Uses of Class
net.shibboleth.idp.profile.AbstractProfileAction
Packages that use AbstractProfileAction
Package
Description
Implementation classes for administrative profiles.
APIs related to the authentication of a subject.
Implementation of Duo authentication.
Implementation of various authentication actions.
Classes implementing proxied authentication flows.
CAS protocol flow implementations.
Actions and flow descriptors related to attribute release consent.
Actions and flow descriptors related to consent.
Actions related to consent storage.
Common APIs for handling profile requests.
Audit implementation classes.
Implementations of various profile actions.
Classes supporting profile interceptor machinery.
Implementation of a profile interceptor flow which executes other flows.
Classes implementing SAML-specific audit log behavior.
Implementation of SAML
NameID
and
NameIdentifier
generation and consumption.Actions common to SAML 1 and SAML 2 processing.
Profile processing actions related to SAML 1 messages.
Profile processing components related to SAML 2 delegation.
Profile processing actions related to SAML 2 messages.
Implementation classes for SAML-specific session functionality.
Implementations of session-related classes and interfaces.
Implementation classes for information needed by the UI.
-
Uses of AbstractProfileAction in net.shibboleth.idp.admin.impl
Subclasses of AbstractProfileAction in net.shibboleth.idp.admin.implModifier and TypeClassDescriptionclass
Action that implements a JSON REST API for accessingStorageService
records.class
An action that processes settings from a suppliedAdministrativeFlowDescriptor
to prepare the profile context tree for subsequent use by an administrative profile flow.class
Action that outputs one or moreMetric
objects.class
Action that sets keystore and key passwords for one or more DataSealer KeyStrategy objects based on query parameters.class
Action that creates private key objects and injects them into existingMutableCredential
objects. -
Uses of AbstractProfileAction in net.shibboleth.idp.authn
Subclasses of AbstractProfileAction in net.shibboleth.idp.authnModifier and TypeClassDescriptionclass
A base class for authentication related actions.class
A base class for authentication actions that extract usernames for subsequent use.class
A base class for subject canonicalization actions.class
A base class for authentication related actions that validate credentials and produce anAuthenticationResult
. -
Uses of AbstractProfileAction in net.shibboleth.idp.authn.duo.impl
Subclasses of AbstractProfileAction in net.shibboleth.idp.authn.duo.implModifier and TypeClassDescriptionclass
An action that extracts the Duo factor and device or passcode from HTTP request headers into aDuoAuthenticationContext
, and attaches it to theAuthenticationContext
.class
An action that checks for aDuoAuthenticationContext
and directly produces anAuthenticationResult
based on that identity by authenticating against the Duo AuthAPI.class
An action that validates a DuoWeb response message and produces anAuthenticationResult
or records error state. -
Uses of AbstractProfileAction in net.shibboleth.idp.authn.impl
Subclasses of AbstractProfileAction in net.shibboleth.idp.authn.implModifier and TypeClassDescriptionclass
An action that extracts a resolvedIdPAttribute
value from anAttributeContext
child obtained via lookup function (by default a child of theSubjectCanonicalizationContext
), and uses it as the result of subject canonicalization.class
Action that implements a JSON REST API for theAccountLockoutManager
interface.class
TODO.class
An action that extracts an asserted user identity from the incoming request, creates aUsernameContext
, and attaches it to theAuthenticationContext
.class
An action that extracts the user-agent's IP address from the incoming request, creates aUserAgentContext
, and attaches it to theAuthenticationContext
.class
An action that extracts the user-agent's identifier from the incoming request, creates aUserAgentContext
, and attaches it to theAuthenticationContext
.class
/** An action that extracts a username and password from the HTTPHttpHeaders.AUTHORIZATION
header, creates aUsernamePasswordContext
, and attaches it to theAuthenticationContext
.class
An action that extracts a username and password from an HTTP form body or query string, creates aUsernamePasswordContext
, and attaches it to theAuthenticationContext
.class
An authentication stage that extracts a username/password from the WSS Username/Password attached to a SOAP message.class
An action that extracts an X.509 certificate from the standard servlet request attribute, creates aCertificateContext
, and attaches it to theAuthenticationContext
.class
An authentication action that filters out potential authentication flows if the request requires forced authentication or max age behavior and the flows don't support forced authentication.class
An authentication action that filters out potential authentication flows if the request requires non-browser support and the flows require a browser.class
An authentication action that runs after a completed authentication flow (or the reuse of an active result) and transfers information from other contexts into aSubjectContext
child of theProfileRequestContext
.class
An authentication action that completes MFA by producing a finalAuthenticationResult
out of whatever constituent parts and pieces exist, by means of an overridable function, storing it in theAuthenticationContext
and preparing a freshSubjectCanonicalizationContext
to operate on.class
An action that creates anRequestedPrincipalContext
and attaches it to the currentAuthenticationContext
, if the profile request context contains aRelyingPartyContext
with anAuthenticationProfileConfiguration
containing one or more default authentication methods.class
An action that populates anAuthenticationContext
with theAuthenticationFlowDescriptor
objects configured into the IdP, potential flows filtered by flow IDs from a lookup function.class
An action that creates and populates aMultiFactorAuthenticationContext
with the set of transition rules to use for coordinating activity, the executingAuthenticationFlowDescriptor
and with any active "factors" found, if an active result from the MFA flow is present in theAuthenticationContext
.class
An action that populates aSubjectCanonicalizationContext
with theSubjectCanonicalizationFlowDescriptor
objects configured into the IdP.class
An action that extracts configured parameters from a servlet request and populatesAuthenticationContext.getAuthenticationStateMap()
with the data.class
An authentication action that selects an authentication flow to invoke, or re-uses an existing result for SSO.class
A canonicalization action that selects a canonicalization flow to invoke.class
An action that operates on aSubjectCanonicalizationContext
child of the currentProfileRequestContext
, and transforms the inputSubject
into a principal name by searching for one and only oneUsernamePrincipal
custom principal.class
An authentication action that acts as the driver regulating execution of transitions between MFA stages.class
An action that processes a list ofCredentialValidator
objects to produce anAuthenticationResult
.class
An action that checks for anExternalAuthenticationContext
and directly produces anAuthenticationResult
or records error state based on the contents.class
An action that executes a deployer-supplied function and produces anAuthenticationResult
based on the function result.class
An action that checks for aUsernameContext
and directly produces anAuthenticationResult
based on that identity.class
An action that ensures that a user-agent address found within aUserAgentContext
is within a given range and generates anAuthenticationResult
.class
An action that operates on aSubjectCanonicalizationContext
child of the currentProfileRequestContext
, and transforms the inputSubject
into a principal name by searching for one and only oneX509Certificate
public credential, or in its absence one and only oneX500Principal
. -
Uses of AbstractProfileAction in net.shibboleth.idp.authn.proxy.impl
Subclasses of AbstractProfileAction in net.shibboleth.idp.authn.proxy.implModifier and TypeClassDescriptionclass
An action that extracts a discovery service result and copies it to theAuthenticationContext
.final class
Action that creates a newProfileRequestContext
via a creation strategy, and sets the profile and logging IDs, if provided. -
Uses of AbstractProfileAction in net.shibboleth.idp.cas.flow.impl
Subclasses of AbstractProfileAction in net.shibboleth.idp.cas.flow.implModifier and TypeClassDescriptionclass
AbstractCASProtocolAction<RequestType,
ResponseType> Base class for CAS protocol actions.class
Base class for all actions that build SAMLResponse
messages for output.class
Builds an authentication context from an incomingServiceTicketRequest
message.class
Action that builds the chain of visited proxies for a successful proxy ticket validation event.class
BuildRelyingPartyContextAction<RequestType,
ResponseType> Creates theRelyingPartyContext
as a child of theProfileRequestContext
.class
BuildSAMLMetadataContextAction<RequestType,
ResponseType> Builds aSAMLMetadataContext
child ofRelyingPartyContext
to facilitate relying party selection by group name.class
Creates the SAML response message for failed ticket validation at the/samlValidate
URI.class
Creates the SAML response message for successful ticket validation at the/samlValidate
URI.class
CheckProxyAuthorizationAction<RequestType,
ResponseType> Checks the currentServiceContext
to determine whether the service/relying party is authorized to proxy.class
Generates and stores a CAS protocol proxy ticket.class
Generates and stores a CAS protocol service ticket.class
Initializes the CAS protocol interaction at the/login
URI.class
Initializes the CAS protocol interaction at the/proxy
URI.class
Initializes the CAS protocol interaction at the/login
URI.class
PopulateProtocolErrorAction<RequestType>
Populates error information needed for protocol error messages.class
PreparesTicketValidationResponse
for use in CAS protocol response views.class
Processes the ticket validation request message from decoded SAML 1.1 message and request parameters.class
PublishProtocolMessageAction<RequestType,
ResponseType> Action to publish the CAS protocol request or response messages, i.e.class
UpdateIdPSessionWithSPSessionAction<RequestType,
ResponseType> Conditionally updates theIdPSession
with aCASSPSession
to support SLO.class
Validates the proxy callback URL provided in the service ticket validation request and creates a PGT when the proxy callback is successfully authenticated.class
Ensures that a service ticket validation request that specifies renew=true matches the renew flag on the ticket that is presented for validation.class
CAS protocol service ticket validation action.class
CAS 1.0 protocol response handler. -
Uses of AbstractProfileAction in net.shibboleth.idp.consent.flow.ar.impl
Subclasses of AbstractProfileAction in net.shibboleth.idp.consent.flow.ar.implModifier and TypeClassDescriptionclass
Base class for attribute release consent actions.class
Action that creates anAttributeReleaseContext
and attaches it to the currentProfileRequestContext
.class
Attribute consent action to populate the attribute consent context with the attributes for which consent should be obtained.class
Attribute consent action which constrains the attributes released to those consented to. -
Uses of AbstractProfileAction in net.shibboleth.idp.consent.flow.impl
Subclasses of AbstractProfileAction in net.shibboleth.idp.consent.flow.implModifier and TypeClassDescriptionclass
Base class for consent actions.class
Consent action which extracts user input and updates current consent objects in the consent context accordingly.class
Action that creates aConsentContext
and attaches it to the currentProfileRequestContext
.class
Consent action which populates the current consents of a consent context with the output value of a function whose input value is a profile request context. -
Uses of AbstractProfileAction in net.shibboleth.idp.consent.flow.storage.impl
Subclasses of AbstractProfileAction in net.shibboleth.idp.consent.flow.storage.implModifier and TypeClassDescriptionclass
Base class for consent actions which write to aStorageService
.class
Base class for consent actions which interact with aStorageService
.class
Consent action to create a consent result representing global consent to be stored in a storage service.class
Consent action to create a consent result representing the result of a consent flow.class
Consent action which reads consent records from storage and adds the serialized consent records to the consent context as previous consents.class
Consent action which deletes a consent record from storage.class
Consent action which maintains a storage record whose value is the current time in milliseconds. -
Uses of AbstractProfileAction in net.shibboleth.idp.profile
Subclasses of AbstractProfileAction in net.shibboleth.idp.profileModifier and TypeClassDescriptionclass
An action which calls out to a supplied script. -
Uses of AbstractProfileAction in net.shibboleth.idp.profile.audit.impl
Subclasses of AbstractProfileAction in net.shibboleth.idp.profile.audit.implModifier and TypeClassDescriptionclass
Action that populates fields in anAuditContext
using injected functions.class
Action that produces audit log entries based on anAuditContext
and one or more formatting strings. -
Uses of AbstractProfileAction in net.shibboleth.idp.profile.impl
Subclasses of AbstractProfileAction in net.shibboleth.idp.profile.implModifier and TypeClassDescriptionclass
Action that invokes theAttributeFilter
for the current request.final class
Action that creates a newProfileRequestContext
and binds it to the current conversation under theProfileRequestContext.BINDING_KEY
key, and sets the profile and logging IDs, if provided.class
Spring Web Flow utility action for logging on DEBUG a representation of the currentProfileRequestContext
.class
Spring Web Flow utility action for logging on DEBUG details about the current hierarchy of SpringApplicationContext
and the beans contained within each.class
An action that populates a principal name obtained from a lookup function into aSubjectContext
child of theProfileRequestContext
.class
An action that conditionally populates aUserAgentContext
as a child of theProfileRequestContext
.class
Action that records the "Response Complete" status on the external context if not done so already.class
Action that refreshes aReloadableService
manually.final class
Action that invokes theAttributeResolver
for the current request.class
Action that selects theProfileConfiguration
for the given request and sets it in the looked-upRelyingPartyContext
.final class
This action attempts to resolve aRelyingPartyConfiguration
and adds it to theRelyingPartyContext
that was looked up.class
AnAbstractProfileAction
subclass that adapts an OpenSAMLMessageHandler
for execution in a Spring WebFlow environment.class
Adaptor that wraps aProfileAction
with a Spring Web Flow compatible action implementation so that it can be executed as part of a flow. -
Uses of AbstractProfileAction in net.shibboleth.idp.profile.interceptor
Subclasses of AbstractProfileAction in net.shibboleth.idp.profile.interceptorModifier and TypeClassDescriptionclass
A base class for profile interceptor actions. -
Uses of AbstractProfileAction in net.shibboleth.idp.profile.interceptor.impl
Subclasses of AbstractProfileAction in net.shibboleth.idp.profile.interceptor.implModifier and TypeClassDescriptionclass
A profile interceptor action that filters out available interceptor flows if the request requires non-browser support and the flows require a browser.class
An profile interceptor action that populates aProfileInterceptorContext
withProfileInterceptorFlowDescriptor
objects based on flow IDs from a lookup function.class
A profile interceptor action that selects flows to invoke.class
A profile interceptor action that writes aProfileInterceptorResult
to aStorageService
. -
Uses of AbstractProfileAction in net.shibboleth.idp.saml.audit.impl
Subclasses of AbstractProfileAction in net.shibboleth.idp.saml.audit.implModifier and TypeClassDescriptionclass
Action that produces F-TICKS log entries for successful SAML SSO responses. -
Uses of AbstractProfileAction in net.shibboleth.idp.saml.nameid.impl
Subclasses of AbstractProfileAction in net.shibboleth.idp.saml.nameid.implModifier and TypeClassDescriptionclass
Deprecated.class
Action to perform subject canonicalization, transforming the inputSubject
into a principal name by searching for one and only oneNameIDPrincipal
custom principal, using an injectedNameIDDecoder
to carry out the process.class
Action to perform subject canonicalization, transforming the inputSubject
into a principal name by searching for one and only oneNameIdentifierPrincipal
custom principal, using an injectedNameIdentifierDecoder
to carry out the process. -
Uses of AbstractProfileAction in net.shibboleth.idp.saml.profile.impl
Subclasses of AbstractProfileAction in net.shibboleth.idp.saml.profile.implModifier and TypeClassDescriptionclass
BaseAddAttributeStatementToAssertion<T extends SAMLObject>
Base class for actions that encode anAttributeContext
into a SAML attribute statement.class
Base class for actions that encode authentication information into a SAML 1 or SAML 2 statement.class
Action that extracts a SAML Subject from an inbound message, and prepares aSubjectCanonicalizationContext
to process it into a principal identity.class
An action that runs after a completed canonicalization of a SAML Subject and transfers information into aSubjectContext
child of theProfileRequestContext
.class
An action that creates anAuthenticationContext
and attaches it to the currentProfileRequestContext
.class
Action that adds an outboundMessageContext
and related SAML contexts to theProfileRequestContext
based on the identity of a relying party accessed via a lookup strategy, by default an immediate child of the profile request context.class
Action that prepares an outboundMessageContext
and related SAML contexts in the event that they are not already prepared, to allow error responses to be generated in the case of synchronous bindings (i.e., SOAP).class
Action that adds aRelyingPartyContext
to the currentProfileRequestContext
tree via a creation function.class
Action that populates the outboundSAMLBindingContext
and when appropriate theSAMLEndpointContext
based on the inbound request.class
Action that adds aSAMLSelfEntityContext
to the inboundMessageContext
class
Action that refreshes or clears aMetadataResolver
manually.class
Action that updates inbound and/or outbound instances ofSAMLSelfEntityContext
based on the identity of a relying party accessed via a lookup strategy, by default an immediate child of the profile request context. -
Uses of AbstractProfileAction in net.shibboleth.idp.saml.saml1.profile.impl
Subclasses of AbstractProfileAction in net.shibboleth.idp.saml.saml1.profile.implModifier and TypeClassDescriptionclass
Action that builds anAttributeStatement
and adds it to anAssertion
returned by a lookup strategy, by default in theInOutOperationContext.getOutboundMessageContext()
.class
Action that builds anAuthenticationStatement
and adds it to anAssertion
returned by a lookup strategy, by default in theInOutOperationContext.getOutboundMessageContext()
.class
Action that filters a set of attributes against theAttributeDesignator
objects in anAttributeQuery
. -
Uses of AbstractProfileAction in net.shibboleth.idp.saml.saml2.profile.delegation.impl
Modifier and TypeClassDescriptionclass
Action that builds anAuthnStatement
and adds it to anAssertion
returned by a lookup strategy, by default in theInOutOperationContext.getOutboundMessageContext()
.class
class
Action which adds aDelegationRestrictionType
Condition
to eachAssertion
contained within the outboundResponse
.class
A profile action which decorates instances ofAssertion
appropriately for use as delegation tokens.class
Action which implements policy controls to decide whether an SSO request based on a delegatedAssertion
token is allowed to proceed.class
Post-process the results ofAssertion
token subject canonicalization.class
A profile action which determines whether issuance of a delegatedAssertion
token is active, and populates aDelegationContext
appropriately.class
Locate a pre-validatedAssertion
WS-Security token, and populate theLibertySSOSContext
.class
Populate the outbound message context with data that is specific to the delegation flow.class
-
Uses of AbstractProfileAction in net.shibboleth.idp.saml.saml2.profile.impl
Subclasses of AbstractProfileAction in net.shibboleth.idp.saml.saml2.profile.implModifier and TypeClassDescriptionclass
Action that builds anAttributeStatement
and adds it to anAssertion
returned by a lookup strategy, by default in theInOutOperationContext.getOutboundMessageContext()
.class
Action that creates anAuthnRequest
and sets it as the message returned byInOutOperationContext.getOutboundMessageContext()
.class
Action that builds anAuthnStatement
and adds it to anAssertion
returned by a lookup strategy, by default in theInOutOperationContext.getOutboundMessageContext()
.class
An action that checks for anExternalAuthenticationContext
for a signaled event via theExternalAuthenticationContext.getAuthnError()
method, and otherwise enforces the presence of an inbound SAML Response to process.class
Action that filters a set of attributes against theAttribute
objects in anAttributeQuery
.class
Action that ensures that the attributes in the ACS (if any) are mapped.class
Action that resolves and populatesEncryptionParameters
on anEncryptionContext
created/accessed via a lookup function, by default on aRelyingPartyContext
child of the profile request context.class
Profile action that performs initial analysis of aLogoutRequest
orLogoutResponse
to dispatch it for subsequent processing.class
Perform processing of a SAML 2 Response's Assertions that have been validated by earlier actions for use in finalization of SAML-based authentication by later actions.class
Profile action that processes aLogoutRequest
by resolving matching sessions, and destroys them, populating the associatedSPSession
objects (excepting the one initiating the logout) into aLogoutContext
.class
An authentication action that processes theRequestedAuthnContext
in a SAML 2AuthnRequest
, and populates aRequestedPrincipalContext
with the corresponding information.class
Profile action that propagates a preparedLogoutRequest
message to an SP via the SOAP binding, encapsulating SOAP pipeline construction and execution.class
An action that produces anAuthenticationResult
based on an inbound SAML 2.0 SSO response. -
Uses of AbstractProfileAction in net.shibboleth.idp.saml.session.impl
Subclasses of AbstractProfileAction in net.shibboleth.idp.saml.session.implModifier and TypeClassDescriptionclass
Action that adds an inboundMessageContext
and aSAMLPeerEntityContext
to theProfileRequestContext
based on the identity of a relying party, by default from aSAML2SPSession
found in aLogoutPropagationContext
. -
Uses of AbstractProfileAction in net.shibboleth.idp.session.impl
Subclasses of AbstractProfileAction in net.shibboleth.idp.session.implModifier and TypeClassDescriptionclass
Profile action that destroys anyIdPSession
s found in aLogoutContext
.class
An authentication action that checks for a mismatch between an existing session's identity and the result of a newly canonicalized subject (from aSubjectCanonicalizationContext
).class
An authentication action that populates aAuthenticationContext
with the activeAuthenticationResult
objects found in aSessionContext
that is a direct child of theProfileRequestContext
.class
Profile action that creates aLogoutPropagationContext
containingSPSession
to be destroyed.class
Profile action that populates aMultiRelyingPartyContext
with the relying party information from aLogoutContext
, and extends eachRelyingPartyContext
created with aSAMLMetadataContext
based on metadata lookup.class
A profile action that populates aSessionContext
with an active, validIdPSession
.class
Profile action that resolves an active session from the profile request, and records it, populating the associatedSPSession
objects into aLogoutContext
.class
Restores specific portions of the context tree used during logout processing to enable reuse of logout propagation subflows during back channel logout.class
Stores theLogoutContext
in the servlet session to facilitate lookup by logout propagation flows.class
Saves off specific portions of the context tree in use during logout processing to enable reuse of logout propagation subflows during back channel logout.class
A profile action that selects a logout propagation flow to invoke.class
An authentication action that establishes a record of theAuthenticationResult
in anIdPSession
for the client, either by updating an existing session or creating a new one.class
An action that establishes a record of anSPSession
in an existingIdPSession
for the client. -
Uses of AbstractProfileAction in net.shibboleth.idp.ui.impl
Subclasses of AbstractProfileAction in net.shibboleth.idp.ui.implModifier and TypeClassDescriptionclass
Action to populate theProfileRequestContext
with aRelyingPartyUIContext
.