained via a lookup function,
by default a child of the ProfileRequestContext.A context that holds information about an authentication request's
preference for a specific custom
Principal.A function that returns the value of
AuthenticationResult.isPreviousResult()
or null if the input context is null or AuthenticationContext.getAuthenticationResult() is null.A
Predicate to evaluate a Principal that represents a requested form of
authentication against a set of principals supported by a PrincipalSupportingComponent.Generates a
Predicate to evaluate a PrincipalSupportingComponent
against a requested form of authentication expressed in terms of a Principal.Wraps the association of a
PrincipalEvalPredicateFactory against a particular
Principal subtype and a string operator.A registry of mappings between a custom
Principal subtype with a matching operator
and a corresponding PrincipalEvalPredicateFactory that returns predicates enforcing
a particular set of matching rules for that operator and subtype.Interface for the serialization/deserialization of principals.
Interface that provides services for a
Principal of a given type.Manages and exposes instances of the
PrincipalService interface.Interface for an authentication component that exposes custom
Principal objects.A function that returns the first value stored in a
ProxyAuthenticationPrincipal
contained in a Subject.Principal that wraps a set of proxied authentication authorities and any restrictions
on subsequent re-use.
A context that holds information about an authentication request's
requirement for a specific custom
Principal.A function that returns
RequestedPrincipalContext.getOperator().A function that returns
RequestedPrincipalContext.getRequestedPrincipals() but
transforms the values into strings.Principal serializer that encrypts/decrypts the data when serializing.
Principal serializer for string-based principals that serialize to a simple JSON structure.
A context that holds an input
Subject to canonicalize into a principal name, and
the collection of c14n flows to attempt.A function that returns the
Subject from a SubjectCanonicalizationContext.Exception indicating a problem translating a subject between forms.
A descriptor for a subject canonicalization flow.
A context that holds information about the subject of a request.
A function that returns the impersonating principal name from a
SubjectContext.A function that returns the principal name from a
SubjectContext.Template-based search dn resolver.Principal based on a TOTP authentication.
A context containing data about the user agent.
Context that carries a username (without a password) to be validated.
Context that carries a username/password pair to be validated.
Principal based on a username.