Package net.shibboleth.idp.saml.profile.config

Interface SAMLProfileConfiguration

All Superinterfaces:

Component, IdentifiedComponent, ProfileConfiguration

All Known Subinterfaces:

SAMLArtifactAwareProfileConfiguration, SAMLArtifactConsumerProfileConfiguration

All Known Implementing Classes:

AbstractSAML1ArtifactAwareProfileConfiguration, AbstractSAML2ArtifactAwareProfileConfiguration, AbstractSAML2ProfileConfiguration, AbstractSAMLProfileConfiguration, ArtifactResolutionProfileConfiguration, ArtifactResolutionProfileConfiguration, AttributeQueryProfileConfiguration, AttributeQueryProfileConfiguration, BrowserSSOProfileConfiguration, BrowserSSOProfileConfiguration, ECPProfileConfiguration, SingleLogoutProfileConfiguration, SSOSProfileConfiguration

public interface SAMLProfileConfiguration
extends ProfileConfiguration

Common interface for SAML profile configurations.

Method Summary

Modifier and Type	Method	Description
Set<String>	getAdditionalAudiencesForAssertion(ProfileRequestContext profileRequestContext)	Get an unmodifiable set of audiences, in addition to the relying party(ies) to which the IdP is issuing the assertion, with which an assertion may be shared.
Duration	getAssertionLifetime(ProfileRequestContext profileRequestContext)	Get the lifetime of generated assertions.
boolean	isIncludeConditionsNotBefore(ProfileRequestContext profileRequestContext)	Get whether to include a NotBefore attribute in the Conditions of generated assertions.
boolean	isSignAssertions(ProfileRequestContext profileRequestContext)	Get the predicate used to determine if generated assertions should be signed.
boolean	isSignRequests(ProfileRequestContext profileRequestContext)	Get the predicate used to determine if generated requests should be signed.
boolean	isSignResponses(ProfileRequestContext profileRequestContext)	Get the predicate used to determine if generated responses should be signed.

Methods inherited from interface net.shibboleth.utilities.java.support.component.IdentifiedComponent

getId

Methods inherited from interface net.shibboleth.idp.profile.config.ProfileConfiguration

getInboundInterceptorFlows, getOutboundInterceptorFlows, getSecurityConfiguration

Method Detail

isSignAssertions

boolean isSignAssertions(@Nullable
                         ProfileRequestContext profileRequestContext)

Get the predicate used to determine if generated assertions should be signed.

Parameters:

profileRequestContext - current profile request context

Returns:

predicate used to determine if generated assertions should be signed

isSignRequests

boolean isSignRequests(@Nullable
                       ProfileRequestContext profileRequestContext)

Get the predicate used to determine if generated requests should be signed.

Parameters:

profileRequestContext - current profile request context

Returns:

predicate used to determine if generated requests should be signed

isSignResponses

boolean isSignResponses(@Nullable
                        ProfileRequestContext profileRequestContext)

Get the predicate used to determine if generated responses should be signed.

Parameters:

profileRequestContext - current profile request context

Returns:

predicate used to determine if generated responses should be signed

getAssertionLifetime

@Nonnull
Duration getAssertionLifetime(@Nullable
                              ProfileRequestContext profileRequestContext)

Get the lifetime of generated assertions.

Parameters:

profileRequestContext - current profile request context

Returns:

lifetime of generated assertions

getAdditionalAudiencesForAssertion

@Nonnull
@NonnullElements
@NotLive
@Unmodifiable
Set<String> getAdditionalAudiencesForAssertion(@Nullable
                                               ProfileRequestContext profileRequestContext)

Get an unmodifiable set of audiences, in addition to the relying party(ies) to which the IdP is issuing the assertion, with which an assertion may be shared.

Parameters:

profileRequestContext - current profile request context

Returns:

additional audiences to which an assertion may be shared

isIncludeConditionsNotBefore

boolean isIncludeConditionsNotBefore(@Nullable
                                     ProfileRequestContext profileRequestContext)

Get whether to include a NotBefore attribute in the Conditions of generated assertions.

Parameters:

profileRequestContext - current profile request context

Returns:

whether to include a NotBefore attribute in the Conditions of generated assertions