Uses of Class
net.shibboleth.idp.profile.AbstractProfileAction
-
Packages that use AbstractProfileAction Package Description net.shibboleth.idp.admin.impl Implementation classes for administrative profiles.net.shibboleth.idp.authn APIs related to the authentication of a subject.net.shibboleth.idp.authn.duo.impl Implementation of Duo authentication.net.shibboleth.idp.authn.impl Implementation of various authentication actions.net.shibboleth.idp.authn.proxy.impl Classes implementing proxied authentication flows.net.shibboleth.idp.authn.revocation.impl Predicates related to authentication.net.shibboleth.idp.cas.flow.impl CAS protocol flow implementations.net.shibboleth.idp.consent.flow.ar.impl Actions and flow descriptors related to attribute release consent.net.shibboleth.idp.consent.flow.impl Actions and flow descriptors related to consent.net.shibboleth.idp.consent.flow.storage.impl Actions related to consent storage.net.shibboleth.idp.profile Common APIs for handling profile requests.net.shibboleth.idp.profile.audit.impl Audit implementation classes.net.shibboleth.idp.profile.impl Implementations of various profile actions.net.shibboleth.idp.profile.interceptor Classes supporting profile interceptor machinery.net.shibboleth.idp.profile.interceptor.impl Implementation of a profile interceptor flow which executes other flows.net.shibboleth.idp.saml.audit.impl Classes implementing SAML-specific audit log behavior.net.shibboleth.idp.saml.nameid.impl Implementation of SAMLNameIDandNameIdentifiergeneration and consumption.net.shibboleth.idp.saml.profile.impl Actions common to SAML 1 and SAML 2 processing.net.shibboleth.idp.saml.saml1.profile.impl Profile processing actions related to SAML 1 messages.net.shibboleth.idp.saml.saml2.profile.delegation.impl Profile processing components related to SAML 2 delegation.net.shibboleth.idp.saml.saml2.profile.impl Profile processing actions related to SAML 2 messages.net.shibboleth.idp.saml.session.impl Implementation classes for SAML-specific session functionality.net.shibboleth.idp.session.impl Implementations of session-related classes and interfaces.net.shibboleth.idp.ui.impl Implementation classes for information needed by the UI. -
-
Uses of AbstractProfileAction in net.shibboleth.idp.admin.impl
Subclasses of AbstractProfileAction in net.shibboleth.idp.admin.impl Modifier and Type Class Description classDoStorageOperationAction that implements a JSON REST API for accessingStorageServicerecords.classInitializeAdministrativeProfileContextTreeAn action that processes settings from a suppliedAdministrativeFlowDescriptorto prepare the profile context tree for subsequent use by an administrative profile flow.classOutputMetricsAction that outputs one or moreMetricobjects.classUnlockDataSealersAction that sets keystore and key passwords for one or more DataSealer KeyStrategy objects based on query parameters.classUnlockPrivateKeysAction that creates private key objects and injects them into existingMutableCredentialobjects. -
Uses of AbstractProfileAction in net.shibboleth.idp.authn
Subclasses of AbstractProfileAction in net.shibboleth.idp.authn Modifier and Type Class Description classAbstractAuthenticationActionA base class for authentication related actions.classAbstractExtractionActionA base class for authentication actions that extract usernames for subsequent use.classAbstractSubjectCanonicalizationActionA base class for subject canonicalization actions.classAbstractValidationActionA base class for authentication related actions that validate credentials and produce anAuthenticationResult. -
Uses of AbstractProfileAction in net.shibboleth.idp.authn.duo.impl
Subclasses of AbstractProfileAction in net.shibboleth.idp.authn.duo.impl Modifier and Type Class Description classExtractDuoAuthenticationFromHeadersAn action that extracts the Duo factor and device or passcode from HTTP request headers into aDuoAuthenticationContext, and attaches it to theAuthenticationContext.classValidateDuoAuthAPIAn action that checks for aDuoAuthenticationContextand directly produces anAuthenticationResultbased on that identity by authenticating against the Duo AuthAPI.classValidateDuoWebResponseAn action that validates a DuoWeb response message and produces anAuthenticationResultor records error state. -
Uses of AbstractProfileAction in net.shibboleth.idp.authn.impl
Subclasses of AbstractProfileAction in net.shibboleth.idp.authn.impl Modifier and Type Class Description classAbstractAuditingValidationActionBase class for validation actions that includes new audit logging support.classAttributeSourcedSubjectCanonicalizationAn action that extracts a resolvedIdPAttributevalue from anAttributeContextchild obtained via lookup function (by default a child of theSubjectCanonicalizationContext), and uses it as the result of subject canonicalization.classDoLockoutManagerOperationAction that implements a JSON REST API for theAccountLockoutManagerinterface.classExtractKerberosTicketFromWSSTokenTODO.classExtractRemoteUserAn action that extracts an asserted user identity from the incoming request, creates aUsernameContext, and attaches it to theAuthenticationContext.classExtractUserAgentAddressAn action that extracts the user-agent's IP address from the incoming request, creates aUserAgentContext, and attaches it to theAuthenticationContext.classExtractUserAgentIdentifierAn action that extracts the user-agent's identifier from the incoming request, creates aUserAgentContext, and attaches it to theAuthenticationContext.classExtractUsernamePasswordFromBasicAuth/** An action that extracts a username and password from the HTTPHttpHeaders.AUTHORIZATIONheader, creates aUsernamePasswordContext, and attaches it to theAuthenticationContext.classExtractUsernamePasswordFromFormRequestAn action that extracts a username and password from an HTTP form body or query string, creates aUsernamePasswordContext, and attaches it to theAuthenticationContext.classExtractUsernamePasswordFromWSSTokenAn authentication stage that extracts a username/password from the WSS Username/Password attached to a SOAP message.classExtractX509CertificateFromRequestAn action that extracts an X.509 certificate from the standard servlet request attribute, creates aCertificateContext, and attaches it to theAuthenticationContext.classFilterFlowsByForcedAuthnAn authentication action that filters out potential authentication flows if the request requires forced authentication or max age behavior and the flows don't support forced authentication.classFilterFlowsByNonBrowserSupportAn authentication action that filters out potential authentication flows if the request requires non-browser support and the flows require a browser.classFinalizeAuthenticationAn authentication action that runs after a completed authentication flow (or the reuse of an active result) and transfers information from other contexts into aSubjectContextchild of theProfileRequestContext.classFinalizeMultiFactorAuthenticationAn authentication action that completes MFA by producing a finalAuthenticationResultout of whatever constituent parts and pieces exist, by means of an overridable function, storing it in theAuthenticationContextand preparing a freshSubjectCanonicalizationContextto operate on.classInitializeRequestedPrincipalContextAn action that creates anRequestedPrincipalContextand attaches it to the currentAuthenticationContext, if the profile request context contains aRelyingPartyContextwith anAuthenticationProfileConfigurationcontaining one or more default authentication methods.classPopulateAuthenticationContextAn action that populates anAuthenticationContextwith theAuthenticationFlowDescriptorobjects configured into the IdP, potential flows filtered by flow IDs from a lookup function.classPopulateMultiFactorAuthenticationContextAn action that creates and populates aMultiFactorAuthenticationContextwith the set of transition rules to use for coordinating activity, the executingAuthenticationFlowDescriptorand with any active "factors" found, if an active result from the MFA flow is present in theAuthenticationContext.classPopulateSubjectCanonicalizationContextAn action that populates aSubjectCanonicalizationContextwith theSubjectCanonicalizationFlowDescriptorobjects configured into the IdP.classPreserveAuthenticationFlowStateAn action that extracts configured parameters from a servlet request and populatesAuthenticationContext.getAuthenticationStateMap()with the data.classSelectAuthenticationFlowAn authentication action that selects an authentication flow to invoke, or re-uses an existing result for SSO.classSelectSubjectCanonicalizationFlowA canonicalization action that selects a canonicalization flow to invoke.classSimpleSubjectCanonicalizationAn action that operates on aSubjectCanonicalizationContextchild of the currentProfileRequestContext, and transforms the inputSubjectinto a principal name by searching for one and only oneUsernamePrincipalcustom principal.classTransitionMultiFactorAuthenticationAn authentication action that acts as the driver regulating execution of transitions between MFA stages.classValidateCredentialsAn action that processes a list ofCredentialValidatorobjects to produce anAuthenticationResult.classValidateExternalAuthenticationAn action that checks for anExternalAuthenticationContextand directly produces anAuthenticationResultor records error state based on the contents.classValidateFunctionResultAn action that executes a deployer-supplied function and produces anAuthenticationResultbased on the function result.classValidateRemoteUserAn action that checks for aUsernameContextand directly produces anAuthenticationResultbased on that identity.classValidateUserAgentAddressAn action that ensures that a user-agent address found within aUserAgentContextis within a given range and generates anAuthenticationResult.classX500SubjectCanonicalizationAn action that operates on aSubjectCanonicalizationContextchild of the currentProfileRequestContext, and transforms the inputSubjectinto a principal name by searching for one and only oneX509Certificatepublic credential, or in its absence one and only oneX500Principal. -
Uses of AbstractProfileAction in net.shibboleth.idp.authn.proxy.impl
Subclasses of AbstractProfileAction in net.shibboleth.idp.authn.proxy.impl Modifier and Type Class Description classExtractDiscoveryResponseAn action that extracts a discovery service result and copies it to theAuthenticationContext.classInitializeProxyProfileRequestContextAction that creates a newProfileRequestContextvia a creation strategy, and sets the profile and logging IDs, if provided. -
Uses of AbstractProfileAction in net.shibboleth.idp.authn.revocation.impl
Subclasses of AbstractProfileAction in net.shibboleth.idp.authn.revocation.impl Modifier and Type Class Description classDoRevocationCacheOperationAction that implements a JSON REST API for theRevocationCacheinterface. -
Uses of AbstractProfileAction in net.shibboleth.idp.cas.flow.impl
Subclasses of AbstractProfileAction in net.shibboleth.idp.cas.flow.impl Modifier and Type Class Description classAbstractCASProtocolAction<RequestType,ResponseType>Base class for CAS protocol actions.classAbstractOutgoingSamlMessageActionBase class for all actions that build SAMLResponsemessages for output.classBuildAuthenticationContextActionBuilds an authentication context from an incomingServiceTicketRequestmessage.classBuildProxyChainActionAction that builds the chain of visited proxies for a successful proxy ticket validation event.classBuildRelyingPartyContextAction<RequestType,ResponseType>Creates theRelyingPartyContextas a child of theProfileRequestContext.classBuildSAMLMetadataContextAction<RequestType,ResponseType>Builds aSAMLMetadataContextchild ofRelyingPartyContextto facilitate relying party selection by group name.classBuildSamlValidationFailureMessageActionCreates the SAML response message for failed ticket validation at the/samlValidateURI.classBuildSamlValidationSuccessMessageActionCreates the SAML response message for successful ticket validation at the/samlValidateURI.classCheckProxyAuthorizationAction<RequestType,ResponseType>Checks the currentServiceContextto determine whether the service/relying party is authorized to proxy.classGrantProxyTicketActionGenerates and stores a CAS protocol proxy ticket.classGrantServiceTicketActionGenerates and stores a CAS protocol service ticket.classInitializeLoginActionInitializes the CAS protocol interaction at the/loginURI.classInitializeProxyActionInitializes the CAS protocol interaction at the/proxyURI.classInitializeValidateActionInitializes the CAS protocol interaction at the/loginURI.classPopulateProtocolErrorAction<RequestType>Populates error information needed for protocol error messages.classPrepareTicketValidationResponseActionPreparesTicketValidationResponsefor use in CAS protocol response views.classProcessSamlMessageActionProcesses the ticket validation request message from decoded SAML 1.1 message and request parameters.classPublishProtocolMessageAction<RequestType,ResponseType>Action to publish the CAS protocol request or response messages, i.e.classUpdateIdPSessionWithSPSessionAction<RequestType,ResponseType>Conditionally updates theIdPSessionwith aCASSPSessionto support SLO.classValidateProxyCallbackActionValidates the proxy callback URL provided in the service ticket validation request and creates a PGT when the proxy callback is successfully authenticated.classValidateRenewActionEnsures that a service ticket validation request that specifies renew=true matches the renew flag on the ticket that is presented for validation.classValidateTicketActionCAS protocol service ticket validation action.classWriteValidateResponseActionCAS 1.0 protocol response handler. -
Uses of AbstractProfileAction in net.shibboleth.idp.consent.flow.ar.impl
Subclasses of AbstractProfileAction in net.shibboleth.idp.consent.flow.ar.impl Modifier and Type Class Description classAbstractAttributeReleaseActionBase class for attribute release consent actions.classInitializeAttributeReleaseContextAction that creates anAttributeReleaseContextand attaches it to the currentProfileRequestContext.classPopulateAttributeReleaseContextAttribute consent action to populate the attribute consent context with the attributes for which consent should be obtained.classReleaseAttributesAttribute consent action which constrains the attributes released to those consented to. -
Uses of AbstractProfileAction in net.shibboleth.idp.consent.flow.impl
Subclasses of AbstractProfileAction in net.shibboleth.idp.consent.flow.impl Modifier and Type Class Description classAbstractConsentActionBase class for consent actions.classExtractConsentConsent action which extracts user input and updates current consent objects in the consent context accordingly.classInitializeConsentContextAction that creates aConsentContextand attaches it to the currentProfileRequestContext.classPopulateConsentContextConsent action which populates the current consents of a consent context with the output value of a function whose input value is a profile request context. -
Uses of AbstractProfileAction in net.shibboleth.idp.consent.flow.storage.impl
Subclasses of AbstractProfileAction in net.shibboleth.idp.consent.flow.storage.impl Modifier and Type Class Description classAbstractConsentIndexedStorageActionBase class for consent actions which write to aStorageService.classAbstractConsentStorageActionBase class for consent actions which interact with aStorageService.classCreateGlobalConsentResultConsent action to create a consent result representing global consent to be stored in a storage service.classCreateResultConsent action to create a consent result representing the result of a consent flow.classReadConsentFromStorageConsent action which reads consent records from storage and adds the serialized consent records to the consent context as previous consents.classRevokeConsentConsent action which deletes a consent record from storage.classUpdateCounterConsent action which maintains a storage record whose value is the current time in milliseconds. -
Uses of AbstractProfileAction in net.shibboleth.idp.profile
Subclasses of AbstractProfileAction in net.shibboleth.idp.profile Modifier and Type Class Description classScriptedActionAn action which calls out to a supplied script. -
Uses of AbstractProfileAction in net.shibboleth.idp.profile.audit.impl
Subclasses of AbstractProfileAction in net.shibboleth.idp.profile.audit.impl Modifier and Type Class Description classPopulateAuditContextAction that populates fields in anAuditContextusing injected functions.classWriteAuditLogAction that produces audit log entries based on anAuditContextand one or more formatting strings. -
Uses of AbstractProfileAction in net.shibboleth.idp.profile.impl
Subclasses of AbstractProfileAction in net.shibboleth.idp.profile.impl Modifier and Type Class Description classFilterAttributesAction that invokes theAttributeFilterfor the current request.classInitializeProfileRequestContextAction that creates a newProfileRequestContextand binds it to the current conversation under theProfileRequestContext.BINDING_KEYkey, and sets the profile and logging IDs, if provided.classLogContextTreeSpring Web Flow utility action for logging on DEBUG a representation of the currentProfileRequestContext.classLogSpringContextInfoSpring Web Flow utility action for logging on DEBUG details about the current hierarchy of SpringApplicationContextand the beans contained within each.classPopulateSubjectContextAn action that populates a principal name obtained from a lookup function into aSubjectContextchild of theProfileRequestContext.classPopulateUserAgentContextAn action that conditionally populates aUserAgentContextas a child of theProfileRequestContext.classRecordResponseCompleteAction that records the "Response Complete" status on the external context if not done so already.classReloadServiceConfigurationAction that refreshes aReloadableServicemanually.classResolveAttributesAction that invokes theAttributeResolverfor the current request.classSelectProfileConfigurationAction that selects theProfileConfigurationfor the given request and sets it in the looked-upRelyingPartyContext.classSelectRelyingPartyConfigurationThis action attempts to resolve aRelyingPartyConfigurationand adds it to theRelyingPartyContextthat was looked up.classWebFlowMessageHandlerAdaptorAnAbstractProfileActionsubclass that adapts an OpenSAMLMessageHandlerfor execution in a Spring WebFlow environment.classWebFlowProfileActionAdaptorAdaptor that wraps aProfileActionwith a Spring Web Flow compatible action implementation so that it can be executed as part of a flow. -
Uses of AbstractProfileAction in net.shibboleth.idp.profile.interceptor
Subclasses of AbstractProfileAction in net.shibboleth.idp.profile.interceptor Modifier and Type Class Description classAbstractProfileInterceptorActionA base class for profile interceptor actions. -
Uses of AbstractProfileAction in net.shibboleth.idp.profile.interceptor.impl
Subclasses of AbstractProfileAction in net.shibboleth.idp.profile.interceptor.impl Modifier and Type Class Description classFilterFlowsByNonBrowserSupportA profile interceptor action that filters out available interceptor flows if the request requires non-browser support and the flows require a browser.classPopulateProfileInterceptorContextAn profile interceptor action that populates aProfileInterceptorContextwithProfileInterceptorFlowDescriptorobjects based on flow IDs from a lookup function.classSelectProfileInterceptorFlowA profile interceptor action that selects flows to invoke.classWriteProfileInterceptorResultToStorageA profile interceptor action that writes aProfileInterceptorResultto aStorageService. -
Uses of AbstractProfileAction in net.shibboleth.idp.saml.audit.impl
Subclasses of AbstractProfileAction in net.shibboleth.idp.saml.audit.impl Modifier and Type Class Description classWriteFTICKSLogAction that produces F-TICKS log entries for successful SAML SSO responses. -
Uses of AbstractProfileAction in net.shibboleth.idp.saml.nameid.impl
Subclasses of AbstractProfileAction in net.shibboleth.idp.saml.nameid.impl Modifier and Type Class Description classLegacyCanonicalizationDeprecated.classNameIDCanonicalizationAction to perform subject canonicalization, transforming the inputSubjectinto a principal name by searching for one and only oneNameIDPrincipalcustom principal, using an injectedNameIDDecoderto carry out the process.classNameIdentifierCanonicalizationAction to perform subject canonicalization, transforming the inputSubjectinto a principal name by searching for one and only oneNameIdentifierPrincipalcustom principal, using an injectedNameIdentifierDecoderto carry out the process. -
Uses of AbstractProfileAction in net.shibboleth.idp.saml.profile.impl
Subclasses of AbstractProfileAction in net.shibboleth.idp.saml.profile.impl Modifier and Type Class Description classBaseAddAttributeStatementToAssertion<T extends SAMLObject>Base class for actions that encode anAttributeContextinto a SAML attribute statement.classBaseAddAuthenticationStatementToAssertionBase class for actions that encode authentication information into a SAML 1 or SAML 2 statement.classExtractSubjectFromRequestAction that extracts a SAML Subject from an inbound message, and prepares aSubjectCanonicalizationContextto process it into a principal identity.classFinalizeSAMLSubjectCanonicalizationAn action that runs after a completed canonicalization of a SAML Subject and transfers information into aSubjectContextchild of theProfileRequestContext.classInitializeAuthenticationContextAn action that creates anAuthenticationContextand attaches it to the currentProfileRequestContext.classInitializeOutboundMessageContextAction that adds an outboundMessageContextand related SAML contexts to theProfileRequestContextbased on the identity of a relying party accessed via a lookup strategy, by default an immediate child of the profile request context.classInitializeOutboundMessageContextForErrorAction that prepares an outboundMessageContextand related SAML contexts in the event that they are not already prepared, to allow error responses to be generated in the case of synchronous bindings (i.e., SOAP).classInitializeRelyingPartyContextFromSAMLPeerAction that adds aRelyingPartyContextto the currentProfileRequestContexttree via a creation function.classPopulateBindingAndEndpointContextsAction that populates the outboundSAMLBindingContextand when appropriate theSAMLEndpointContextbased on the inbound request.classPopulateInboundMessageContextWithSAMLSelfAction that adds aSAMLSelfEntityContextto the inboundMessageContextclassReloadMetadataAction that refreshes or clears aMetadataResolvermanually.classUpdateSAMLSelfEntityContextAction that updates inbound and/or outbound instances ofSAMLSelfEntityContextbased on the identity of a relying party accessed via a lookup strategy, by default an immediate child of the profile request context. -
Uses of AbstractProfileAction in net.shibboleth.idp.saml.saml1.profile.impl
Subclasses of AbstractProfileAction in net.shibboleth.idp.saml.saml1.profile.impl Modifier and Type Class Description classAddAttributeStatementToAssertionAction that builds anAttributeStatementand adds it to anAssertionreturned by a lookup strategy, by default in theInOutOperationContext.getOutboundMessageContext().classAddAuthenticationStatementToAssertionAction that builds anAuthenticationStatementand adds it to anAssertionreturned by a lookup strategy, by default in theInOutOperationContext.getOutboundMessageContext().classFilterByQueriedAttributeDesignatorsAction that filters a set of attributes against theAttributeDesignatorobjects in anAttributeQuery. -
Uses of AbstractProfileAction in net.shibboleth.idp.saml.saml2.profile.delegation.impl
Subclasses of AbstractProfileAction in net.shibboleth.idp.saml.saml2.profile.delegation.impl Modifier and Type Class Description classAddAuthnStatementToAssertionFromInboundAssertionTokenAction that builds anAuthnStatementand adds it to anAssertionreturned by a lookup strategy, by default in theInOutOperationContext.getOutboundMessageContext().classAddDelegationPolicyToAssertionclassAddDelegationRestrictionToAssertionsAction which adds aDelegationRestrictionTypeConditionto eachAssertioncontained within the outboundResponse.classDecorateDelegatedAssertionA profile action which decorates instances ofAssertionappropriately for use as delegation tokens.classEvaluateDelegationPolicyAction which implements policy controls to decide whether an SSO request based on a delegatedAssertiontoken is allowed to proceed.classFinalizeSAMLTokenProcessingPost-process the results ofAssertiontoken subject canonicalization.classPopulateDelegationContextA profile action which determines whether issuance of a delegatedAssertiontoken is active, and populates aDelegationContextappropriately.classPopulateLibertyContextLocate a pre-validatedAssertionWS-Security token, and populate theLibertySSOSContext.classPopulateOutboundMessageContextPopulate the outbound message context with data that is specific to the delegation flow.classProcessDelegatedAssertion -
Uses of AbstractProfileAction in net.shibboleth.idp.saml.saml2.profile.impl
Subclasses of AbstractProfileAction in net.shibboleth.idp.saml.saml2.profile.impl Modifier and Type Class Description classAddAttributeStatementToAssertionAction that builds anAttributeStatementand adds it to anAssertionreturned by a lookup strategy, by default in theInOutOperationContext.getOutboundMessageContext().classAddAuthnRequestAction that creates anAuthnRequestand sets it as the message returned byInOutOperationContext.getOutboundMessageContext().classAddAuthnStatementToAssertionAction that builds anAuthnStatementand adds it to anAssertionreturned by a lookup strategy, by default in theInOutOperationContext.getOutboundMessageContext().classContinueSAMLAuthenticationAn action that checks for anExternalAuthenticationContextfor a signaled event via theExternalAuthenticationContext.getAuthnError()method, and otherwise enforces the presence of an inbound SAML Response to process.classFilterByQueriedAttributesAction that filters a set of attributes against theAttributeobjects in anAttributeQuery.classMapRequestedAttributesInAttributeConsumingServiceAction that ensures that the attributes in the ACS (if any) are mapped.classPopulateEncryptionParametersAction that resolves and populatesEncryptionParameterson anEncryptionContextcreated/accessed via a lookup function, by default on aRelyingPartyContextchild of the profile request context.classPreProcessLogoutMessageProfile action that performs initial analysis of aLogoutRequestorLogoutResponseto dispatch it for subsequent processing.classProcessAssertionsForAuthenticationPerform processing of a SAML 2 Response's Assertions that have been validated by earlier actions for use in finalization of SAML-based authentication by later actions.classProcessLogoutRequestProfile action that processes aLogoutRequestby resolving matching sessions, and destroys them, populating the associatedSPSessionobjects (excepting the one initiating the logout) into aLogoutContext.classProcessRequestedAuthnContextAn authentication action that processes theRequestedAuthnContextin a SAML 2AuthnRequest, and populates aRequestedPrincipalContextwith the corresponding information.classSOAPLogoutRequestProfile action that propagates a preparedLogoutRequestmessage to an SP via the SOAP binding, encapsulating SOAP pipeline construction and execution.classValidateSAMLAuthenticationAn action that produces anAuthenticationResultbased on an inbound SAML 2.0 SSO response. -
Uses of AbstractProfileAction in net.shibboleth.idp.saml.session.impl
Subclasses of AbstractProfileAction in net.shibboleth.idp.saml.session.impl Modifier and Type Class Description classPrepareInboundMessageContextAction that adds an inboundMessageContextand aSAMLPeerEntityContextto theProfileRequestContextbased on the identity of a relying party, by default from aSAML2SPSessionfound in aLogoutPropagationContext. -
Uses of AbstractProfileAction in net.shibboleth.idp.session.impl
Subclasses of AbstractProfileAction in net.shibboleth.idp.session.impl Modifier and Type Class Description classDestroySessionsProfile action that destroys anyIdPSessions found in aLogoutContext.classDetectIdentitySwitchAn authentication action that checks for a mismatch between an existing session's identity and the result of a newly canonicalized subject (from aSubjectCanonicalizationContext).classExtractActiveAuthenticationResultsAn authentication action that populates aAuthenticationContextwith the activeAuthenticationResultobjects found in aSessionContextthat is a direct child of theProfileRequestContext.classPopulateLogoutPropagationContextProfile action that creates aLogoutPropagationContextcontainingSPSessionto be destroyed.classPopulateMultiRPContextFromLogoutContextProfile action that populates aMultiRelyingPartyContextwith the relying party information from aLogoutContext, and extends eachRelyingPartyContextcreated with aSAMLMetadataContextbased on metadata lookup.classPopulateSessionContextA profile action that populates aSessionContextwith an active, validIdPSession.classProcessLogoutProfile action that resolves an active session from the profile request, and records it, populating the associatedSPSessionobjects into aLogoutContext.classRestoreProfileRequestContextTreeRestores specific portions of the context tree used during logout processing to enable reuse of logout propagation subflows during back channel logout.classSaveLogoutContextStores theLogoutContextin the servlet session to facilitate lookup by logout propagation flows.classSaveProfileRequestContextTreeSaves off specific portions of the context tree in use during logout processing to enable reuse of logout propagation subflows during back channel logout.classSelectLogoutPropagationFlowA profile action that selects a logout propagation flow to invoke.classUpdateSessionWithAuthenticationResultAn authentication action that establishes a record of theAuthenticationResultin anIdPSessionfor the client, either by updating an existing session or creating a new one.classUpdateSessionWithSPSessionAn action that establishes a record of anSPSessionin an existingIdPSessionfor the client. -
Uses of AbstractProfileAction in net.shibboleth.idp.ui.impl
Subclasses of AbstractProfileAction in net.shibboleth.idp.ui.impl Modifier and Type Class Description classSetRPUIInformationAction to populate theProfileRequestContextwith aRelyingPartyUIContext.
-