Package net.shibboleth.idp.saml.saml2.profile.delegation.impl
Profile processing components related to SAML 2 delegation.
-
Class Summary Class Description AddAuthnStatementToAssertionFromInboundAssertionToken Action that builds anAuthnStatement
and adds it to anAssertion
returned by a lookup strategy, by default in theInOutOperationContext.getOutboundMessageContext()
.AddDelegationPolicyToAssertion AddDelegationRestrictionToAssertions Action which adds aDelegationRestrictionType
Condition
to eachAssertion
contained within the outboundResponse
.DecorateDelegatedAssertion A profile action which decorates instances ofAssertion
appropriately for use as delegation tokens.DecorateDelegatedAssertion.LibertySSOSEndpointURLStrategy Strategy that builds the SSOS endpoint URL based on the current HTTP request using default values for scheme, port and URI path suffix.DelegatedAssertionLookupStrategy Lookup function to return the valid delegated assertion token in effect for the Liberty SSOS request.EvaluateDelegationPolicy Action which implements policy controls to decide whether an SSO request based on a delegatedAssertion
token is allowed to proceed.FinalizeSAMLTokenProcessing Post-process the results ofAssertion
token subject canonicalization.LibertyConstants Liberty-related constants.PopulateDelegationContext A profile action which determines whether issuance of a delegatedAssertion
token is active, and populates aDelegationContext
appropriately.PopulateLibertyContext Locate a pre-validatedAssertion
WS-Security token, and populate theLibertySSOSContext
.PopulateOutboundMessageContext Populate the outbound message context with data that is specific to the delegation flow.ProcessDelegatedAssertion XMLObjectProviderInitializer XMLObject provider initializer for providers from OpenLiberty used in delegation.