Class ProxyAwareDefaultAuthenticationMethodsLookupFunction

java.lang.Object
net.shibboleth.idp.saml.saml2.profile.config.navigate.ProxyAwareDefaultAuthenticationMethodsLookupFunction
All Implemented Interfaces:
Function<ProfileRequestContext,​Collection<AuthnContextClassRefPrincipal>>

public class ProxyAwareDefaultAuthenticationMethodsLookupFunction
extends Object
implements Function<ProfileRequestContext,​Collection<AuthnContextClassRefPrincipal>>
Implements a set of default logic for determining the custom principals to derive the RequestedAuthnContext from.

This operates in two different scenarios: ordinary use and proxy SAML authentication use, detectable by whether the input context is parent-less (the former), or the child of an AuthenticationContext.

In normal use, the value returned is empty.

In proxy use, the value returned is empty unless the parent context itself contains a child context carrying particular values. In other words, the proxy default is "passthrough" of the values.

Since:
4.0.0