Package net.shibboleth.idp.saml.nameid.impl
package net.shibboleth.idp.saml.nameid.impl
Implementation of SAML
NameID
and
NameIdentifier
generation and consumption.-
ClassDescriptionGenerator for
NameIdentifier
objects based onIdPAttribute
data.Generator forNameID
objects based onIdPAttribute
data.An abstract action which contains the logic to do crypto transient decoding matching.Regular expression, etc.An abstract action which contains the logic to do transient decoding matching (shared between SAML2 and SAML1).Generates transients using aDataSealer
to encrypt the result into a recoverable value, for use with stateless clustering.Processes a transientNameID
, checks that itsNameIDType.getNameQualifier()
andNameIDType.getSPNameQualifier()
are correct, and decodesXSString.getValue()
via the base class (reversing the work done byCryptoTransientIdGenerationStrategy
).Processes a transientNameIdentifier
, checks that itsNameIdentifier.getNameQualifier()
is correct, and decodesXSString.getValue()
via the base class (reversing the work done byCryptoTransientIdGenerationStrategy
).Deprecated.Action to perform subject canonicalization, transforming the inputSubject
into a principal name by searching for one and only oneNameIDPrincipal
custom principal, using an injectedNameIDDecoder
to carry out the process.A predicate that determines if this action can run or not.Action to perform subject canonicalization, transforming the inputSubject
into a principal name by searching for one and only oneNameIdentifierPrincipal
custom principal, using an injectedNameIdentifierDecoder
to carry out the process.A predicate that determines if this action can run or not.Implementation ofNameIdentifierGenerationService
.Generator for "persistent" FormatNameID
objects that provides a source/seed ID based onIdPAttribute
data.A compound implementation of theSAML1NameIdentifierGenerator
interface that wraps a sequence of candidate generators along with a default to try if no format-specific options are available.A compound implementation of theSAML2NameIDGenerator
interface that wraps a sequence of candidate generators along with a default to try if no format-specific options are available.An abstract decoder which contains the logic to decode SAML persistent IDs that are managed with aDurablePairwiseIdStore
.Generates transients using aStorageService
to manage the reverse mappings.Transform from aNameID
.Transform from aNameIdentifier
.Generates and manages transient identifiers according to specific strategies.The Parameters we need to store in, and get out of a transient ID, namely the attribute recipient (aka the SP) and the principal.DecodesXSString.getValue()
via the base class (reversing the work done byTransientSAML2NameIDGenerator
).DecodesXSString.getValue()
via the base class (reversing the work done byTransientSAML1NameIdentifierGenerator
).Generator for transientNameIdentifier
objects.Generator for transientNameID
objects.