edu.internet2.middleware.shibboleth.common.relyingparty.provider.saml2

Class SSOConfiguration

java.lang.Object

edu.internet2.middleware.shibboleth.common.relyingparty.provider.AbstractSAMLProfileConfiguration

edu.internet2.middleware.shibboleth.common.relyingparty.provider.saml2.AbstractSAML2ProfileConfiguration

edu.internet2.middleware.shibboleth.common.relyingparty.provider.saml2.SSOConfiguration

All Implemented Interfaces:

ProfileConfiguration

Direct Known Subclasses:

ECPConfiguration

public class SSOConfiguration
extends AbstractSAML2ProfileConfiguration

SAML 2 SSO configuration settings.

Field Summary

Fields

Modifier and Type	Field and Description
private boolean	includeAttributeStatement Whether responses to the authentication request should include an attribute statement.
private long	maximumSPSessionLifetime The maximum amount of time, in milliseconds, the service provider should maintain a session for the user.
static String	PROFILE_ID ID for this profile configuration.
private boolean	skipEndpointValidationWhenSigned Whether to skip response location checks for signed requests.

Constructor Summary

Constructors

Constructor and Description
SSOConfiguration()

Method Summary

Methods

Modifier and Type	Method and Description
long	getMaximumSPSessionLifetime() Gets the maximum amount of time, in milliseconds, the service provider should maintain a session for the user based on the authentication assertion.
String	getProfileId() Gets the unique identifier of the profile.
boolean	includeAttributeStatement() Gets whether responses to the authentication request should include an attribute statement.
void	setIncludeAttributeStatement(boolean include) Sets whether responses to the authentication request should include an attribute statement.
void	setMaximumSPSessionLifetime(long lifetime) Sets the maximum amount of time, in milliseconds, the service provider should maintain a session for the user based on the authentication assertion.
void	setSkipEndpointValidationWhenSigned(boolean flag) Sets whether to bypass ACS checks for signed requests.
boolean	skipEndpointValidationWhenSigned() Gets whether to bypass ACS checks for signed requests.

Methods inherited from class edu.internet2.middleware.shibboleth.common.relyingparty.provider.saml2.AbstractSAML2ProfileConfiguration

getAttributeAuthority, getEncryptAssertion, getEncryptNameID, getProxyAudiences, getProxyCount, setAttributeAuthority, setEncryptAssertion, setEncryptNameID, setProxyCount

Methods inherited from class edu.internet2.middleware.shibboleth.common.relyingparty.provider.AbstractSAMLProfileConfiguration

getAssertionAudiences, getAssertionLifetime, getOutboundArtifactType, getSecurityPolicy, getSignAssertions, getSigningCredential, getSignRequests, getSignResponses, includeConditionsNotBefore, setAssertionAudiences, setAssertionLifetime, setIncludeConditionsNotBefore, setOutboundArtifactType, setSecurityPolicy, setSignAssertions, setSigningCredential, setSignRequests, setSignResponses

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

PROFILE_ID

public static final String PROFILE_ID

ID for this profile configuration.

See Also:

Constant Field Values

includeAttributeStatement

private boolean includeAttributeStatement

Whether responses to the authentication request should include an attribute statement.

maximumSPSessionLifetime

private long maximumSPSessionLifetime

The maximum amount of time, in milliseconds, the service provider should maintain a session for the user.

skipEndpointValidationWhenSigned

private boolean skipEndpointValidationWhenSigned

Whether to skip response location checks for signed requests.

Constructor Detail

SSOConfiguration

public SSOConfiguration()

Method Detail

getProfileId

public String getProfileId()

Gets the unique identifier of the profile.

Returns:

unique identifier of the profile

includeAttributeStatement

public boolean includeAttributeStatement()

Gets whether responses to the authentication request should include an attribute statement.

Returns:

whether responses to the authentication request should include an attribute statement

setIncludeAttributeStatement

public void setIncludeAttributeStatement(boolean include)

Sets whether responses to the authentication request should include an attribute statement.

Parameters:

include - whether responses to the authentication request should include an attribute statement

getMaximumSPSessionLifetime

public long getMaximumSPSessionLifetime()

Gets the maximum amount of time, in milliseconds, the service provider should maintain a session for the user based on the authentication assertion. A value less than or equal to 0 is interpreted as an unlimited lifetime.

Returns:

max lifetime of service provider should maintain a session

setMaximumSPSessionLifetime

public void setMaximumSPSessionLifetime(long lifetime)

Sets the maximum amount of time, in milliseconds, the service provider should maintain a session for the user based on the authentication assertion. A value less than or equal to 0 is interpreted as an unlimited lifetime.

Parameters:

lifetime - max lifetime of service provider should maintain a session

skipEndpointValidationWhenSigned

public boolean skipEndpointValidationWhenSigned()

Gets whether to bypass ACS checks for signed requests.

Returns:

true iff ACS checking should be bypassed for signed requests

setSkipEndpointValidationWhenSigned

public void setSkipEndpointValidationWhenSigned(boolean flag)

Sets whether to bypass ACS checks for signed requests.

Parameters:

flag - whether to bypass ACS checks for signed requests