net.shibboleth.idp.saml.idwsf.profile.config

Class SSOSProfileConfiguration

java.lang.Object

net.shibboleth.idp.profile.config.AbstractProfileConfiguration

net.shibboleth.idp.saml.profile.config.AbstractSAMLProfileConfiguration

net.shibboleth.idp.saml.saml2.profile.config.AbstractSAML2ProfileConfiguration

net.shibboleth.idp.saml.saml2.profile.config.BrowserSSOProfileConfiguration

net.shibboleth.idp.saml.idwsf.profile.config.SSOSProfileConfiguration

All Implemented Interfaces:

AuthenticationProfileConfiguration, ProfileConfiguration, SAMLArtifactAwareProfileConfiguration, SAMLProfileConfiguration, SAML2ProfileConfiguration, net.shibboleth.utilities.java.support.component.Component, net.shibboleth.utilities.java.support.component.IdentifiedComponent

public class SSOSProfileConfiguration
extends BrowserSSOProfileConfiguration

Configuration support for the Liberty ID-WSF SSOS profile.

Field Summary

Fields

Modifier and Type	Field and Description
private com.google.common.base.Predicate<org.opensaml.profile.context.ProfileRequestContext<org.opensaml.saml.saml2.core.RequestAbstractType,org.opensaml.saml.saml2.core.Response>>	delegationPredicate Predicate used to determine if a token may be delegated to a relying party.
private long	maximumTokenDelegationChainLength Maximum number of times a given token is allowed to have been delegated.
static String	PROFILE_ID ID for this profile configuration.

Constructor Summary

Constructors

Modifier	Constructor and Description
	SSOSProfileConfiguration() Constructor.
protected	SSOSProfileConfiguration(String profileId) Constructor.

Method Summary

Methods

Modifier and Type	Method and Description
com.google.common.base.Predicate<org.opensaml.profile.context.ProfileRequestContext<org.opensaml.saml.saml2.core.RequestAbstractType,org.opensaml.saml.saml2.core.Response>>	getDelegationPredicate() Gets predicate used to determine if a token may be delegated to a relying party.
long	getMaximumTokenDelegationChainLength() Get the maximum number of times a given token is allowed to have been delegated.
void	setDelegationPredicate(com.google.common.base.Predicate<org.opensaml.profile.context.ProfileRequestContext<org.opensaml.saml.saml2.core.RequestAbstractType,org.opensaml.saml.saml2.core.Response>> predicate) Sets the predicate used to determine if a token may be delegated to a relying party.
void	setMaximumTokenDelegationChainLength(long length) Set the maximum number of times a given token is allowed to have been delegated.

Methods inherited from class net.shibboleth.idp.saml.saml2.profile.config.BrowserSSOProfileConfiguration

getArtifactConfiguration, getAuthenticationFlows, getDefaultAuthenticationMethods, getMaximumSPSessionLifetime, getNameIDFormatPrecedence, getPostAuthenticationFlows, includeAttributeStatement, isAllowingDelegation, resolveAttributes, setAllowingDelegation, setArtifactConfiguration, setAuthenticationFlows, setDefaultAuthenticationMethods, setIncludeAttributeStatement, setMaximumSPSessionLifetime, setNameIDFormatPrecedence, setPostAuthenticationFlows, setResolveAttributes, setSkipEndpointValidationWhenSigned, skipEndpointValidationWhenSigned

Methods inherited from class net.shibboleth.idp.saml.saml2.profile.config.AbstractSAML2ProfileConfiguration

getEncryptAssertions, getEncryptAttributes, getEncryptNameIDs, getProxyAudiences, getProxyCount, isEncryptionOptional, setEncryptAssertions, setEncryptAttributes, setEncryptionOptional, setEncryptNameIDs, setProxyAudiences, setProxyCount

Methods inherited from class net.shibboleth.idp.saml.profile.config.AbstractSAMLProfileConfiguration

getAdditionalAudiencesForAssertion, getAssertionLifetime, getSignAssertions, getSignRequests, getSignResponses, includeConditionsNotBefore, setAdditionalAudienceForAssertion, setAssertionLifetime, setIncludeConditionsNotBefore, setSignAssertions, setSignRequests, setSignResponses

Methods inherited from class net.shibboleth.idp.profile.config.AbstractProfileConfiguration

equals, getId, getInboundInterceptorFlows, getOutboundInterceptorFlows, getSecurityConfiguration, hashCode, setInboundInterceptorFlows, setOutboundInterceptorFlows, setSecurityConfiguration

Methods inherited from class java.lang.Object

clone, finalize, getClass, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface net.shibboleth.idp.saml.profile.config.SAMLProfileConfiguration

getAdditionalAudiencesForAssertion, getAssertionLifetime, getSignAssertions, getSignRequests, getSignResponses, includeConditionsNotBefore

Methods inherited from interface net.shibboleth.idp.profile.config.ProfileConfiguration

getInboundInterceptorFlows, getOutboundInterceptorFlows, getSecurityConfiguration

Methods inherited from interface net.shibboleth.utilities.java.support.component.IdentifiedComponent

getId

Field Detail

PROFILE_ID

@Nonnull
@NotEmpty
public static final String PROFILE_ID

ID for this profile configuration.

See Also:

Constant Field Values

maximumTokenDelegationChainLength

@NonNegative
private long maximumTokenDelegationChainLength

Maximum number of times a given token is allowed to have been delegated. Default value: 0

delegationPredicate

@Nonnull
private com.google.common.base.Predicate<org.opensaml.profile.context.ProfileRequestContext<org.opensaml.saml.saml2.core.RequestAbstractType,org.opensaml.saml.saml2.core.Response>> delegationPredicate

Predicate used to determine if a token may be delegated to a relying party.

Constructor Detail

SSOSProfileConfiguration

public SSOSProfileConfiguration()

Constructor.

SSOSProfileConfiguration

protected SSOSProfileConfiguration(String profileId)

Constructor.

Parameters:

profileId - unique ID for this profile

Method Detail

getMaximumTokenDelegationChainLength

public long getMaximumTokenDelegationChainLength()

Get the maximum number of times a given token is allowed to have been delegated.

Returns:

maximum number of times a given token is allowed to have been delegated

setMaximumTokenDelegationChainLength

public void setMaximumTokenDelegationChainLength(long length)

Set the maximum number of times a given token is allowed to have been delegated.

Parameters:

length - maximum number of times a given token is allowed to have been delegated

getDelegationPredicate

@Nonnull
public com.google.common.base.Predicate<org.opensaml.profile.context.ProfileRequestContext<org.opensaml.saml.saml2.core.RequestAbstractType,org.opensaml.saml.saml2.core.Response>> getDelegationPredicate()

Gets predicate used to determine if a token may be delegated to a relying party.

Returns:

predicate used to determine if a token may be delegated to a relying party

setDelegationPredicate

public void setDelegationPredicate(@Nonnull
                          com.google.common.base.Predicate<org.opensaml.profile.context.ProfileRequestContext<org.opensaml.saml.saml2.core.RequestAbstractType,org.opensaml.saml.saml2.core.Response>> predicate)

Sets the predicate used to determine if a token may be delegated to a relying party.

Parameters:

predicate - predicate used to determine if a token may be delegated to a relying party