Uses of Class
net.shibboleth.idp.profile.AbstractProfileAction
Packages that use AbstractProfileAction
Package
Description
Implementation classes for administrative profiles.
APIs related to the authentication of a subject.
Implementation of various authentication actions.
Classes implementing proxied authentication flows.
Predicates related to authentication.
CAS protocol flow implementations.
Actions and flow descriptors related to attribute release consent.
Actions and flow descriptors related to consent.
Actions related to consent storage.
Common APIs for handling profile requests.
Audit implementation classes.
Implementations of various profile actions.
Classes supporting profile interceptor machinery.
Implementation of a profile interceptor flow which executes other flows.
Classes implementing SAML-specific audit log behavior.
Implementation of SAML
NameID and
NameIdentifier generation and consumption.Actions common to SAML 1 and SAML 2 processing.
Testing utility classes for SAML profile code.
Profile processing actions related to SAML 1 messages.
Profile processing actions related to SAML 2 messages.
Implementation classes for SAML-specific session functionality.
Implementations of session-related classes and interfaces.
Implementation classes for information needed by the UI.
-
Uses of AbstractProfileAction in net.shibboleth.idp.admin.impl
Subclasses of AbstractProfileAction in net.shibboleth.idp.admin.implModifier and TypeClassDescriptionclassAction that implements a JSON REST API for accessingStorageServicerecords.classAn action that processes settings from a suppliedAdministrativeFlowDescriptorto prepare the profile context tree for subsequent use by an administrative profile flow.classAction that outputs the settings from the effectiveProfileConfigurationand so on.classAction that outputs one or moreMetricobjects.classAction that sets keystore and key passwords for one or more DataSealer KeyStrategy objects based on query parameters.classAction that creates private key objects and injects them into existingMutableCredentialobjects. -
Uses of AbstractProfileAction in net.shibboleth.idp.authn
Subclasses of AbstractProfileAction in net.shibboleth.idp.authnModifier and TypeClassDescriptionclassA base class for authentication related actions.classA base class for authentication actions that extract usernames for subsequent use.classA base class for subject canonicalization actions.classA base class for authentication related actions that validate credentials and produce anAuthenticationResult. -
Uses of AbstractProfileAction in net.shibboleth.idp.authn.impl
Subclasses of AbstractProfileAction in net.shibboleth.idp.authn.implModifier and TypeClassDescriptionclassBase class for validation actions that includes new audit logging support.classAn action that extracts a resolvedIdPAttributevalue from anAttributeContextchild obtained via lookup function (by default a child of theSubjectCanonicalizationContext), and uses it as the result of subject canonicalization.classAction that implements a JSON REST API for theAccountLockoutManagerinterface.classAn action that extracts an asserted user identity from the incoming request, creates aUsernameContext, and attaches it to theAuthenticationContext.classAn action that extracts the user-agent's IP address from the incoming request, creates aUserAgentContext, and attaches it to theAuthenticationContext.classAn action that extracts the user-agent's identifier from the incoming request, creates aUserAgentContext, and attaches it to theAuthenticationContext.class/** An action that extracts a username and password from the HTTPHttpHeaders.AUTHORIZATIONheader, creates aUsernamePasswordContext, and attaches it to theAuthenticationContext.classAn action that extracts a username and password from an HTTP form body or query string, creates aUsernamePasswordContext, and attaches it to theAuthenticationContext.classAn authentication stage that extracts a username/password from the WSS Username/Password attached to a SOAP message.classAn action that extracts an X.509 certificate from the standard servlet request attribute, creates aCertificateContext, and attaches it to theAuthenticationContext.classAn authentication action that filters out potential authentication flows if the request requires forced authentication or max age behavior and the flows don't support forced authentication.classAn authentication action that filters out potential authentication flows if the request requires non-browser support and the flows require a browser.classAn authentication action that runs after a completed authentication flow (or the reuse of an active result) and transfers information from other contexts into aSubjectContextchild of theProfileRequestContext.classAn authentication action that completes MFA by producing a finalAuthenticationResultout of whatever constituent parts and pieces exist, by means of an overridable function, storing it in theAuthenticationContextand preparing a freshSubjectCanonicalizationContextto operate on.classAn action that creates anRequestedPrincipalContextand attaches it to the currentAuthenticationContext, if the profile request context contains aRelyingPartyContextwith anAuthenticationProfileConfigurationcontaining one or more default authentication methods.classAn action that populates anAuthenticationContextwith theAuthenticationFlowDescriptorobjects configured into the IdP, potential flows filtered by flow IDs from a lookup function.classAn action that creates and populates aMultiFactorAuthenticationContextwith the set of transition rules to use for coordinating activity, the executingAuthenticationFlowDescriptorand with any active "factors" found, if an active result from the MFA flow is present in theAuthenticationContext.classAn action that populates aSubjectCanonicalizationContextwith theSubjectCanonicalizationFlowDescriptorobjects configured into the IdP.classAn action to populate a username into a clearedUsernamePasswordContext, either from a form submission, a cookie, or an existing session to "prime" the login view.classAn action that extracts configured parameters from a servlet request and populatesAuthenticationContext.getAuthenticationStateMap()with the data.classAn authentication action that selects an authentication flow to invoke, or re-uses an existing result for SSO.classA canonicalization action that selects a canonicalization flow to invoke.classAn action that operates on aSubjectCanonicalizationContextchild of the currentProfileRequestContext, and transforms the inputSubjectinto a principal name by searching for one and only oneUsernamePrincipalcustom principal.classAn authentication action that acts as the driver regulating execution of transitions between MFA stages.classAn action that processes a list ofCredentialValidatorobjects to produce anAuthenticationResult.classAn action that checks for anExternalAuthenticationContextand directly produces anAuthenticationResultor records error state based on the contents.classAn action that executes a deployer-supplied function and produces anAuthenticationResultbased on the function result.classAn action that checks for aUsernameContextand directly produces anAuthenticationResultbased on that identity.classAn action that ensures that a user-agent address found within aUserAgentContextis within a given range and generates anAuthenticationResult.classAn action that operates on aSubjectCanonicalizationContextchild of the currentProfileRequestContext, and transforms the inputSubjectinto a principal name by searching for one and only oneX509Certificatepublic credential, or in its absence one and only oneX500Principal. -
Uses of AbstractProfileAction in net.shibboleth.idp.authn.proxy.impl
Subclasses of AbstractProfileAction in net.shibboleth.idp.authn.proxy.implModifier and TypeClassDescriptionclassAn action that extracts a discovery service result and copies it to theAuthenticationContext.final classAction that creates a newProfileRequestContextvia a creation strategy, and sets the profile and logging IDs, if provided. -
Uses of AbstractProfileAction in net.shibboleth.idp.authn.revocation.impl
Subclasses of AbstractProfileAction in net.shibboleth.idp.authn.revocation.implModifier and TypeClassDescriptionclassAction that implements a JSON REST API for theRevocationCacheinterface. -
Uses of AbstractProfileAction in net.shibboleth.idp.cas.flow.impl
Subclasses of AbstractProfileAction in net.shibboleth.idp.cas.flow.implModifier and TypeClassDescriptionclassAbstractCASProtocolAction<RequestType,ResponseType> Base class for CAS protocol actions.classBase class for all actions that build SAMLResponsemessages for output.classBuilds an authentication context from an incomingServiceTicketRequestmessage.classAction that builds the chain of visited proxies for a successful proxy ticket validation event.classBuildRelyingPartyContextAction<RequestType,ResponseType> Creates theRelyingPartyContextas a child of theProfileRequestContext.classBuildSAMLMetadataContextAction<RequestType,ResponseType> Builds aSAMLMetadataContextchild ofRelyingPartyContextto facilitate relying party selection by group name.classCreates the SAML response message for failed ticket validation at the/samlValidateURI.classCreates the SAML response message for successful ticket validation at the/samlValidateURI.classCheckProxyAuthorizationAction<RequestType,ResponseType> Checks the currentServiceContextto determine whether the service/relying party is authorized to proxy.classGenerates and stores a CAS protocol proxy ticket.classGenerates and stores a CAS protocol service ticket.classInitializes the CAS protocol interaction at the/loginURI.classInitializes the CAS protocol interaction at the/proxyURI.classInitializes the CAS protocol interaction at the/loginURI.classPopulateProtocolErrorAction<RequestType>Populates error information needed for protocol error messages.classPreparesTicketValidationResponsefor use in CAS protocol response views.classProcesses the ticket validation request message from decoded SAML 1.1 message and request parameters.classPublishProtocolMessageAction<RequestType,ResponseType> Action to publish the CAS protocol request or response messages, i.e.classUpdateIdPSessionWithSPSessionAction<RequestType,ResponseType> Conditionally updates theIdPSessionwith aCASSPSessionto support SLO.classValidates the proxy callback URL provided in the service ticket validation request and creates a PGT when the proxy callback is successfully authenticated.classEnsures that a service ticket validation request that specifies renew=true matches the renew flag on the ticket that is presented for validation.classCAS protocol service ticket validation action.classCAS 1.0 protocol response handler. -
Uses of AbstractProfileAction in net.shibboleth.idp.consent.flow.ar.impl
Subclasses of AbstractProfileAction in net.shibboleth.idp.consent.flow.ar.implModifier and TypeClassDescriptionclassBase class for attribute release consent actions.classAction that creates anAttributeReleaseContextand attaches it to the currentProfileRequestContext.classAttribute consent action to populate the attribute consent context with the attributes for which consent should be obtained.classAttribute consent action which constrains the attributes released to those consented to.classConsent action which validates extracted user input when per-attribute consent is not enabled. -
Uses of AbstractProfileAction in net.shibboleth.idp.consent.flow.impl
Subclasses of AbstractProfileAction in net.shibboleth.idp.consent.flow.implModifier and TypeClassDescriptionclassBase class for consent actions.classConsent action which extracts user input and updates current consent objects in the consent context accordingly.classAction that creates aConsentContextand attaches it to the currentProfileRequestContext.classConsent action which populates the current consents of a consent context with the output value of a function whose input value is a profile request context. -
Uses of AbstractProfileAction in net.shibboleth.idp.consent.flow.storage.impl
Subclasses of AbstractProfileAction in net.shibboleth.idp.consent.flow.storage.implModifier and TypeClassDescriptionclassBase class for consent actions which write to aStorageService.classBase class for consent actions which interact with aStorageService.classConsent action to create a consent result representing global consent to be stored in a storage service.classConsent action to create a consent result representing the result of a consent flow.classConsent action which reads consent records from storage and adds the serialized consent records to the consent context as previous consents.classConsent action which deletes a consent record from storage.classConsent action which maintains a storage record whose value is the current time in milliseconds. -
Uses of AbstractProfileAction in net.shibboleth.idp.profile
Subclasses of AbstractProfileAction in net.shibboleth.idp.profileModifier and TypeClassDescriptionclassAn action which calls out to a supplied script. -
Uses of AbstractProfileAction in net.shibboleth.idp.profile.audit.impl
Subclasses of AbstractProfileAction in net.shibboleth.idp.profile.audit.implModifier and TypeClassDescriptionclassAction that populates fields in anAuditContextusing injected functions.classAction that produces audit log entries based on anAuditContextand one or more formatting strings. -
Uses of AbstractProfileAction in net.shibboleth.idp.profile.impl
Subclasses of AbstractProfileAction in net.shibboleth.idp.profile.implModifier and TypeClassDescriptionclassAction that invokes theAttributeFilterfor the current request.final classAction that creates a newProfileRequestContextand binds it to the current conversation under theProfileRequestContext.BINDING_KEYkey, and sets the profile and logging IDs, if provided.classSpring Web Flow utility action for logging on DEBUG a representation of the currentProfileRequestContext.classSpring Web Flow utility action for logging on DEBUG details about the current hierarchy of SpringApplicationContextand the beans contained within each.classAn action that populates a principal name obtained from a lookup function into aSubjectContextchild of theProfileRequestContext.classAn action that conditionally populates aUserAgentContextas a child of theProfileRequestContext.classAction that records the "Response Complete" status on the external context if not done so already.classAction that refreshes aReloadableServicemanually.final classAction that invokes theAttributeResolverfor the current request.classAction that selects theProfileConfigurationfor the given request and sets it in the looked-upRelyingPartyContext.final classThis action attempts to resolve aRelyingPartyConfigurationand adds it to theRelyingPartyContextthat was looked up.classAnAbstractProfileActionsubclass that adapts an OpenSAMLMessageHandlerfor execution in a Spring WebFlow environment.classAdaptor that wraps aProfileActionwith a Spring Web Flow compatible action implementation so that it can be executed as part of a flow. -
Uses of AbstractProfileAction in net.shibboleth.idp.profile.interceptor
Subclasses of AbstractProfileAction in net.shibboleth.idp.profile.interceptorModifier and TypeClassDescriptionclassA base class for profile interceptor actions. -
Uses of AbstractProfileAction in net.shibboleth.idp.profile.interceptor.impl
Subclasses of AbstractProfileAction in net.shibboleth.idp.profile.interceptor.implModifier and TypeClassDescriptionclassA profile interceptor action that filters out available interceptor flows if the request requires non-browser support and the flows require a browser.classAn profile interceptor action that populates aProfileInterceptorContextwithProfileInterceptorFlowDescriptorobjects based on flow IDs from a lookup function.classA profile interceptor action that selects flows to invoke.classA profile interceptor action that writes aProfileInterceptorResultto aStorageService. -
Uses of AbstractProfileAction in net.shibboleth.idp.saml.audit.impl
Subclasses of AbstractProfileAction in net.shibboleth.idp.saml.audit.implModifier and TypeClassDescriptionclassAction that produces F-TICKS log entries for successful SAML SSO responses. -
Uses of AbstractProfileAction in net.shibboleth.idp.saml.nameid.impl
Subclasses of AbstractProfileAction in net.shibboleth.idp.saml.nameid.implModifier and TypeClassDescriptionclassAction to perform subject canonicalization, transforming the inputSubjectinto a principal name by searching for one and only oneNameIDPrincipalcustom principal, using an injectedNameIDDecoderto carry out the process.classAction to perform subject canonicalization, transforming the inputSubjectinto a principal name by searching for one and only oneNameIdentifierPrincipalcustom principal, using an injectedNameIdentifierDecoderto carry out the process. -
Uses of AbstractProfileAction in net.shibboleth.idp.saml.profile.impl
Subclasses of AbstractProfileAction in net.shibboleth.idp.saml.profile.implModifier and TypeClassDescriptionclassBaseAddAttributeStatementToAssertion<T extends SAMLObject>Base class for actions that encode anAttributeContextinto a SAML attribute statement.classBase class for actions that encode authentication information into a SAML 1 or SAML 2 statement.classAction that extracts a SAML Subject from an inbound message, and prepares aSubjectCanonicalizationContextto process it into a principal identity.classAn action that runs after a completed canonicalization of a SAML Subject and transfers information into aSubjectContextchild of theProfileRequestContext.classAn action that creates anAuthenticationContextand attaches it to the currentProfileRequestContext.classAction that adds an outboundMessageContextand related SAML contexts to theProfileRequestContextbased on the identity of a relying party accessed via a lookup strategy, by default an immediate child of the profile request context.classAction that prepares an outboundMessageContextand related SAML contexts in the event that they are not already prepared, to allow error responses to be generated in the case of synchronous bindings (i.e., SOAP).classAction that adds aRelyingPartyContextto the currentProfileRequestContexttree via a creation function.classAction that populates the outboundSAMLBindingContextand when appropriate theSAMLEndpointContextbased on the inbound request.classAction that adds aSAMLSelfEntityContextto the inboundMessageContextclassAction that refreshes or clears aMetadataResolvermanually.classAction that updates inbound and/or outbound instances ofSAMLSelfEntityContextbased on the identity of a relying party accessed via a lookup strategy, by default an immediate child of the profile request context. -
Uses of AbstractProfileAction in net.shibboleth.idp.saml.profile.testing
Subclasses of AbstractProfileAction in net.shibboleth.idp.saml.profile.testing -
Uses of AbstractProfileAction in net.shibboleth.idp.saml.saml1.profile.impl
Subclasses of AbstractProfileAction in net.shibboleth.idp.saml.saml1.profile.implModifier and TypeClassDescriptionclassAction that builds anAttributeStatementand adds it to anAssertionreturned by a lookup strategy, by default in theInOutOperationContext.getOutboundMessageContext().classAction that builds anAuthenticationStatementand adds it to anAssertionreturned by a lookup strategy, by default in theInOutOperationContext.getOutboundMessageContext().classAction that filters a set of attributes against theAttributeDesignatorobjects in anAttributeQuery. -
Uses of AbstractProfileAction in net.shibboleth.idp.saml.saml2.profile.impl
Subclasses of AbstractProfileAction in net.shibboleth.idp.saml.saml2.profile.implModifier and TypeClassDescriptionclassAction that builds anAttributeStatementand adds it to anAssertionreturned by a lookup strategy, by default in theInOutOperationContext.getOutboundMessageContext().classAction that creates anAuthnRequestand sets it as the message returned byInOutOperationContext.getOutboundMessageContext().classAction that builds anAuthnStatementand adds it to anAssertionreturned by a lookup strategy, by default in theInOutOperationContext.getOutboundMessageContext().classAn action that checks for anExternalAuthenticationContextfor a signaled event via theExternalAuthenticationContext.getAuthnError()method, and otherwise enforces the presence of an inbound SAML Response to process.classAn action that processes a SAML 2AuthnRequestand blocks the use of any "simple" disallowed features.classAction that filters a set of attributes against theAttributeobjects in anAttributeQuery.classAction that ensures that the attributes in the ACS (if any) are mapped.classAction that resolves and populatesEncryptionParameterson anEncryptionContextcreated/accessed via a lookup function, by default on aRelyingPartyContextchild of the profile request context.classProfile action that performs initial analysis of aLogoutRequestorLogoutResponseto dispatch it for subsequent processing.classPerform processing of a SAML 2 Response's Assertions that have been validated by earlier actions for use in finalization of SAML-based authentication by later actions.classProfile action that processes aLogoutRequestby resolving matching sessions, and destroys them, populating the associatedSPSessionobjects (excepting the one initiating the logout) into aLogoutContext.classAn authentication action that processes theRequestedAuthnContextin a SAML 2AuthnRequest, and populates aRequestedPrincipalContextwith the corresponding information.classProfile action that propagates a preparedLogoutRequestmessage to an SP via the SOAP binding, encapsulating SOAP pipeline construction and execution.classAn action that produces anAuthenticationResultbased on an inbound SAML 2.0 SSO response. -
Uses of AbstractProfileAction in net.shibboleth.idp.saml.session.impl
Subclasses of AbstractProfileAction in net.shibboleth.idp.saml.session.implModifier and TypeClassDescriptionclassAction that adds an inboundMessageContextand aSAMLPeerEntityContextto theProfileRequestContextbased on the identity of a relying party, by default from aSAML2SPSessionfound in aLogoutPropagationContext. -
Uses of AbstractProfileAction in net.shibboleth.idp.session.impl
Subclasses of AbstractProfileAction in net.shibboleth.idp.session.implModifier and TypeClassDescriptionclassProfile action that destroys anyIdPSessions found in aLogoutContext.classAn authentication action that checks for a mismatch between an existing session's identity and the result of a newly canonicalized subject (from aSubjectCanonicalizationContext).classAn authentication action that populates aAuthenticationContextwith the activeAuthenticationResultobjects found in aSessionContextthat is a direct child of theProfileRequestContext.classProfile action that creates aLogoutPropagationContextcontainingSPSessionto be destroyed.classProfile action that populates aMultiRelyingPartyContextwith the relying party information from aLogoutContext, and extends eachRelyingPartyContextcreated with aSAMLMetadataContextbased on metadata lookup.classA profile action that populates aSessionContextwith an active, validIdPSession.classProfile action that resolves an active session from the profile request, and records it, populating the associatedSPSessionobjects into aLogoutContext.classRestores specific portions of the context tree used during logout processing to enable reuse of logout propagation subflows during back channel logout.classStores theLogoutContextin the servlet session to facilitate lookup by logout propagation flows.classSaves off specific portions of the context tree in use during logout processing to enable reuse of logout propagation subflows during back channel logout.classA profile action that selects a logout propagation flow to invoke.classAn authentication action that establishes a record of theAuthenticationResultin anIdPSessionfor the client, either by updating an existing session or creating a new one.classAn action that establishes a record of anSPSessionin an existingIdPSessionfor the client. -
Uses of AbstractProfileAction in net.shibboleth.idp.ui.impl
Subclasses of AbstractProfileAction in net.shibboleth.idp.ui.implModifier and TypeClassDescriptionclassAction to populate theProfileRequestContextwith aRelyingPartyUIContext.