Package | Description |
---|---|
org.opensaml.profile.action |
Interfaces and classes for profile actions, discrete units of behavior that
make up a profile.
|
org.opensaml.profile.action.impl |
Implementations of general profile actions.
|
org.opensaml.saml.common.profile.impl |
Actions and classes common to both SAML versions.
|
org.opensaml.saml.saml1.profile |
Classes for SAML 1.x profile behavior.
|
org.opensaml.saml.saml1.profile.impl |
Implementations of SAML 1.x profile behavior.
|
org.opensaml.saml.saml2.profile |
Classes for SAML 2.0 profile behavior.
|
org.opensaml.saml.saml2.profile.impl |
Implementations of SAML 2.0 profile behavior.
|
org.opensaml.soap.soap11.profile.impl |
Profile actions related to SOAP 1.1.
|
Modifier and Type | Class and Description |
---|---|
class |
AbstractConditionalProfileAction<InboundMessageType,OutboundMessageType>
Base class for conditional profile actions.
|
Modifier and Type | Class and Description |
---|---|
class |
AbstractMessageChannelSecurity
Abstract base class for profile actions which populate a
MessageChannelSecurityContext on a BaseContext ,
where the latter is located using a lookup strategy. |
class |
CheckAccess
This action validates that a request comes from an authorized client, based on an injected service
and policy parameters.
|
class |
DecodeMessage
Action that decodes an incoming request into a
MessageContext . |
class |
EncodeMessage
Action that encodes an outbound response from the outbound
MessageContext . |
class |
HttpServletRequestMessageChannelSecurity
Profile action which populates a
MessageChannelSecurityContext based on a
HttpServletRequest . |
class |
PopulateClientTLSValidationParameters
Action that resolves and populates
ClientTLSValidationParameters on a
ClientTLSSecurityParametersContext created/accessed via a lookup function,
by default on the inbound message context. |
class |
PopulateDecryptionParameters
Action that resolves and populates
DecryptionParameters on a SecurityParametersContext
created/accessed via a lookup function, by default on the inbound message context. |
class |
PopulateSignatureValidationParameters
Action that resolves and populates
SignatureValidationParameters on a SecurityParametersContext
created/accessed via a lookup function, by default on the inbound message context. |
class |
SetProfileId
A profile action that sets the ID of the profile in use.
|
class |
StaticMessageChannelSecurity
Profile action which populates a
MessageChannelSecurityContext based on static configuration flags. |
Modifier and Type | Class and Description |
---|---|
class |
AddAudienceRestrictionToAssertions
Action adds an audience restriction condition to every assertion contained in a SAML 1/2
response, with the audiences obtained from a lookup function.
|
class |
AddInResponseToToResponse
Action that adds the
InResponseTo attribute to a response message if a SAML message ID is set on
the inbound message context. |
class |
AddNotBeforeConditionToAssertions
Action that adds the
NotBefore attribute to every assertion in a SAML 1/2
response message. |
class |
AddNotOnOrAfterConditionToAssertions
Action that adds the
NotBefore attribute to every assertion in a SAML 1/2
response message. |
class |
PopulateSignatureSigningParameters
Action that resolves and populates
SignatureSigningParameters on a SecurityParametersContext
created/accessed via a lookup function, by default on the outbound message context. |
class |
SignAssertions
Action that signs assertions in a SAML 1/2 Response returned by a lookup strategy,
by default the message returned by
InOutOperationContext.getOutboundMessageContext() . |
class |
VerifyChannelBindings
Action that verifies two sets of
ChannelBindings from two different ChannelBindingsContext
objects obtained via lookup functions, by default from below the inbound message context and from below
a SOAP11Context below the inbound message context. |
Modifier and Type | Method and Description |
---|---|
static Assertion |
SAML1ActionSupport.addAssertionToResponse(AbstractProfileAction action,
Response response,
net.shibboleth.utilities.java.support.security.IdentifierGenerationStrategy idGenerator,
String issuer)
|
static Conditions |
SAML1ActionSupport.addConditionsToAssertion(AbstractProfileAction action,
Assertion assertion)
Creates and adds a
Conditions to a given Assertion . |
static Assertion |
SAML1ActionSupport.buildAssertion(AbstractProfileAction action,
net.shibboleth.utilities.java.support.security.IdentifierGenerationStrategy idGenerator,
String issuer)
Constructs an
Assertion using the parameters supplied, with its issue instant set to the
current time. |
Modifier and Type | Class and Description |
---|---|
class |
AddDoNotCacheConditionToAssertions
|
class |
AddNameIdentifierToSubjects
Action that builds a
NameIdentifier and adds it to the Subject of all the statements
in all the assertions found via a lookup strategy, by default from the outbound message context. |
class |
AddResponseShell
Action that creates an empty
Response , and sets it as the
message returned by InOutOperationContext.getOutboundMessageContext() . |
class |
AddStatusToResponse
|
class |
AddSubjectConfirmationToSubjects
Action that builds
SubjectConfirmation and adds it to the Subject of all the statements
in all the assertions found in a Response . |
class |
CopyNameIdentifierFromRequest
Action that builds a
NameIdentifier and adds it to the Subject of all the statements
in all the assertions found in a Response . |
class |
ResolveArtifacts
Action that resolves SAML 1.x artifacts inside a
Request located via a lookup strategy,
by default from the inbound message context, and maps them to the corresponding assertions. |
Modifier and Type | Method and Description |
---|---|
static Advice |
SAML2ActionSupport.addAdviceToAssertion(AbstractProfileAction action,
Assertion assertion)
|
static Assertion |
SAML2ActionSupport.addAssertionToResponse(AbstractProfileAction action,
Response response,
net.shibboleth.utilities.java.support.security.IdentifierGenerationStrategy idGenerator,
String issuer)
|
static Conditions |
SAML2ActionSupport.addConditionsToAssertion(AbstractProfileAction action,
Assertion assertion)
Creates and adds a
Conditions to a given Assertion . |
static Assertion |
SAML2ActionSupport.buildAssertion(AbstractProfileAction action,
net.shibboleth.utilities.java.support.security.IdentifierGenerationStrategy idGenerator,
String issuer)
Constructs an
Assertion using the parameters supplied, with its issue instant set to the
current time. |
Modifier and Type | Class and Description |
---|---|
class |
AbstractDecryptAction
Abstract base class for actions that perform SAML decryption.
|
class |
AbstractEncryptAction
Abstract base class for actions that perform simple unicast SAML encryption to a single
decrypting party.
|
class |
AbstractResponseShellAction<MessageType extends StatusResponseType>
Abstract action that creates an empty object derived from
StatusResponseType ,
and sets it as the message returned by InOutOperationContext.getOutboundMessageContext() . |
class |
AddChannelBindingsToAssertions
|
class |
AddGeneratedKeyToAssertions
|
class |
AddNameIDToSubjects
|
class |
AddOneTimeUseConditionToAssertions
|
class |
AddProxyRestrictionToAssertions
Action adds an
ProxyRestriction to every Assertion contained in a SAML 2
response, with the audiences and count obtained from a lookup function. |
class |
AddStatusResponseShell
Action that creates an empty object derived from
StatusResponseType ,
and sets it as the message returned by InOutOperationContext.getOutboundMessageContext() . |
class |
CopyNameIDFromRequest
|
class |
DecryptAssertions
Action to decrypt an
EncryptedAssertion element and replace it with the decrypted
Assertion in situ. |
class |
DecryptAttributes
Action to decrypt an
EncryptedAttribute element and replace it with the decrypted
Attribute in situ. |
class |
DecryptNameIDs
Action to decrypt an
EncryptedID element and replace it with the decrypted NameID
in situ. |
class |
EncryptAssertions
Action that encrypts all assertions in a
Response message obtained from a lookup
strategy, by default the outbound message context. |
class |
EncryptAttributes
Action that encrypts all attributes in a
Response message obtained from a lookup strategy,
by default the outbound message context. |
class |
EncryptNameIDs
Action that encrypts all
NameID s in a message obtained from a lookup strategy,
by default the outbound message context. |
class |
PopulateECPContext
Action to create and populate an
ECPContext based on the request and, when encryption is in use,
generating a session key. |
class |
ResolveArtifact
Action that resolves a SAML 2.0 artifact inside an
ArtifactResolve request located
via a lookup strategy, by default from the inbound message context, and maps it to the
corresponding message. |
Modifier and Type | Class and Description |
---|---|
class |
AddSOAPFault
Action that builds a SOAP 1.1
Fault object in the outbound message context. |
Copyright © 2016. All rights reserved.