net.shibboleth.idp.saml.saml2.profile.config

Class AbstractSAML2ProfileConfiguration

java.lang.Object

net.shibboleth.idp.profile.config.AbstractProfileConfiguration

net.shibboleth.idp.saml.profile.config.AbstractSAMLProfileConfiguration

net.shibboleth.idp.saml.saml2.profile.config.AbstractSAML2ProfileConfiguration

All Implemented Interfaces:

ProfileConfiguration, SAMLProfileConfiguration, SAML2ProfileConfiguration, net.shibboleth.utilities.java.support.component.Component, net.shibboleth.utilities.java.support.component.IdentifiedComponent

Direct Known Subclasses:

ArtifactResolutionProfileConfiguration, AttributeQueryProfileConfiguration, BrowserSSOProfileConfiguration, SingleLogoutProfileConfiguration

public abstract class AbstractSAML2ProfileConfiguration
extends AbstractSAMLProfileConfiguration
implements SAML2ProfileConfiguration

Base class for SAML 2 profile configurations.

Field Summary

Fields

Modifier and Type	Field and Description
private com.google.common.base.Predicate<org.opensaml.profile.context.ProfileRequestContext>	encryptAssertionsPredicate Predicate used to determine if assertions should be encrypted.
private com.google.common.base.Predicate<org.opensaml.profile.context.ProfileRequestContext>	encryptAttributesPredicate Predicate used to determine if attributes should be encrypted.
private boolean	encryptionOptional Whether encryption is optional in the face of no key, etc.
private com.google.common.base.Predicate<org.opensaml.profile.context.ProfileRequestContext>	encryptNameIDsPredicate Predicate used to determine if name identifiers should be encrypted.
private Set<String>	proxyAudiences Audiences for the proxy.
private long	proxyCount Maximum proxy count for an assertion.

Constructor Summary

Constructors

Constructor and Description
AbstractSAML2ProfileConfiguration(String profileId) Constructor.

Method Summary

Methods

Modifier and Type	Method and Description
com.google.common.base.Predicate<org.opensaml.profile.context.ProfileRequestContext>	getEncryptAssertions() Get the predicate used to determine if assertions should be encrypted.
com.google.common.base.Predicate<org.opensaml.profile.context.ProfileRequestContext>	getEncryptAttributes() Get the predicate used to determine if attributes should be encrypted.
com.google.common.base.Predicate<org.opensaml.profile.context.ProfileRequestContext>	getEncryptNameIDs() Get the predicate used to determine if name identifiers should be encrypted.
Collection<String>	getProxyAudiences() Get the unmodifiable collection of audiences for a proxied assertion.
long	getProxyCount() Get the maximum number of times an assertion may be proxied.
boolean	isEncryptionOptional() Get whether to ignore an inability to encrypt due to external factors.
void	setEncryptAssertions(com.google.common.base.Predicate<org.opensaml.profile.context.ProfileRequestContext> predicate) Set the predicate used to determine if assertions should be encrypted.
void	setEncryptAttributes(com.google.common.base.Predicate<org.opensaml.profile.context.ProfileRequestContext> predicate) Set the predicate used to determine if attributes should be encrypted.
void	setEncryptionOptional(boolean flag) Set whether encryption is optional in the face of a missing key, etc.
void	setEncryptNameIDs(com.google.common.base.Predicate<org.opensaml.profile.context.ProfileRequestContext> predicate) Set the predicate used to determine if name identifiers should be encrypted.
void	setProxyAudiences(Collection<String> audiences) Set the proxy audiences to be added to responses.
void	setProxyCount(long count) Set the maximum number of times an assertion may be proxied.

Methods inherited from class net.shibboleth.idp.saml.profile.config.AbstractSAMLProfileConfiguration

getAdditionalAudiencesForAssertion, getAssertionLifetime, getSignAssertions, getSignRequests, getSignResponses, includeConditionsNotBefore, setAdditionalAudienceForAssertion, setAssertionLifetime, setIncludeConditionsNotBefore, setSignAssertions, setSignRequests, setSignResponses

Methods inherited from class net.shibboleth.idp.profile.config.AbstractProfileConfiguration

equals, getId, getInboundInterceptorFlows, getOutboundInterceptorFlows, getSecurityConfiguration, hashCode, setInboundInterceptorFlows, setOutboundInterceptorFlows, setSecurityConfiguration

Methods inherited from class java.lang.Object

clone, finalize, getClass, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface net.shibboleth.idp.profile.config.ProfileConfiguration

getInboundInterceptorFlows, getOutboundInterceptorFlows, getSecurityConfiguration

Methods inherited from interface net.shibboleth.utilities.java.support.component.IdentifiedComponent

getId

Field Detail

encryptionOptional

private boolean encryptionOptional

Whether encryption is optional in the face of no key, etc.

encryptAssertionsPredicate

@Nonnull
private com.google.common.base.Predicate<org.opensaml.profile.context.ProfileRequestContext> encryptAssertionsPredicate

Predicate used to determine if assertions should be encrypted.

encryptNameIDsPredicate

@Nonnull
private com.google.common.base.Predicate<org.opensaml.profile.context.ProfileRequestContext> encryptNameIDsPredicate

Predicate used to determine if name identifiers should be encrypted.

encryptAttributesPredicate

@Nonnull
private com.google.common.base.Predicate<org.opensaml.profile.context.ProfileRequestContext> encryptAttributesPredicate

Predicate used to determine if attributes should be encrypted.

proxyCount

private long proxyCount

Maximum proxy count for an assertion. Default value: 0

proxyAudiences

@Nonnull
@NonnullElements
private Set<String> proxyAudiences

Audiences for the proxy.

Constructor Detail

AbstractSAML2ProfileConfiguration

public AbstractSAML2ProfileConfiguration(@Nonnull@NotEmpty
                                 String profileId)

Constructor.

Parameters:

profileId - ID of the the communication profile, never null or empty

Method Detail

getProxyCount

public long getProxyCount()

Get the maximum number of times an assertion may be proxied.

Specified by:

getProxyCount in interface SAML2ProfileConfiguration

Returns:

maximum number of times an assertion may be proxied

setProxyCount

public void setProxyCount(@NonNegative
                 long count)

Set the maximum number of times an assertion may be proxied.

Parameters:

count - maximum number of times an assertion may be proxied

getProxyAudiences

public Collection<String> getProxyAudiences()

Get the unmodifiable collection of audiences for a proxied assertion.

Specified by:

getProxyAudiences in interface SAML2ProfileConfiguration

Returns:

audiences for a proxied assertion

setProxyAudiences

public void setProxyAudiences(@Nonnull@NonnullElements
                     Collection<String> audiences)

Set the proxy audiences to be added to responses.

Parameters:

audiences - proxy audiences to be added to responses

isEncryptionOptional

public boolean isEncryptionOptional()

Get whether to ignore an inability to encrypt due to external factors.

This allows a deployer to signal that encryption is "best effort" and can be omitted if a relying party doesn't possess a key, support a compatible algorithm, etc.

Defaults to false.

Specified by:

isEncryptionOptional in interface SAML2ProfileConfiguration

Returns:

true iff encryption should be treated as optional

setEncryptionOptional

public void setEncryptionOptional(boolean flag)

Set whether encryption is optional in the face of a missing key, etc.

Parameters:

flag - flag to set

getEncryptAssertions

@Nonnull
public com.google.common.base.Predicate<org.opensaml.profile.context.ProfileRequestContext> getEncryptAssertions()

Get the predicate used to determine if assertions should be encrypted.

Specified by:

getEncryptAssertions in interface SAML2ProfileConfiguration

Returns:

predicate used to determine if assertions should be encrypted

setEncryptAssertions

public void setEncryptAssertions(@Nonnull
                        com.google.common.base.Predicate<org.opensaml.profile.context.ProfileRequestContext> predicate)

Set the predicate used to determine if assertions should be encrypted.

Parameters:

predicate - predicate used to determine if assertions should be encrypted

getEncryptNameIDs

@Nonnull
public com.google.common.base.Predicate<org.opensaml.profile.context.ProfileRequestContext> getEncryptNameIDs()

Get the predicate used to determine if name identifiers should be encrypted.

Specified by:

getEncryptNameIDs in interface SAML2ProfileConfiguration

Returns:

predicate used to determine if name identifiers should be encrypted

setEncryptNameIDs

public void setEncryptNameIDs(@Nonnull
                     com.google.common.base.Predicate<org.opensaml.profile.context.ProfileRequestContext> predicate)

Set the predicate used to determine if name identifiers should be encrypted.

Parameters:

predicate - predicate used to determine if name identifiers should be encrypted

getEncryptAttributes

@Nonnull
public com.google.common.base.Predicate<org.opensaml.profile.context.ProfileRequestContext> getEncryptAttributes()

Get the predicate used to determine if attributes should be encrypted.

Specified by:

getEncryptAttributes in interface SAML2ProfileConfiguration

Returns:

predicate used to determine if attributes should be encrypted

setEncryptAttributes

public void setEncryptAttributes(@Nonnull
                        com.google.common.base.Predicate<org.opensaml.profile.context.ProfileRequestContext> predicate)

Set the predicate used to determine if attributes should be encrypted.

Parameters:

predicate - predicate used to determine if attributes should be encrypted