Package net.shibboleth.idp.saml.nameid.impl
@NonnullElements
package net.shibboleth.idp.saml.nameid.impl
Implementation of SAML
NameID and
NameIdentifier generation and consumption.-
ClassDescriptionGenerator for
NameIdentifierobjects based onIdPAttributedata.Generator forNameIDobjects based onIdPAttributedata.An abstract action which contains the logic to do crypto transient decoding matching.Regular expression, etc.An abstract action which contains the logic to do transient decoding matching (shared between SAML2 and SAML1).Generates transients using aDataSealerto encrypt the result into a recoverable value, for use with stateless clustering.Processes a transientNameID, checks that itsNameIDType.getNameQualifier()andNameIDType.getSPNameQualifier()are correct, and decodesXSString.getValue()via the base class (reversing the work done byCryptoTransientIdGenerationStrategy).Processes a transientNameIdentifier, checks that itsNameIdentifier.getNameQualifier()is correct, and decodesXSString.getValue()via the base class (reversing the work done byCryptoTransientIdGenerationStrategy).Action to perform subject canonicalization, transforming the inputSubjectinto a principal name by searching for one and only oneNameIDPrincipalcustom principal, using an injectedNameIDDecoderto carry out the process.A predicate that determines if this action can run or not.Action to perform subject canonicalization, transforming the inputSubjectinto a principal name by searching for one and only oneNameIdentifierPrincipalcustom principal, using an injectedNameIdentifierDecoderto carry out the process.A predicate that determines if this action can run or not.Implementation ofNameIdentifierGenerationService.Generator for "persistent" FormatNameIDobjects that provides a source/seed ID based onIdPAttributedata.A compound implementation of theSAML1NameIdentifierGeneratorinterface that wraps a sequence of candidate generators along with a default to try if no format-specific options are available.A compound implementation of theSAML2NameIDGeneratorinterface that wraps a sequence of candidate generators along with a default to try if no format-specific options are available.An abstract decoder which contains the logic to decode SAML persistent IDs that are managed with aDurablePairwiseIdStore.Generates transients using aStorageServiceto manage the reverse mappings.Transform from aNameID.Transform from aNameIdentifier.Generates and manages transient identifiers according to specific strategies.The Parameters we need to store in, and get out of a transient ID, namely the attribute recipient (aka the SP) and the principal.DecodesXSString.getValue()via the base class (reversing the work done byTransientSAML2NameIDGenerator).DecodesXSString.getValue()via the base class (reversing the work done byTransientSAML1NameIdentifierGenerator).Generator for transientNameIdentifierobjects.Generator for transientNameIDobjects.