edu.internet2.middleware.shibboleth.common.config.relyingparty.saml

Class SAML2SSOProfileConfigurationFactoryBean

java.lang.Object

org.springframework.beans.factory.config.AbstractFactoryBean

edu.internet2.middleware.shibboleth.common.config.relyingparty.saml.AbstractSAMLProfileConfigurationFactoryBean

edu.internet2.middleware.shibboleth.common.config.relyingparty.saml.AbstractSAML2ProfileConfigurationFactoryBean

edu.internet2.middleware.shibboleth.common.config.relyingparty.saml.SAML2SSOProfileConfigurationFactoryBean

All Implemented Interfaces:

org.springframework.beans.factory.BeanClassLoaderAware, org.springframework.beans.factory.BeanFactoryAware, org.springframework.beans.factory.DisposableBean, org.springframework.beans.factory.FactoryBean, org.springframework.beans.factory.InitializingBean

Direct Known Subclasses:

SAML2ECPProfileConfigurationFactoryBean

public class SAML2SSOProfileConfigurationFactoryBean
extends AbstractSAML2ProfileConfigurationFactoryBean

Spring factory for SAML 2 SSO profile configurations.

Field Summary

Fields

Modifier and Type	Field and Description
private boolean	includeAttributeStatement Whether responses to the authentication request should include an attribute statement.
private long	maximumSPSessionLifetime The maximum amount of time, in milliseconds, the service provider should maintain a session for the user.
private boolean	skipEndpointValidationWhenSigned Whether to skip response location checks for signed requests.

Fields inherited from class org.springframework.beans.factory.config.AbstractFactoryBean

logger

Constructor Summary

Constructors

Constructor and Description
SAML2SSOProfileConfigurationFactoryBean()

Method Summary

Methods

Modifier and Type	Method and Description
protected Object	createInstance()
long	getMaximumSPSessionLifetime() Gets the maximum amount of time, in milliseconds, the service provider should maintain a session for the user based on the authentication assertion.
Class	getObjectType()
boolean	includeAttributeStatement() Gets whether responses to the authentication request should include an attribute statement.
void	setIncludeAttributeStatement(boolean include) Sets whether responses to the authentication request should include an attribute statement.
void	setMaximumSPSessionLifetime(long lifetime) Sets the maximum amount of time, in milliseconds, the service provider should maintain a session for the user based on the authentication assertion.
void	setSkipEndpointValidationWhenSigned(boolean flag) Sets whether to bypass ACS checks for signed requests.
boolean	skipEndpointValidationWhenSigned() Gets whether to bypass ACS checks for signed requests.

Methods inherited from class edu.internet2.middleware.shibboleth.common.config.relyingparty.saml.AbstractSAML2ProfileConfigurationFactoryBean

getAssertionProxyCount, getAttributeAuthority, getProxyAudiences, isEncryptAssertions, isEncryptNameIds, populateBean, setAssertionProxyCount, setAttributeAuthority, setEncryptAssertions, setEncryptNameIds, setProxyAudiences

Methods inherited from class edu.internet2.middleware.shibboleth.common.config.relyingparty.saml.AbstractSAMLProfileConfigurationFactoryBean

getAssertionLifetime, getAudiences, getOutboundArtifactType, getProfileSecurityPolicy, getSignAssertions, getSigningCredential, getSignRequests, getSignResposnes, includeConditionsNotBefore, populateBean, setAssertionLifetime, setAudiences, setIncludeConditionsNotBefore, setOutboundArtifactType, setProfileSecurityPolicy, setSignAssertions, setSigningCredential, setSignRequests, setSignResponses

Methods inherited from class org.springframework.beans.factory.config.AbstractFactoryBean

afterPropertiesSet, destroy, destroyInstance, getBeanFactory, getBeanTypeConverter, getEarlySingletonInterfaces, getObject, isSingleton, setBeanClassLoader, setBeanFactory, setSingleton

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

includeAttributeStatement

private boolean includeAttributeStatement

Whether responses to the authentication request should include an attribute statement.

maximumSPSessionLifetime

private long maximumSPSessionLifetime

The maximum amount of time, in milliseconds, the service provider should maintain a session for the user.

skipEndpointValidationWhenSigned

private boolean skipEndpointValidationWhenSigned

Whether to skip response location checks for signed requests.

Constructor Detail

SAML2SSOProfileConfigurationFactoryBean

public SAML2SSOProfileConfigurationFactoryBean()

Method Detail

getObjectType

public Class getObjectType()

Specified by:

getObjectType in interface org.springframework.beans.factory.FactoryBean

Specified by:

getObjectType in class org.springframework.beans.factory.config.AbstractFactoryBean

includeAttributeStatement

public boolean includeAttributeStatement()

Gets whether responses to the authentication request should include an attribute statement.

Returns:

whether responses to the authentication request should include an attribute statement

setIncludeAttributeStatement

public void setIncludeAttributeStatement(boolean include)

Sets whether responses to the authentication request should include an attribute statement.

Parameters:

include - whether responses to the authentication request should include an attribute statement

getMaximumSPSessionLifetime

public long getMaximumSPSessionLifetime()

Gets the maximum amount of time, in milliseconds, the service provider should maintain a session for the user based on the authentication assertion.

Returns:

max lifetime of service provider should maintain a session

setMaximumSPSessionLifetime

public void setMaximumSPSessionLifetime(long lifetime)

Sets the maximum amount of time, in milliseconds, the service provider should maintain a session for the user based on the authentication assertion.

Parameters:

lifetime - max lifetime of service provider should maintain a session

skipEndpointValidationWhenSigned

public boolean skipEndpointValidationWhenSigned()

Gets whether to bypass ACS checks for signed requests.

Returns:

true iff ACS checking should be bypassed for signed requests

setSkipEndpointValidationWhenSigned

public void setSkipEndpointValidationWhenSigned(boolean flag)

Sets whether to bypass ACS checks for signed requests.

Parameters:

flag - whether to bypass ACS checks for signed requests

createInstance

protected Object createInstance()
                         throws Exception

Specified by:

createInstance in class org.springframework.beans.factory.config.AbstractFactoryBean

Throws:

Exception