Package net.shibboleth.idp.plugin.authn.duo.admin.impl

Class AdminFlowDescriptor

java.lang.Object

net.shibboleth.shared.component.AbstractInitializableComponent

net.shibboleth.shared.component.AbstractIdentifiedInitializableComponent

net.shibboleth.shared.component.AbstractIdentifiableInitializableComponent

net.shibboleth.profile.config.AbstractProfileConfiguration

net.shibboleth.profile.config.AbstractConditionalProfileConfiguration

net.shibboleth.idp.profile.config.AbstractInterceptorAwareProfileConfiguration

net.shibboleth.idp.admin.BasicAdministrativeFlowDescriptor

net.shibboleth.idp.plugin.authn.duo.admin.impl.AdminFlowDescriptor

All Implemented Interfaces:

AdministrativeFlowDescriptor, AuthenticationProfileConfiguration, InterceptorAwareProfileConfiguration, FlowDescriptor, AttributeResolvingProfileConfiguration, ConditionalProfileConfiguration, ProfileConfiguration, Component, DestructableComponent, IdentifiableComponent, IdentifiedComponent, InitializableComponent

public class AdminFlowDescriptor
extends BasicAdministrativeFlowDescriptor

Flow descriptor for Duo admin flow.

This is primarily for managing passwordless opt-in state, but may be extended for other purposes in the future.

Nested Class Summary

Nested classes/interfaces inherited from class net.shibboleth.idp.admin.BasicAdministrativeFlowDescriptor

BasicAdministrativeFlowDescriptor.Logo

Field Summary

Fields

Modifier and Type	Field	Description
private Function<ProfileRequestContext,String>	adminPolicyNameLookupStrategy	Lookup strategy for access control policy to apply for determining admin vs.

Fields inherited from interface net.shibboleth.profile.config.ProfileConfiguration

DEFAULT_DISALLOWED_FEATURES

Constructor Summary

Constructors

Constructor	Description
AdminFlowDescriptor(String id)	Constructor.

Method Summary

Modifier and Type	Method	Description
String	getAdminPolicyName(ProfileRequestContext profileRequestContext)	Get the access control policy name to apply for admin access.
void	setAdminPolicyName(String name)	Set the explicit access control policy name to apply for admin access.
void	setAdminPolicyNameLookupStrategy(Function<ProfileRequestContext,String> strategy)	Set a lookup strategy to use to obtain the admin-level access control policy for this flow.

Methods inherited from class net.shibboleth.idp.admin.BasicAdministrativeFlowDescriptor

equals, getAuthenticationFlows, getDefaultAuthenticationMethods, getInboundInterceptorFlows, getLoggingId, getOutboundInterceptorFlows, getPolicyName, getPostAuthenticationFlows, getProxyCount, getSecurityConfiguration, getUIInfo, hashCode, isAuthenticated, isForceAuthn, isNonBrowserSupported, isResolveAttributes, setAuthenticated, setAuthenticatedPredicate, setAuthenticationFlows, setAuthenticationFlowsLookupStrategy, setDefaultAuthenticationMethods, setDefaultAuthenticationMethodsByString, setDefaultAuthenticationMethodsByStringLookupStrategy, setDefaultAuthenticationMethodsLookupStrategy, setDescriptions, setDisplayNames, setForceAuthn, setForceAuthnPredicate, setInformationURLs, setLoggingId, setLogos, setNonBrowserSupported, setNonBrowserSupportedPredicate, setPolicyName, setPolicyNameLookupStrategy, setPostAuthenticationFlows, setPostAuthenticationFlowsLookupStrategy, setPrincipalServiceManager, setPrivacyStatementURLs, setProxyCount, setProxyCountLookupStrategy, setResolveAttributes, setResolveAttributesPredicate, toString

Methods inherited from class net.shibboleth.idp.profile.config.AbstractInterceptorAwareProfileConfiguration

setInboundInterceptorFlows, setInboundInterceptorFlowsLookupStrategy, setOutboundInterceptorFlows, setOutboundInterceptorFlowsLookupStrategy

Methods inherited from class net.shibboleth.profile.config.AbstractConditionalProfileConfiguration

getActivationCondition, setActivationCondition

Methods inherited from class net.shibboleth.profile.config.AbstractProfileConfiguration

getDisallowedFeatures, isFeatureDisallowed, setDisallowedFeatures, setDisallowedFeaturesLookupStrategy, setSecurityConfiguration, setSecurityConfigurationLookupStrategy

Methods inherited from class net.shibboleth.shared.component.AbstractIdentifiableInitializableComponent

setId

Methods inherited from class net.shibboleth.shared.component.AbstractIdentifiedInitializableComponent

doInitialize, ensureId, getId, ifDestroyedThrowDestroyedComponentException, ifInitializedThrowUnmodifiabledComponentException, ifNotInitializedThrowUninitializedComponentException

Methods inherited from class net.shibboleth.shared.component.AbstractInitializableComponent

checkComponentActive, checkSetterPreconditions, destroy, doDestroy, initialize, isDestroyed, isInitialized

Methods inherited from class java.lang.Object

clone, finalize, getClass, notify, notifyAll, wait, wait, wait

Methods inherited from interface net.shibboleth.idp.admin.AdministrativeFlowDescriptor

isLocal

Methods inherited from interface net.shibboleth.shared.component.DestructableComponent

destroy, isDestroyed

Methods inherited from interface net.shibboleth.shared.component.IdentifiableComponent

setId

Methods inherited from interface net.shibboleth.shared.component.IdentifiedComponent

getId

Methods inherited from interface net.shibboleth.shared.component.InitializableComponent

initialize, isInitialized

Methods inherited from interface net.shibboleth.profile.config.ProfileConfiguration

getDisallowedFeatures, isFeatureDisallowed

Field Details

adminPolicyNameLookupStrategy

@Nonnull
private Function<ProfileRequestContext,String> adminPolicyNameLookupStrategy

Lookup strategy for access control policy to apply for determining admin vs. user-level access.

Constructor Details

AdminFlowDescriptor

public AdminFlowDescriptor(@Nonnull @NotEmpty
 String id)

Constructor.

Parameters:

id -

Method Details

getAdminPolicyName

@Nullable
public String getAdminPolicyName(@Nullable
 ProfileRequestContext profileRequestContext)

Get the access control policy name to apply for admin access.

Parameters:

profileRequestContext - profile request context

Returns:

admin policy name

setAdminPolicyName

public void setAdminPolicyName(@Nullable
 String name)

Set the explicit access control policy name to apply for admin access.

Parameters:

name - admin policy name

setAdminPolicyNameLookupStrategy

public void setAdminPolicyNameLookupStrategy(@Nonnull
 Function<ProfileRequestContext,String> strategy)

Set a lookup strategy to use to obtain the admin-level access control policy for this flow.

Parameters:

strategy - lookup strategy