Class ForceAuthnParameterLookupStrategy

java.lang.Object
net.shibboleth.profile.context.navigate.messaging.AbstractRelyingPartyLookupFunction<ResultType>
net.shibboleth.sp.oidc.profile.context.navigate.AbstractAgentAndRelyingPartyContextLookupFunction<Boolean>
net.shibboleth.sp.oidc.profile.config.navigate.ForceAuthnParameterLookupStrategy
All Implemented Interfaces:
Function<org.opensaml.messaging.context.MessageContext,Boolean>, org.opensaml.messaging.context.navigate.ContextDataLookupFunction<org.opensaml.messaging.context.MessageContext,Boolean>

public class ForceAuthnParameterLookupStrategy extends AbstractAgentAndRelyingPartyContextLookupFunction<Boolean>
Retrieve the ForceAuthn parameter.

This method first checks the inbound DDF input for the FORCE_AUTHN parameter. If present, set to 1, and the Hub has not disallowed it, it returns true. If the feature is disallowed, it returns false.

If the parameter is not present in the DDF, the method falls back to using the the relying party profile configuration.

  • Field Details

    • log

      @Nonnull private final org.slf4j.Logger log
      Logger.
  • Constructor Details

    • ForceAuthnParameterLookupStrategy

      public ForceAuthnParameterLookupStrategy()
  • Method Details

    • apply

      @Nullable public Boolean apply(org.opensaml.messaging.context.MessageContext messageCtx)