# All Classes and Interfaces

Class
Description
AbstractAttributeDisplayFunction
Abstract Function which returns `Locale`-aware information about an attribute.
AbstractAttributeReleaseAction
Base class for attribute release consent actions.
AbstractAuditingValidationAction
Base class for validation actions that includes new audit logging support.
AbstractAuthenticationAction
A base class for authentication related actions.
AbstractAuthenticationResultPredicate
Base class for predicates that operate on `AuthenticationResult` instances.
AbstractCASAttributeTranscoder<EncodedType extends IdPAttributeValue>
Base class for transcoders that support CAS attributes.
AbstractCASAttributeTranscoder.NamingFunction
A function to produce a "canonical" name for a CAS `Attribute` for transcoding rules.
AbstractCASProtocolAction<RequestType,ResponseType>
Base class for CAS protocol actions.
AbstractCommandLineArguments
Base class for JCommander command line argument handling for an HTTP-based remote service call, with an abstract method that adds to a URL based on a derived class' arguments.
AbstractConsentAction
Base class for consent actions.
AbstractConsentIndexedStorageAction
Base class for consent actions which write to a `StorageService`.
AbstractConsentStorageAction
Base class for consent actions which interact with a `StorageService`.
AbstractCredentialValidator
An abstract `CredentialValidator` that handles some common behavior.
AbstractExtractionAction
A base class for authentication actions that extract usernames for subsequent use.
AbstractIdPHomeAwareCommandLine<T extends AbstractIdPHomeAwareCommandLineArguments>
An extension to `AbstractCommandLine` that auto-adds our context initializer for idp.home and property support.
AbstractIdPHomeAwareCommandLineArguments
An extension to `AbstractCommandLineArguments` that allows idp.home override and includes HTTP client support.
AbstractIdPSession
Abstract base for implementations of `IdPSession`, handles basic management of the instance data without addressing persistence.
AbstractIdPSession.AddressFamily
Address syntaxes supported for address binding.
AbstractInterceptorAwareProfileConfiguration
Base class for `InterceptorAwareProfileConfiguration` implementations.
AbstractNameIDCanonicalizer
Base class for "inline" implementations of SAML c14n flows.
AbstractOutgoingSamlMessageAction
Base class for all actions that build SAML `Response` messages for output.
AbstractPrincipalSerializer<Type>
Base class for `PrincipalSerializer` implementations.
AbstractProfileAction
Base class for Spring-aware profile actions.
AbstractProfileInterceptorAction
A base class for profile interceptor actions.
AbstractProfileInterceptorResult
Base class for profile interceptor results.
AbstractProtocolConfiguration
Base class for CAS protocol configuration.
AbstractProtocolResponse
Abstract base class for protocol response messages.
AbstractProxyRestrictionAuditExtractor<T>
Base class for `Function` that returns content from the `ProxyRestriction` element.
AbstractSAML1ArtifactAwareProfileConfiguration
Configuration support for artifact-aware profiles.
AbstractSAML1AssertionProducingProfileConfiguration
Base class for IdP SAML 1.x profile configurations that produce assertions.
AbstractSAML2ArtifactAwareProfileConfiguration
Configuration support for artifact-aware profiles.
AbstractSAML2AssertionProducingProfileConfiguration
Base class for IdP SAML 2.0 profile configurations that produce assertions.
AbstractSAML2NameIDGenerator
IdP-specific base class for SAML 2.0 NameID generation that extends the OpenSAML base class with support for `BrowserSSOProfileConfiguration.getSPNameQualifier(org.opensaml.profile.context.ProfileRequestContext)`.
AbstractSAML2ProfileConfiguration
Base class for SAML 2 profile configurations.
AbstractSAMLProfileConfiguration
Base class for SAML profile configurations.
AbstractScopingAuditExtractor<T>
Base class for `Function` that returns content from the `Scoping` element from an `AuthnRequest`.
AbstractSPSessionSerializer
Base class for `SPSession` serializers that handles data common to all such objects.
AbstractSubjectCanonicalizationAction
A base class for subject canonicalization actions.
AbstractSubjectCanonicalizer
A base class for "stand-alone" subject c14n implementations.
AbstractTemplateSearchDnResolver
Base class for `Template` based search dn resolvers.
AbstractTemplateSearchDnResolver.EscapingReferenceInsertionEventHandler
Escapes LDAP attribute values added to the template context.
AbstractTicketSerializer<T extends Ticket>
Base class for ticket serializers that use a simple field-delimited serialization strategy.
AbstractTicketService
Abstract base class for ticket services that rely on `StorageService` for ticket storage.
AbstractUsernamePasswordCredentialValidator
An abstract `CredentialValidator` that checks for a `UsernamePasswordContext` and delegates to subclasses to produce a result.
AbstractValidationAction
A base class for authentication related actions that validate credentials and produce an `AuthenticationResult`.
AccountLockoutManager
A component that manages lockout state for accounts.
ActionSupport
Helper class for `Action` operations.
ActionTestingSupport
Helper methods for creating/testing objects within profile action tests.
ActionTestSupportAction
A Test {"link `Action`.
AddAttributeConsumingServiceHandler
Extension of OpenSAML handler that incorporates `BrowserSSOProfileConfiguration.getRequestedAttributes(org.opensaml.profile.context.ProfileRequestContext)`.
AddAttributeStatementToAssertion
Action that builds an `AttributeStatement` and adds it to an `Assertion` returned by a lookup strategy, by default in the `InOutOperationContext.getOutboundMessageContext()`.
AddAttributeStatementToAssertion
Action that builds an `AttributeStatement` and adds it to an `Assertion` returned by a lookup strategy, by default in the `InOutOperationContext.getOutboundMessageContext()`.
AddAuthenticationStatementToAssertion
Action that builds an `AuthenticationStatement` and adds it to an `Assertion` returned by a lookup strategy, by default in the `InOutOperationContext.getOutboundMessageContext()`.
AddAuthnRequest
Action that creates an `AuthnRequest` and sets it as the message returned by `InOutOperationContext.getOutboundMessageContext()`.
AddAuthnStatementToAssertion
Action that builds an `AuthnStatement` and adds it to an `Assertion` returned by a lookup strategy, by default in the `InOutOperationContext.getOutboundMessageContext()`.
AddLogoutRequest
Action that creates a `LogoutRequest` based on an `SAML2SPSession` in a `LogoutPropagationContext` and sets it as the message returned by `InOutOperationContext.getOutboundMessageContext()`.
AdministrativeFlowDescriptor
A descriptor for an administrative flow.
AdministrativeFlowDescriptorManager
Manager of `AdministrativeFlowDescriptor` objects.
AllowedSAMLPresentersPredicate
Deprecated, for removal: This API element is subject to removal in a future version.
ArtifactResolutionProfileConfiguration
Configuration support for SAML 1.x artifact resolution requests.
ArtifactResolutionProfileConfiguration
Configuration support for IdP SAML 2.0 artifact resolution profile.
AssertionIDAuditExtractor
`Function` that returns the ID attribute from the assertions in a response.
AssertionInstantAuditExtractor
`Function` that returns the IssueInstant attribute from the assertions in a response.
AttemptedAuthenticationFlowAuditExtractor
`Function` that returns the latest attempted authentication flow ID.
AttemptedUsernameAuditExtractor
`Function` that returns the username in a subordinate `UsernamePasswordContext` or `UsernameContext`, if any.
Attribute
Wrapper class for a CAS attribute/values construct in a validate response.
AttributeDisplayDescriptionFunction
Function which returns the locale-aware display description of an attribute, defaulting to the attribute ID if the attribute has no display description.
AttributeDisplayNameFunction
Function which returns the locale-aware display name of an attribute, defaulting to the attribute ID if the attribute has no display name.
AttributeHelper
Class to help Attribute Extraction in views.
AttributePredicate
Predicate to determine whether consent should be obtained for an attribute.
AttributeQueryProfileConfiguration
Configuration support for SAML 1 attribute query requests.
AttributeQueryProfileConfiguration
Configuration support for SAML 2.0 Attribute Query profile.
AttributeQueryProfileConfiguration
Configuration support for IdP SAML 2.0 attribute query profile.
AttributeReleaseConsentFunction
Function that returns a map of consent objects representing consent to attribute release.
AttributeReleaseContext
Context for attribute release consent.
AttributeReleaseFlowDescriptor
Descriptor for an attribute release flow.
AttributeRevocationCondition
A condition for login flows that checks for revocation against a resolved `IdPAttribute`.
AttributeSourcedAuthnContextTranslationStrategy
Implementation of the SSO authnContextTranslationStrategyEx hook that translates decoded `IdPAttribute` values into (optionally mapped) values in the form of `AuthnContextClassRefPrincipal` objects.
AttributeSourcedSAML1NameIdentifierGenerator
Generator for `NameIdentifier` objects based on `IdPAttribute` data.
AttributeSourcedSAML2NameIDGenerator
Generator for `NameID` objects based on `IdPAttribute` data.
AttributeSourcedSubjectCanonicalization
A `SubjectCanonicalizer` that resolves attributes and then extracts a resolved `IdPAttribute` value from an `AttributeContext` child obtained via lookup function (by default a child of the `SubjectCanonicalizationContext`), and uses it as the result of subject canonicalization.
AttributeSourcedSubjectCanonicalizationAction
Deprecated, for removal: This API element is subject to removal in a future version.
AttributeValueLookupFunction
`ContextDataLookupFunction` to return the value of an attribute from an `AttributeContext`.
AttributeValuesHashFunction
Function to calculate the hash of the values of an IdP attribute.
AuthenticationContext
A context representing the state of an authentication attempt, this is the primary input/output context for the action flow responsible for authentication, and within that flow, the individual flows that carry out a specific kind of authentication.
AuthenticationErrorContext
A context that holds information about authentication failures.
AuthenticationFlowAuditExtractor
`Function` that returns the authentication flow ID used to satisfy a request.
AuthenticationFlowDescriptor
A descriptor for an authentication flow.
AuthenticationFlowDescriptorManager
Manager of `AuthenticationFlowDescriptor` objects.
AuthenticationFlowsLookupFunction
A function that returns `AuthenticationProfileConfiguration.getAuthenticationFlows(ProfileRequestContext)` if such a profile is available from a `RelyingPartyContext` obtained via a lookup function, by default a child of the `ProfileRequestContext`.
AuthenticationMethodPrincipal
Principal based on a SAML 1.x AuthenticationMethod.
AuthenticationProfileConfiguration
Configuration of profiles for authentication.
AuthenticationResult
Describes an act of authentication.
AuthenticationResultPredicate
Condition that checks for the existence of at least one active `AuthenticationResult` instances of a given flow.
AuthenticationResultPrincipal
Principal that wraps an `AuthenticationResult`.
AuthenticationResultPrincipalSerializer
Principal serializer for `AuthenticationResultPrincipal`.
AuthenticationWarningContext
A context that holds information about authentication warnings.
AuthnAuditFields
Constants to use for audit logging fields stored in an `AuditContext`.
AuthnContextAuditExtractor
`Function` that returns the first AuthenticationMethod, AuthnContextCLassRef, or AuthnContextDeclRef from an assertions in a response.
AuthnContextClassRefPrincipal
Principal based on a SAML AuthnContextClassRef.
AuthnContextDeclPrincipal
Principal based on a SAML AuthnContextDecl.
AuthnContextDeclRefPrincipal
Principal based on a SAML AuthnContextDeclRef.
AuthnEventIds
Constants to use for `ProfileAction` `EventContext` results related to authentication and subject c14n.
AuthnInstantAuditExtractor
`Function` that returns the first authentication timestamp from an assertions in a response.
BaseAddAttributeStatementToAssertion<T extends SAMLObject>
Base class for actions that encode an `AttributeContext` into a SAML attribute statement.
BaseAddAuthenticationStatementToAssertion
Base class for actions that encode authentication information into a SAML 1 or SAML 2 statement.
BaseCryptoTransientDecoder
An abstract action which contains the logic to do crypto transient decoding matching.
BaseCSRFTokenPredicate
A base helper class for predicates that determine if CSRF protection is required per state.
BaseIdPInitiatedSSORequestMessageDecoder
Decodes an incoming Shibboleth Authentication Request message.
BaseTransformingDecoder
Regular expression, etc.
BaseTransientDecoder
An abstract action which contains the logic to do transient decoding matching (shared between SAML2 and SAML1).
BasicAdministrativeFlowDescriptor
A descriptor for an administrative flow.
BasicAdministrativeFlowDescriptor.Logo
A wrapper class to construct logo objects for exposure by `UIInfo` interface.
BasicSPSession
Implementation support for a concrete `SPSession` implementation.
BasicSPSessionCreationStrategy
A function to create a `BasicSPSession` based on profile execution state.
BasicSPSessionSerializer
A serializer for `BasicSPSession` objects.
BasicX509CredentialFactoryBean
Deprecated, for removal: This API element is subject to removal in a future version.
BestMatchLocationLookupStrategy
A strategy function for establishing an appropriate `BestMatchLocationCriterion` based on the `AssertionConsumerService` location used to initiate a `SAML2SPSession`.
BrowserSSOProfileConfiguration
Profile configuration for IdP SAML Browser SSO profiles.
BrowserSSOProfileConfiguration
Configuration for SAML 1 Browser SSO profile requests.
BrowserSSOProfileConfiguration
Configuration support for IdP and proxied SAML 2.0 Browser SSO.
BrowserSSOProfileConfiguration
Configuration support for IdP and proxied SAML 2.0 Browser SSO.
BuildAuthenticationContextAction
Builds an authentication context from an incoming `ServiceTicketRequest` message.
BuildProxyChainAction
Action that builds the chain of visited proxies for a successful proxy ticket validation event.
BuildRelyingPartyContextAction<RequestType,ResponseType>
Creates the `RelyingPartyContext` as a child of the `ProfileRequestContext`.
BuildSAMLMetadataContextAction<RequestType,ResponseType>
Builds a `SAMLMetadataContext` child of `RelyingPartyContext` to facilitate relying party selection by group name.
BuildSamlValidationFailureMessageAction
Creates the SAML response message for failed ticket validation at the `/samlValidate` URI.
BuildSamlValidationSuccessMessageAction
Creates the SAML response message for successful ticket validation at the `/samlValidate` URI.
BuildWar
Code to build the war file during an install or on request.
CanonicalUsernameLookupStrategy
Function that returns a principal name from one of two places: a `SubjectCanonicalizationContext` child of the root context or a `SessionContext`.
CAS
`IdPModule` implementation.
CASAttributeTranscoder
Marker interface for transcoders that support CAS attributes.
CASAuditFields
Constants to use for audit logging fields stored in an `AuditContext`.
CASDateTimeAttributeTranscoder
`AttributeTranscoder` that supports `Attribute` and `DateTimeAttributeValue` objects.
CASScopedStringAttributeTranscoder
`AttributeTranscoder` that supports `Attribute` and `ScopedStringAttributeValue` objects.
CASSPSession
Describes a CAS protocol-specific service provider session created in response to a successful ticket validation.
CASSPSessionSerializer
JSON serializer for `CASSPSession` class.
CASStringAttributeTranscoder
`AttributeTranscoder` that supports `Attribute` and `StringAttributeValue` objects.
CertificateContext
Context that carries a `Certificate` to be validated.
CertificateIssuerAuditExtractor
`Function` that returns the issuer of a client certificate.
CertificateSubjectAuditExtractor
`Function` that returns the subject of a client certificate.
CheckProxyAuthorizationAction<RequestType,ResponseType>
Checks the current `ServiceContext` to determine whether the service/relying party is authorized to proxy.
CLI
Entry point for generic command line utility.
CloneablePrincipal
Principal that can be cloned without knowledge of the underlying type.
CollectionSerializer
Serializes a `Collection` of strings.
CommandLine
`IdPModule` implementation.
CommandLineArguments
Interface for JCommander command line argument handling for an HTTP-based remote service call.
ConfigLookupFunction<T extends AbstractProtocolConfiguration>
Lookup function for extracting CAS profile configuration from the profile request context.
Consent
Represents consent.
Consent
`IdPModule` implementation.
ConsentAuditFields
Constants to use for audit logging fields stored in an `AuditContext` as a child of an `ConsentContext`.
ConsentContext
Context representing the state of a consent flow.
ConsentFlowDescriptor
Descriptor for a consent flow.
ConsentManagementContext
Context representing signals to consent flows for managing their state.
ConsentResult
The result of a consent flow, suitable for storage.
ConsentSerializer
Serializes `Consent`.
ContextCheck
`IdPModule` implementation.
ContinueSAMLAuthentication
An action that checks for an `ExternalAuthenticationContext` for a signaled event via the `ExternalAuthenticationContext.getAuthnError()` method, and otherwise enforces the presence of an inbound SAML Response to process.
CopyDistribution
Copy the distribution to the final location.
Core
`IdPModule` implementation.
CoreIdPModule
Implementation base class for `IdPModule` that lives within the core code and whose documentation URLs will float with the IdP's own.
CounterStorageKeyComparator
A `Comparator` used to order storage keys so that the least used and oldest storage keys are returned first.
CounterStorageKeyFunction
Function to order storage keys by least-used and oldest first during pruning of storage records.
CreateGlobalConsentResult
Consent action to create a consent result representing global consent to be stored in a storage service.
CreateResult
Consent action to create a consent result representing the result of a consent flow.
CredentialValidator
High-level API for validating credentials and producing a Java Subject as a result.
CredentialValidator.ErrorHandler
Interface to use to report errors to the caller.
CredentialValidator.WarningHandler
Interface to use to report warnings to the caller.
CryptoTransientIdGenerationStrategy
Generates transients using a `DataSealer` to encrypt the result into a recoverable value, for use with stateless clustering.
CryptoTransientNameIDDecoder
Processes a transient `NameID`, checks that its `NameIDType.getNameQualifier()` and `NameIDType.getSPNameQualifier()` are correct, and decodes `XSString.getValue()` via the base class (reversing the work done by `CryptoTransientIdGenerationStrategy`).
CryptoTransientNameIdentifierDecoder
Processes a transient `NameIdentifier`, checks that its `NameIdentifier.getNameQualifier()` is correct, and decodes `XSString.getValue()` via the base class (reversing the work done by `CryptoTransientIdGenerationStrategy`).
CSRFToken
An anti cross-site request forgery token.
CSRFTokenFlowExecutionListener
A flow execution lifecycle listener that, if enabled: Sets an anti-CSRF token into the flow-scope map when a flow session starts and a token per-flow is enabled. Sets an anti-CSRF token into the view-scope map when rendering a suitable view-state.
CSRFTokenManager
A thread-safe helper class for dealing with cross-site request forgery tokens.
CSRFTokenManager.DefaultCSRFTokenValidationPredicate
A simple default CSRF token validation predicate.
CurrentConsentIdsAuditExtractor
`Function` that returns the current consent IDs from a `ConsentContext`.
CurrentConsentIsApprovedAuditExtractor
`Function` that returns whether the current consents are approved from an `ConsentContext`.
CurrentConsentValuesAuditExtractor
`Function` that returns the current consent values from an `ConsentContext`.
CurrentInstallState
Tells the installers about the current install state.
DataSealerArguments
Arguments for DataSealer CLI.
DataSealerArguments.OperationType
Operation enum.
DataSealerCLI
Command line utility for `DataSealer`.
DateAttributePredicate
Deprecated, for removal: This API element is subject to removal in a future version.
DefaultAuthenticationResultSerializer
Handles serialization of results, delegating handling of `Principal` objects to one or more `PrincipalSerializer` plugins.
DefaultEventRequiresCSRFTokenValidationPredicate
Default `BiPredicate` for determining if CSRF token validation should occur from a compatible request context and event.
DefaultNameIdentifierFormatStrategy
Function to filter a set of candidate NameIdentifier/NameID Format values derived from an entity's SAML metadata against configuration preferences.
DefaultPrincipalDeterminationStrategy<T extends Principal>
Function that returns the first custom `Principal` of a particular type found on the `AuthenticationResult` returned by `AuthenticationContext.getAuthenticationResult()`.
DefaultServiceComparator
Default comparator implementation for comparing CAS service URLs.
DefaultViewRequiresCSRFTokenPredicate
Default `Predicate` for determining if a CSRF token is required for the given request context.
Demo
`IdPModule` implementation.
DeprecatedPropertyBean
A bean that emits deprecation warnings if a configurable set of properties are set.
DestroySessions
Profile action that destroys any `IdPSession`s found in a `LogoutContext`.
DetectIdentitySwitch
An authentication action that checks for a mismatch between an existing session's identity and the result of a newly canonicalized subject (from a `SubjectCanonicalizationContext`).
DiscoveryProfileRequestFunction
A `Function` that produces a discovery request URL using the protocol defined in https://wiki.oasis-open.org/security/IdpDiscoSvcProtonProfile .
DoLockoutManagerOperation
Action that implements a JSON REST API for the `AccountLockoutManager` interface.
DoRevocationCacheOperation
Action that implements a JSON REST API for the `RevocationCache` interface.
DoStorageOperation
Action that implements a JSON REST API for accessing `StorageService` records.
DumpConfigArguments
Command line processing for DumpConfig flow.
DumpConfigRequest
Object representing a request to mock a profile request to obtain the effective configuration.
DumpConfigRequestDecoder
Decodes an incoming configuration reporting message.
DynamicAttributePredicate
Deprecated, for removal: This API element is subject to removal in a future version.
ECPProfileConfiguration
Configuration support for IdP SAML 2.0 ECP profile.
ECPProfileConfiguration
Configuration support for IdP SAML 2.0 ECP profile.
EditWebApp
`IdPModule` implementation.
EncodingTicketService
Ticket service that uses two different strategies for ticket persistence: Service tickets, proxy tickets, and root proxy-granting tickets are persisted by serializing ticket data and encrypting it into the opaque part of the ticket ID using a `DataSealer`. Chained proxy-granting tickets are persisted using a `StorageService`.
EncryptionAlgorithmAuditExtractor
`Function` that returns the data encryption algorithm used.
EnforceDisallowedSSOFeatures
An action that processes a SAML 2 `AuthnRequest` and blocks the use of any "simple" disallowed features.
EnumeratableAccountLockoutManager
An extension to `AccountLockoutManager` that allows for enumeration over partial matches of a key.
Events
CAS protocol flow event identifiers.
ExactPrincipalEvalPredicateFactory
`PrincipalEvalPredicateFactory` that implements exact matching of principals, and works for any type.
ExpiringPassword
`IdPModule` implementation.
ExternalAuthentication
Public interface supporting external authentication outside the webflow engine.
ExternalAuthenticationContext
A context representing the state of an externalized authentication attempt, a case where authentication happens outside of a web flow.
ExternalAuthenticationException
Exception indicating a problem with the external authentication process.
ExternalAuthenticationImpl
Implementation of the `ExternalAuthentication` API that handles moving information in and out of request attributes.
ExternalInterceptor
Public interface supporting external interceptor flows outside the webflow engine.
ExternalInterceptorContext
A context representing the state of an externalized interceptor flow.
ExternalInterceptorException
Exception indicating a problem with the external interceptor process.
ExternalInterceptorImpl
Implementation of the `ExternalInterceptor` API that handles moving information in and out of request attributes.
ExtractActiveAuthenticationResults
An authentication action that populates a `AuthenticationContext` with the active `AuthenticationResult` objects found in a `SessionContext` that is a direct child of the `ProfileRequestContext`.
ExtractConsent
Consent action which extracts user input and updates current consent objects in the consent context accordingly.
ExtractDiscoveryResponse
An action that extracts a discovery service result and copies it to the `AuthenticationContext`.
ExtractRemoteUser
An action that extracts an asserted user identity from the incoming request, creates a `UsernameContext`, and attaches it to the `AuthenticationContext`.
ExtractSubjectFromRequest
Action that extracts a SAML Subject from an inbound message, and prepares a `SubjectCanonicalizationContext` to process it into a principal identity.
ExtractSubjectFromRequest.SubjectNameLookupFunction
Lookup function that returns the `NameIdentifier` or `NameID` from the request in the inbound message context.
ExtractUserAgentAddress
An action that extracts the user-agent's IP address from the incoming request, creates a `UserAgentContext`, and attaches it to the `AuthenticationContext`.
ExtractUserAgentIdentifier
An action that extracts the user-agent's identifier from the incoming request, creates a `UserAgentContext`, and attaches it to the `AuthenticationContext`.
ExtractUsernamePasswordFromBasicAuth
/** An action that extracts a username and password from the HTTP `HttpHeaders.AUTHORIZATION` header, creates a `UsernamePasswordContext`, and attaches it to the `AuthenticationContext`.
ExtractUsernamePasswordFromFormRequest
An action that extracts a username and password from an HTTP form body or query string, creates a `UsernamePasswordContext`, and attaches it to the `AuthenticationContext`.
ExtractUsernamePasswordFromWSSToken
An authentication stage that extracts a username/password from the WSS Username/Password attached to a SOAP message.
ExtractX509CertificateFromRequest
An action that extracts an X.509 certificate from the standard servlet request attribute, creates a `CertificateContext`, and attaches it to the `AuthenticationContext`.
FilterAttributes
Action that invokes the `AttributeFilter` for the current request.
FilterByQueriedAttributeDesignators
Action that filters a set of attributes against the `AttributeDesignator` objects in an `AttributeQuery`.
FilterByQueriedAttributes
Action that filters a set of attributes against the `Attribute` objects in an `AttributeQuery`.
FilterFlowsByForcedAuthn
An authentication action that filters out potential authentication flows if the request requires forced authentication or max age behavior and the flows don't support forced authentication.
FilterFlowsByNonBrowserSupport
An authentication action that filters out potential authentication flows if the request requires non-browser support and the flows require a browser.
FilterFlowsByNonBrowserSupport
A profile interceptor action that filters out available interceptor flows if the request requires non-browser support and the flows require a browser.
FinalizeAuthentication
An authentication action that runs after a completed authentication flow (or the reuse of an active result) and transfers information from other contexts into a `SubjectContext` child of the `ProfileRequestContext`.
FinalizeJettyBase
Deprecated.
This is only used by the windows jetty-base installer and will be removed when we use the plugin
FinalizeMultiFactorAuthentication
An authentication action that completes MFA by producing a final `AuthenticationResult` out of whatever constituent parts and pieces exist, by means of an overridable function, storing it in the `AuthenticationContext` and preparing a fresh `SubjectCanonicalizationContext` to operate on.
FinalizeMultiFactorAuthentication.DefaultResultMergingStrategy
Default merging strategy to combine individual `AuthenticationResult` objects into a single result.
FinalizeSAMLSubjectCanonicalization
An action that runs after a completed canonicalization of a SAML Subject and transfers information into a `SubjectContext` child of the `ProfileRequestContext`.
FirstPartyIdPPlugin
Implementation class for plugins from the project itself to centralize update handling.
FlowDefinitionRegistryFactoryBean
A bean factory for creating `FlowDefinitionRegistry` instances, based on the programmatic builder built into SWF.
FlowDefinitionRegistryFactoryBean.DefaultFlowRegistry
Copied from SWF, a basic registry implementation.
FlowDefinitionResourceFactory
Derivation of SWF-supplied resource factory for flow definitions.
FlowDescriptor
Marker interface for a descriptor for a webflow allowing managed injection of configuration settings.
FlowDescriptorLookupFunction<T extends ProfileInterceptorFlowDescriptor>
Function that returns a profile interceptor flow descriptor from a profile request context using a lookup strategy.
FlowIdLookupFunction
`ContextDataLookupFunction` that returns the current flow id.
FlowModelFlowBuilder
This is subclassed in order to customize the Spring `ApplicationContext` used for flow configuration.
FlowRelativeResourceLoader
This code is extended from org.springframework.webflow.engine.builder.model.FlowRelativeResourceLoader with modifications to support proper lookup of resources via both filesystem and classpath along with custom protocol-specific loaders.
ForceAuthnAuditExtractor
`Function` that returns the ForceAuthn attribute from an `AuthnRequest`.
ForceAuthnProfileConfigPredicate
A predicate that evaluates a `ProfileRequestContext` and determines whether forced authentication should be set based on the associated `AuthenticationProfileConfiguration`.
FunctionSubjectCanonicalization
A `SubjectCanonicalizer` that delegates implementation to a function, allowing scripted/etc.
GatewayLookupFunction
Looks up the value of the CAS gateway parameter from the request to the /login URI.
GenericPrincipalSerializer
Principal serializer for arbitrary principal types.
GenericPrincipalService<T extends Principal>
`PrincipalService` for most principal types that just exposes the proper `PrincipalSerializer`.
GlobalAttributeConsentPredicate
Predicate to determine whether global consent has been given by user.
GrantProxyTicketAction
Generates and stores a CAS protocol proxy ticket.
GrantServiceTicketAction
Generates and stores a CAS protocol service ticket.
GSSAcceptorLoginModule
Kerberos login utility for the context acceptor, encapsulates a number of special options used to create a security context for the GSS acceptor, usually based on a keytab file.
GSSContextAcceptor
Helper class that manages context establishment for the SPNEGO GSS-API mechanism.
Hello
`IdPModule` implementation.
HOTPPrincipal
Principal based on an HOTP authentication.
HTPasswdCredentialValidator
A password validator that authenticates against Apache htpasswd files.
HttpClientProxyValidator
Authenticates a CAS proxy callback endpoint using an `HttpClient` instance to establish the connection and a `TrustEngine` to verify the TLS certificate presented by the remote peer.
HttpServletRequestCriterion
`Criterion` representing a session bound to a servlet request, which is implicitly the "current" request known to the resolver.
IdPAttributePrincipal
Principal that wraps an `IdPAttribute`.
IdPAttributePrincipalSerializer
Principal serializer for `IdPAttributePrincipal`.
IdPAttributePrincipalValuesFunction
Engine to mine values from `IdPAttributePrincipal`s.
IdPAuditFields
Constants to use for IdP audit logging fields stored in an `AuditContext`.
IdPBuildArguments
Command line arguments for the "build" verb.
IdPBuildWar
Command line for 'build'.
IdPEventIds
IdP-specific constants to use for `ProfileAction` `EventContext`s.
IdPGaugeSet
A set of gauges for core system information.
IdPInfo
Implementation of `InstallableComponentInfo` for an IdP Version.
IdPInitiatedSSORequest
Object representing a Shibboleth Authentication Request message.
IdPInitiatedSSORequestMessageDecoder
Decodes an incoming Shibboleth Authentication Request message.
IdPInitiatedSSORequestMessageDecoder
Decodes an incoming Shibboleth Authentication Request message.
IdPInstallerArguments
Command line arguments for the "install" verb.
IdPInstallerCLI
Command line installer.
IdPModule
This interface is exported (via the service API) by every IdP module.
IdPPlugin
This interface is exported (via the service API) by every IdP plugin.
IdPPropertiesApplicationContextInitializer
Specialization of context initializer for IdP use.
IdPSession
An identity provider session belonging to a particular subject and client device.
IgnoreScopingProfileConfigPredicate
A predicate that evaluates a `ProfileRequestContext` and extracts the effective setting of `BrowserSSOProfileConfiguration.isIgnoreScoping(ProfileRequestContext)`.
Impersonate
`IdPModule` implementation.
InboundFlowsLookupFunction
A function that returns `InterceptorAwareProfileConfiguration.getInboundInterceptorFlows(org.opensaml.profile.context.ProfileRequestContext)`() if such a profile is available from a `RelyingPartyContext` obtained via a lookup function, by default a child of the `ProfileRequestContext`.
IncludeAttributeStatementPredicate
A predicate that evaluates a SSO `ProfileRequestContext` and determines whether an attribute statement should be included in the outgoing assertion.
InexactPrincipalEvalPredicateFactory
`PrincipalEvalPredicateFactory` that implements inexact matching of principals, based on an arbitrary set of "matches" configured at runtime.
InitializeAdministrativeProfileContextTree
An action that processes settings from a supplied `AdministrativeFlowDescriptor` to prepare the profile context tree for subsequent use by an administrative profile flow.
InitializeAttributeReleaseContext
Action that creates an `AttributeReleaseContext` and attaches it to the current `ProfileRequestContext`.
InitializeAuthenticationContext
An action that creates an `AuthenticationContext` and attaches it to the current `ProfileRequestContext`.
InitializeConsentContext
Action that creates a `ConsentContext` and attaches it to the current `ProfileRequestContext`.
InitializeLoginAction
Initializes the CAS protocol interaction at the `/login` URI.
InitializeOutboundMessageContext
Action that adds an outbound `MessageContext` and related SAML contexts to the `ProfileRequestContext` based on the identity of a relying party accessed via a lookup strategy, by default an immediate child of the profile request context.
InitializeOutboundMessageContextForError
Action that prepares an outbound `MessageContext` and related SAML contexts in the event that they are not already prepared, to allow error responses to be generated in the case of synchronous bindings (i.e., SOAP).
InitializeProfileRequestContext
Action that creates a new `ProfileRequestContext` and binds it to the current conversation under the `ProfileRequestContext.BINDING_KEY` key, and sets the profile and logging IDs, if provided.
InitializeProxyAction
Initializes the CAS protocol interaction at the `/proxy` URI.
InitializeProxyProfileRequestContext
Action that creates a new `ProfileRequestContext` via a creation strategy, and sets the profile and logging IDs, if provided.
InitializeRelyingPartyContextFromSAMLPeer
Message handler that adds a `RelyingPartyContext` to the current `InOutOperationContext` tree via a creation function.
InitializeRelyingPartyContextFromSAMLPeer
Action that adds a `RelyingPartyContext` to the current `ProfileRequestContext` tree via a creation function.
InitializeRequestedPrincipalContext
An action that creates an `RequestedPrincipalContext` and attaches it to the current `AuthenticationContext`, if the profile request context contains a `RelyingPartyContext` with an `AuthenticationProfileConfiguration` containing one or more default authentication methods.
InitializeValidateAction
Initializes the CAS protocol interaction at the `/login` URI.
InResponseToAuditExtractor
`Function` that returns the InResponseTo attribute from a response.
InstallableComponentGaugeSet
Guage set to report the Plugins' and IdP's installation and update statuses.
InstallableComponentGaugeSet.InstallableComponentDetails
Tracks information about an installed component.
InstallableComponentPropertyCache
A caching shim on top of `InstallableComponentSupport.loadInfo(List, HttpClient, HttpClientSecurityParameters)`.
InstalledMetadataParameters
Parameters to metadata generation.
InstallerProperties
Deprecated, for removal: This API element is subject to removal in a future version.
InstallerProperties
Class to contain the publicly visible (and api) properties used by the installer.
InstallerPropertiesImpl
Class which encapsulated all the properties/UI driven configuration of an install.
InstallerSupport
General common names and helper functions for the IdP and Plugin Installers.
InstallerSupport.InstallerQuery
Predicate to ask the user if they want to install the trust store provided.
InstallerSupport.NameClashVisitor
A @{link `FileVisitor` which detects (and logs) whether a copy would overwrite.
InterceptorAwareProfileConfiguration
Extension of `ProfileConfiguration` that adds inteceptor support.
InvalidCSRFTokenException
Exception indicating a problem validating a CSRF token at runtime.
IPAddress
`IdPModule` implementation.
IPRangeBiPredicate
A `BiPredicate` that checks if a pair of addresses are either equal, or share an `IPRange`.
IsAttributeRequiredPredicate
Predicate that determines whether an IdP attribute is required by the requester.
IsConsentRequiredPredicate
Predicate that returns whether consent is required by comparing the previous and current consents from the consent context.
IsPassiveAuditExtractor
`Function` that returns the IsPassive attribute from an `AuthnRequest`.
JAASCredentialValidator
A password validator that authenticates against JAAS.
JarCheckArguments
Command line arguments for `JarCheckCLI`.
JarCheckCLI
Program to check for potential jar clashes.
JoinFunction
Function to join the result of two functions with a separator.
KerberosCredentialValidator
A password validator that authenticates against Kerberos natively, with optional service ticket verification.
KerberosRealmSettings
Kerberos realm settings for the SPNEGO authentication flow.
KerberosSettings
Kerberos settings for the SPNEGO authentication flow.
KerberosTicketContext
Context that carries a `KerberosTicket` to be validated.
KeystoreResourceCredentialConfig
Implementation of `CredentialConfig` that loads keystore and truststore data using a `Resource`.
LDAPAuthenticationFactoryBean
LDAP Authentication configuration.
LDAPAuthenticationFactoryBean.AuthenticatorType
Enum that defines authenticator configuration.
LDAPAuthenticationFactoryBean.ConnectionStrategyType
Enum that defines LDAP connection strategy.
LDAPAuthenticationFactoryBean.PassivatorType
Enum that defines an LDAP pool passivator.
LDAPAuthenticationFactoryBean.TrustType
Enum that defines LDAP trust configuration.
LDAPCredentialValidator
A password validator that authenticates against LDAP natively.
LDAPPrincipalSerializer
Principal serializer for `LdapPrincipal`.
LDAPResponseContext
A context containing data about an LDAP authentication operation.
LocaleLookupFunction
Function which resolves the `Locale` from a `ProfileRequestContext`.
LockoutManagerContext
A context that holds information about a management operation on an `AccountLockoutManager`.
LogContextTree
Spring Web Flow utility action for logging on DEBUG a representation of the current `ProfileRequestContext`.
LoggingVisitor
A @{link `FileVisitor` copies directory trees keeping a note of all copied target files.
LogImplementationDetails
A bean that logs IdP internals when instantiated, and outputs a number of warning conditions.
LoginConfiguration
CAS protocol configuration that applies to the `/login` URI.
LogoutContext
A `BaseContext` that holds a multimap of `SPSession` objects.
LogoutContextSessionLookupFunction
A function that returns a session from a `LogoutContext` and removes it from that context at the same time.
LogoutPropagationContext
Context holding information needed to perform logout for a single SP session.
LogoutPropagationContext.Result
Logout propagation result.
LogoutPropagationFlowDescriptor
A descriptor for a logout propagation flow.
LogoutPropagationFlowDescriptorManager
Manager of `LogoutPropagationFlowDescriptor` objects.
LogoutPropagationFlowDescriptorSelector
Selection function to retrieve the logout propagation flow descriptor that is suitable for a given `SPSession`.
LogoutStatusStrategyFunction
A strategy function for determining the status of a logout based on the content of a `LogoutContext`.
LogRuntimeException
Dedicated bean used to log flow exceptions, to get around issues with Spring Expressions referencing class objects under certain conditions that are so far not understood.
LogSpringContextInfo
Spring Web Flow utility action for logging on DEBUG details about the current hierarchy of Spring `ApplicationContext` and the beans contained within each.
LoopDetectionPredicate
Deprecated, for removal: This API element is subject to removal in a future version.
MapDrivenAuthnContextTranslationStrategy
Implements a set of default logic for mapping an `AuthnContext`'s content into a set of custom Principals based on a set of static mapping rules.
MappedEntityAttributesPredicate
Deprecated, for removal: This API element is subject to removal in a future version.
MapRequestedAttributesInAttributeConsumingService
Action that ensures that the attributes in the ACS (if any) are mapped.
MaxAgeLookupFunction
A function that returns `AuthenticationProfileConfiguration.getMaxAge(ProfileRequestContext)` if such a profile is available from a `RelyingPartyContext` obtained via a lookup function, by default a child of the `ProfileRequestContext`.
MessageSourceConsentFunction
Function that returns a consent object whose id and value are resolved from a lookup function and `MessageSource`.
MetadataProtocolAuditExtractor
`Function` that returns the Metadata protocol (as defined by the bean called `shibboleth.MetadataLookup.Protocol`).
MetadataQueryArguments
Command line processing for MetadataQuery flow.
MetadataQueryRequest
Object representing a query for metadata.
MetadataQueryRequestDecoder
Decodes an incoming metadata query request.
MetadataServiceRegistry
CAS service registry implementation that queries SAML metadata for a CAS service given a CAS service URL using the following strategy.
MetadataServiceRegistry.LoginEndpointPredicate
Predicate defines CAS login endpoints so that the metadata index on endpoints can be scoped to the smallest set needed to support CAS entities in SAML metadata.
MFA
`IdPModule` implementation.
MockAuthenticationProfileConfiguration
Mock implementation of `AuthenticationProfileConfiguration`.
MockProfileConfiguration
Mock implementation of `ProfileConfiguration`.
ModuleException
Deprecated, for removal: This API element is subject to removal in a future version.
ModuleGaugeSet
Guage set to report the Modules' statuses.
ModuleManagerArguments
Arguments for `IdPModule` management CLI.
ModuleManagerCLI
Command line for `IdPModule` management.
MultiFactorAuthenticationContext
A context that holds information about the intermediate state of the multi-factor login flow.
MultiFactorAuthenticationTransition
A ruleset for managing the transition out of a step during the multi-factor authn flow.
MultiRelyingPartyContext
`BaseContext` representing multiple relying parties involved in a request, usually a subcontext of `ProfileRequestContext`.
NameDecoderException
Error thrown if decoding of a SAML subject identifier fails.
NameIDAuditExtractor
`Function` that returns the Name Identifier from a request or response.
NameIDCanonicalization
A `SubjectCanonicalizer` that transforms the input `Subject` into a principal name by searching for one and only one `NameIDPrincipal` custom principal, using an injected `NameIDDecoder` to carry out the process.
NameIDCanonicalizationFlowDescriptor
A class used to describe flow descriptors for `NameIDPrincipal` and `NameIdentifierPrincipal` c14n.
NameIDDecoder
Interface for converting a `NameID` back into a principal name.
NameIdentifierCanonicalization
A `SubjectCanonicalizer` that transforms the input `Subject` into a principal name by searching for one and only one `NameIdentifierPrincipal` custom principal, using an injected `NameIdentifierDecoder` to carry out the process.
NameIdentifierDecoder
Interface for converting a `NameIdentifier` back into a principal name.
NameIdentifierGenerationService
A service interface for obtaining name identifier generators.
NameIdentifierGenerationServiceImpl
Implementation of `NameIdentifierGenerationService`.
NameIdentifierPrincipal
Principal based on the SAML2 `NameIdentifier`.
NameIDFormatAuditExtractor
`Function` that returns the Name Identifier Format from a SAML Subject.
NameIDPolicyFormatAuditExtractor
`Function` that returns the NameID Format from a NameIDPolicy element.
NameIDPolicySPNameQualifierAuditExtractor
`Function` that returns the SPNameQualifier from a NameIDPolicy element.
NameIDPrincipal
Principal based on the SAML2 `NameID`.
NameIDPrincipalSerializer
Principal serializer for `NameIDPrincipal`.
OneTimeAdministrativeFlowDescriptor
Descriptor for an administrative flow that tracks whether it's been run or not to limit use.
OrganizationDisplayNameTag
Service OrganizationDisplayName - directly from the metadata if present.
OrganizationNameTag
Service OrganizationName - directly from the metadata if present.
OrganizationURLTag
Service OrganizationURL - directly from the metadata if present.
OutboundFlowsLookupFunction
A function that returns `InterceptorAwareProfileConfiguration.getOutboundInterceptorFlows(org.opensaml.profile.context.ProfileRequestContext)`() if such a profile is available from a `RelyingPartyContext` obtained via a lookup function, by default a child of the `ProfileRequestContext`.
OutputConfig
Action that outputs the settings from the effective `ProfileConfiguration` and so on.
OutputConfig.PrincipalSerializer
Custom serializer for `Principal` objects in config.
OutputConfig.RequestedAttributeSerializer
Custom serializer for `Principal` objects in config.
OutputMetrics
Action that outputs one or more `Metric` objects.
Password
`IdPModule` implementation.
PasswordErrorMessageLookupFunction
A function that examines the state of a request and produces an appropriate error message for the Password login flow.
PasswordPrincipal
Principal that wraps a password.
PathInfoSupportingFlowUrlHandler
Extension of standard SWF URL handler that checks for requests in which a valid flow ID is a prefix of the PATH_INFO value, allowing the flow to run with the rest of the path available to it as input.
PatternServiceRegistry
Service registry that evaluates a candidate service URL against one or more defined services, where each definition contains a service URL regular expression pattern.
PersistentSAML2NameIDGenerator
Generator for "persistent" Format `NameID` objects that provides a source/seed ID based on `IdPAttribute` data.
PluginException
Deprecated.
PluginIdPModule
Implementation base class for `IdPModule` that is shipped in a plugin produced by the Shibboleth Project ourselves and for which the documentation will be in the wiki in a fixed location.
PluginInfo
Information about a Plugin.
PluginInstaller
The class where the heavy lifting of managing a plugin happens.
PluginInstallerArguments
Arguments for Plugin Installer CLI.
PluginInstallerArguments.OperationType
Operation enum.
PluginInstallerCLI
Command line for Plugin Installation.
PluginState
A class which will answer questions about a plugin state as of now (by querying the information Resources for the current published state).
PopulateAttributeReleaseContext
Attribute consent action to populate the attribute consent context with the attributes for which consent should be obtained.
PopulateAuditContext
Action that populates fields in an `AuditContext` using injected functions.
PopulateAuditContext.FormattingMapParser
Parser for the formatting strings that exposes a final set of field labels that are present in any of the input formatters.
PopulateAuthenticationContext
An action that populates an `AuthenticationContext` with the `AuthenticationFlowDescriptor` objects configured into the IdP, potential flows filtered by flow IDs from a lookup function.
PopulateBindingAndEndpointContexts
Action that populates the outbound `SAMLBindingContext` and when appropriate the `SAMLEndpointContext` based on the inbound request.
PopulateConsentContext
Consent action which populates the current consents of a consent context with the output value of a function whose input value is a profile request context.
PopulateEncryptionParameters
Action that resolves and populates `EncryptionParameters` on an `EncryptionContext` created/accessed via a lookup function, by default on a `RelyingPartyContext` child of the profile request context.
PopulateInboundMessageContextWithSAMLSelf
Action that adds a `SAMLSelfEntityContext` to the inbound `MessageContext`
PopulateLogoutPropagationContext
Profile action that creates a `LogoutPropagationContext` containing `SPSession` to be destroyed.
PopulateMultiFactorAuthenticationContext
An action that creates and populates a `MultiFactorAuthenticationContext` with the set of transition rules to use for coordinating activity, the executing `AuthenticationFlowDescriptor` and with any active "factors" found, if an active result from the MFA flow is present in the `AuthenticationContext`.
PopulateMultiRPContextFromLogoutContext
Profile action that populates a `MultiRelyingPartyContext` with the relying party information from a `LogoutContext`, and extends each `RelyingPartyContext` created with a `SAMLMetadataContext` based on metadata lookup.
PopulateProfileInterceptorContext
An profile interceptor action that populates a `ProfileInterceptorContext` with `ProfileInterceptorFlowDescriptor` objects based on flow IDs from a lookup function.
PopulateProtocolErrorAction<RequestType>
Populates error information needed for protocol error messages.
PopulateSessionContext
A profile action that populates a `SessionContext` with an active, valid `IdPSession`.
PopulateSubjectCanonicalizationContext
An action that populates a `SubjectCanonicalizationContext` with the `SubjectCanonicalizationFlowDescriptor` objects configured into the IdP, optionally along with the actual descriptor IDs to try in a particular order.
PopulateSubjectContext
An action that populates a principal name obtained from a lookup function into a `SubjectContext` child of the `ProfileRequestContext`.
PopulateUserAgentContext
An action that conditionally populates a `UserAgentContext` as a child of the `ProfileRequestContext`.
PostAuthenticationFlowsLookupFunction
A function that returns `AuthenticationProfileConfiguration.getPostAuthenticationFlows(org.opensaml.profile.context.ProfileRequestContext)`() if such a profile is available from a `RelyingPartyContext` obtained via a lookup function, by default a child of the `ProfileRequestContext`.
PreferExplicitOrderComparator
Comparator which prefers to order strings according to the order in which they appear in a list, and which falls back to natural ordering for strings not present in the list.
PreferredPrincipalContext
A context that holds information about an authentication request's preference for a specific custom `Principal`.
PrepareInboundMessageContext
Action that adds an inbound `MessageContext` and a `SAMLPeerEntityContext` to the `ProfileRequestContext` based on the identity of a relying party, by default from a `SAML2SPSession` found in a `LogoutPropagationContext`.
PrepareTicketValidationResponseAction
Prepares `TicketValidationResponse` for use in CAS protocol response views.
PrePopulateUsername
An action to populate a username into a cleared `UsernamePasswordContext`, either from a form submission, a cookie, or an existing session to "prime" the login view.
PreProcessLogoutMessage
Profile action that performs initial analysis of a `LogoutRequest` or `LogoutResponse` to dispatch it for subsequent processing.
PreserveAuthenticationFlowState
An action that extracts configured parameters from a servlet request and populates `AuthenticationContext.getAuthenticationStateMap()` with the data.
PreviousResultLookupFunction
A function that returns the value of `AuthenticationResult.isPreviousResult()` or null if the input context is null or `AuthenticationContext.getAuthenticationResult()` is null.
PrincipalEvalPredicate
A `Predicate` to evaluate a `Principal` that represents a requested form of authentication against a set of principals supported by a `PrincipalSupportingComponent`.
PrincipalEvalPredicateFactory
Generates a `Predicate` to evaluate a `PrincipalSupportingComponent` against a requested form of authentication expressed in terms of a `Principal`.
PrincipalEvalPredicateFactoryRegistration
Wraps the association of a `PrincipalEvalPredicateFactory` against a particular `Principal` subtype and a string operator.
PrincipalEvalPredicateFactoryRegistry
A registry of mappings between a custom `Principal` subtype with a matching operator and a corresponding `PrincipalEvalPredicateFactory` that returns predicates enforcing a particular set of matching rules for that operator and subtype.
PrincipalInResultPredicate
Condition that checks for the presence of one or more `Principal` instances in a `Subject` in any of the `AuthenticationResult` instances evaluated by the parent class.
PrincipalSerializer<Type>
Interface for the serialization/deserialization of principals.
PrincipalService<T extends Principal>
Interface that provides services for a `Principal` of a given type.
PrincipalServiceManager
Manages and exposes instances of the `PrincipalService` interface.
PrincipalSupport
Helper class for accessing `Principal` information.
PrincipalSupportingComponent
Interface for an authentication component that exposes custom `Principal` objects.
ProcessAssertionsForAuthentication
Perform processing of a SAML 2 Response's Assertions that have been validated by earlier actions for use in finalization of SAML-based authentication by later actions.
ProcessLogout
Profile action that resolves an active session from the profile request, and records it, populating the associated `SPSession` objects into a `LogoutContext`.
ProcessLogoutRequest
Profile action that processes a `LogoutRequest` by resolving matching sessions, and destroys them, populating the associated `SPSession` objects (excepting the one initiating the logout) into a `LogoutContext`.
ProcessRequestedAuthnContext
An authentication action that processes the `RequestedAuthnContext` in a SAML 2 `AuthnRequest`, and populates a `RequestedPrincipalContext` with the corresponding information.
ProcessSamlMessageAction
Processes the ticket validation request message from decoded SAML 1.1 message and request parameters.
ProfileActionBeanFactoryPostProcessor
Post-processes bean configuration metadata to ensure that stateful beans are scoped properly.
ProfileActionBeanPostProcessor
Post-processes `ProfileAction` beans by wrapping them in a Spring Web Flow adaptor.
ProfileInterceptorContext
A `BaseContext` which holds flows that are available to be executed, the last flow attempted, and any flow result.
ProfileInterceptorFlowDescriptor
A descriptor for a profile interceptor flow.
ProfileInterceptorFlowDescriptorManager
Manager of `ProfileInterceptorFlowDescriptor` objects.
ProfileInterceptorResult
Represents the result of a profile interceptor flow intended for storage by a `StorageService`.
ProfileRequestContextFlowExecutionListener
Exposes the `ProfileRequestContext` in a request attribute to make it accessible outside the Webflow execution pipeline.
ProgressReportingOutputStream
A version of `BufferedOutputStream` which provides some idea of progress.
PropertiesWithComments
A package which is similar to Properties, but allows comments to be preserved.
PropertiesWithComments.CommentedProperty
A POJO which looks like a property.
PropertyDrivenIdPModule
Implementation of `IdPModule` relying on Java `Properties`.
PropertyDrivenIdPPlugin
Implementation of `IdPPlugin` relying on Java `Properties`.
ProtocolContext<RequestType,ResponseType>
Context container for CAS protocol request and response messages.
ProtocolError
CAS protocol errors.
ProtocolParam
Protocol parameter name enumeration.
ProxyAudienceAuditExtractor
`Function` that returns `ProxyRestriction.getAudiences()`.
ProxyAuthenticationLookupFunction
A function that returns the first value stored in a `ProxyAuthenticationPrincipal` contained in a `Subject`.
ProxyAuthenticationPrincipal
Principal that wraps a set of proxied authentication authorities and any restrictions on subsequent re-use.
ProxyAuthenticationPrincipalSerializer
Principal serializer for `ProxyAuthenticationPrincipal`.
ProxyAwareAuthnContextComparisonLookupFunction
Implements a set of default logic for determining the `RequestedAuthnContext` operator to use.
ProxyAwareDefaultAuthenticationMethodsLookupFunction
Implements a set of default logic for determining the custom principals to derive the `RequestedAuthnContext` from.
ProxyAwareForceAuthnPredicate
Implements a set of default logic for determining whether ForceAuthn should be applied.
ProxyConfiguration
CAS protocol configuration that applies to the `/proxy` URI.
ProxyCountAuditExtractor
`Function` that returns `ProxyRestriction.getProxyCount()`.
ProxyGrantingTicket
CAS proxy-granting ticket.
ProxyGrantingTicketLookupFunction
Looks up the PGT from a proxy ticket request.
ProxyGrantingTicketSerializer
Serializes proxy-granting tickets in simple field-delimited form.
ProxyIdentifiers
Container for identifiers used in authenticating a proxy callback endpoint.
ProxyRestrictionLookupFunction
A function that returns the allowable proxy count and audiences to include in assertions, based on the results of lookup functions for local configuration merged with upstream proxy restrictions to compute a final result in accordance with the standard.
ProxySAML1NameIdentifierGenerator
A compound implementation of the `SAML1NameIdentifierGenerator` interface that wraps a sequence of candidate generators along with a default to try if no format-specific options are available.
ProxySAML2NameIDGenerator
A compound implementation of the `SAML2NameIDGenerator` interface that wraps a sequence of candidate generators along with a default to try if no format-specific options are available.
ProxyTicket
CAS proxy ticket.
ProxyTicketRequest
Container for proxy ticket request parameters provided to `/proxy` URI.
ProxyTicketResponse
Container for proxy ticket response parameters returned from `/proxy` URI.
ProxyTicketSerializer
Proxy ticket storage serializer.
ProxyValidator
Strategy pattern component for proxy callback endpoint validation.
PublishProtocolMessageAction<RequestType,ResponseType>
Action to publish the CAS protocol request or response messages, i.e.
RandomizeFriendlyNameProfileConfigPredicate
A predicate that evaluates a `ProfileRequestContext` and extracts the effective setting of `BrowserSSOProfileConfiguration.isRandomizeFriendlyName(ProfileRequestContext)` or `AttributeQueryProfileConfiguration.isRandomizeFriendlyName(ProfileRequestContext)`.
ReadConsentFromStorage
Consent action which reads consent records from storage and adds the serialized consent records to the consent context as previous consents.
RecordResponseComplete
Action that records the "Response Complete" status on the external context if not done so already.
RegexAttributePredicate
Deprecated, for removal: This API element is subject to removal in a future version.
RegisterFilterChainServletContextInitializer
A `ServletContainerInitializer` implementation that registers a filter chain embedded in our Spring configuration.
ReleaseAttributes
Attribute consent action which constrains the attributes released to those consented to.
ReloadingServiceRegistry
Service registry wrapper around a `ReloadableService`.
ReloadMetadata
Action that refreshes or clears a `MetadataResolver` manually.
ReloadMetadataArguments
Command line processing for reload-metadata flow.
ReloadServiceArguments
Command line processing for reload-service flow.
ReloadServiceConfiguration
Action that refreshes a `ReloadableService` manually.
RelyingPartyContextLookupByCurrent
A function that returns `MultiRelyingPartyContext.getCurrentRelyingPartyContext()`.
RelyingPartyContextLookupById
A `BiFunction` that returns a `RelyingPartyContext` based on ID.
RelyingPartyContextLookupByLabel
A function that returns a collection of `RelyingPartyContext`s based on a label.
RelyingPartyMapJAASLoginConfigStrategy
An implementation of the `loginConfigStrategy` for `JAASCredentialValidator` which uses a supplied map to resolve the JAAS config to use.
RelyingPartyUIContext
The context which carries the user interface information.
RemoteUserAuthServlet
Extracts authentication information from the request and returns it via the IdP's external authentication interface.
RenewLookupFunction
Looks up the value of the CAS renew parameter from the request to the /login URI.
ReportModuleStatus
Class to check that every `IdPPlugin` the required `IdPModule` available.
ReportUpdateStatus
A class to reach out and find out whether we are up to date.
RequestContextBuilder
Builder used to construct `RequestContext` used in `Action` executions.
RequestedPrincipalContext
A context that holds information about an authentication request's requirement for a specific custom `Principal`.
RequestedPrincipalContextOperatorLookupFunction
A function that returns `RequestedPrincipalContext.getOperator()`.
RequestedPrincipalContextPrincipalLookupFunction
A function that returns `RequestedPrincipalContext.getRequestedPrincipals()` but transforms the values into strings.
ResolveAttributes
Action that invokes the `AttributeResolver` for the current request.
ResolverTestArguments
Command line processing for ResolverTest flow.
ResolverTestPrincipalLookup
Returns the principal name from a `ResolverTestRequest` message in the inbound message context.
ResolverTestRequest
Object representing a request to run the attribute resolution and filtering components.
ResolverTestRequestDecoder
Decodes an incoming resolver test message.
ResolverTestUnfilteredPredicate
Condition that returns the result of evaluating `ResolverTestRequest.getUnfiltered()`.
RestoreProfileRequestContextTree
Restores specific portions of the context tree used during logout processing to enable reuse of logout propagation subflows during back channel logout.
RethrowingFlowExecutionExceptionHandler
This handler can be attached to view or end states that are used to respond to errors, including RuntimeExceptions, so that if they themselves raise another RuntimeException, it won't trigger the state again, but just fail the flow.
RethrowingFlowHandlerAdapter
Extension of SWF's built-in `FlowHandlerAdapter` implementation that overrides its poor assumption that a missing flow exception should result in the flow being restarted.
RevocationCacheCondition
A condition for login flows that checks for revocation against a `RevocationCache`.
RevokeConsent
Consent action which deletes a consent record from storage.
RollbackPluginInstall
An object which does installation rollback in its `AutoCloseable.close()` method.
SAML1SPSession
Marker subtype for a SAML 1 session, adds no actual information other than its identity as a SAML 1 session.
SAML1SPSessionCreationStrategy
A function to create a `SAML1SPSession` based on profile execution state.
SAML1SPSessionSerializer
A serializer for `SAML1SPSession` objects.
SAML2AuthnRequestsSignedSecurityHandler
Message handler implementation that enforces the AuthnRequestsSigned flag of SAML 2 metadata element @{link `SPSSODescriptor` and/or a local profile configuration option.
SAML2SPSession
Extends a `BasicSPSession` with SAML 2.0 information required for reverse lookup in the case of a logout.
SAML2SPSessionCreationStrategy
A function to create a `SAML2SPSession` based on profile execution state.
SAML2SPSessionSerializer
A serializer for `SAML2SPSession` objects.
SAMLAuditFields
Constants to use for audit logging fields stored in an `AuditContext`.
SAMLAuthnContext
Manages state during proxied SAML authentication.
SAMLAuthnController
MVC controller that handles outbound and inbound message I/O for proxied SAML authentication.
SamlParam
SAML 1.1 protocol params needed to support `/samlValidate` endpoint.
SAMLProfileConfiguration
Common interface for IdP SAML profile configurations.
SAMLRelyingPartyIdLookupStrategy
A lookup strategy that returns a SAML entityID if the `RelyingPartyContext` contains a reference to a `SAMLPeerEntityContext` or `SAMLSelfEntityContext`.
SAMLVerificationLookupStrategy
A lookup strategy that returns true iff the `RelyingPartyContext` contains a reference to a `SAMLPeerEntityContext` or `SAMLSelfEntityContext` that contains a `SAMLMetadataContext` such that `SAMLMetadataContext.getEntityDescriptor()` is non-null.
SaveLogoutContext
Stores the `LogoutContext` in the servlet session to facilitate lookup by logout propagation flows.
SaveProfileRequestContextTree
Saves off specific portions of the context tree in use during logout processing to enable reuse of logout propagation subflows during back channel logout.
ScopingIdPListAuditExtractor
`Function` that returns `Scoping.getIDPList()` from an `AuthnRequest`.
ScopingProxyCountAuditExtractor
`Function` that returns `Scoping.getProxyCount()` from an `AuthnRequest`.
ScopingRequesterListAuditExtractor
`Function` that returns `Scoping.getRequesterIDs()` from an `AuthnRequest`.
ScriptedAction
An action which calls out to a supplied script.
ScriptedPredicate
Deprecated, for removal: This API element is subject to removal in a future version.
SealedPrincipalSerializer<T extends Principal>
Principal serializer that encrypts/decrypts the data when serializing.
SelectAuthenticationFlow
An authentication action that selects an authentication flow to invoke, or re-uses an existing result for SSO.
SelectLogoutPropagationFlow
A profile action that selects a logout propagation flow to invoke.
SelectProfileConfiguration
Action that selects the `ProfileConfiguration` for the given request and sets it in the looked-up `RelyingPartyContext`.
SelectProfileConfiguration
Action that selects the `ProfileConfiguration` for the given message context and sets it in the looked-up `RelyingPartyContext`.
SelectProfileInterceptorFlow
A profile interceptor action that selects flows to invoke.
SelectRelyingPartyConfiguration
This action attempts to resolve a `RelyingPartyConfiguration` and adds it to the `RelyingPartyContext` that was looked up.
SelectRelyingPartyConfiguration
This message handler attempts to resolve a `RelyingPartyConfiguration` and adds it to the `RelyingPartyContext` that was looked up.
SelectSubjectCanonicalizationFlow
A canonicalization action that selects a canonicalization flow to invoke.
Service
Container for metadata about a CAS service (i.e.
ServiceContactTag
return the contactInfo for the SP or null.
ServiceContext
IdP context container for CAS service (i.e.
ServiceDefinition
Defines a registered CAS service (i.e.
ServiceDescriptionTag
Display the description from the <mdui:UIInfo>.
ServiceEntityDescriptor
Adapts CAS protocol service metadata onto SAML metadata.
ServiceInformationURLTag
Service InformationURL - directly from the metadata if present.
ServiceLogoTag
Logo for the SP.
ServiceLookupFunction
Looks up the service URL from the CAS protocol request.
ServiceNameTag
Display the serviceName.
ServicePrivacyURLTag
Service PrivacyURL - directly from the metadata if present.
ServiceRegistry
Registry for explicitly verified CAS services (relying parties).
ServiceTagSupport
Display the serviceName.
ServiceTicket
CAS service ticket.
ServiceTicketRequest
Describes a request for a ticket to access a service.
ServiceTicketResponse
CAS protocol response message for a successfully granted service ticket.
ServiceTicketSerializer
Serializes service tickets in simple field-delimited form.
ServletConfigServletContextInitializer
A `ServletContainerInitializer` implementation that registers the servlets used by the IdP.
SessionContext
A `BaseContext` that holds an `IdPSession`.
SessionContextIDLookupFunction
A function that returns the session ID from the session inside a `SessionContext`.
SessionContextPrincipalLookupFunction
A function that returns the principal name from the session inside a `SessionContext`.
SessionException
Exception indicating a problem with the session layer.
SessionIdCriterion
`Criterion` representing a session ID.
SessionIndexAuditExtractor
`Function` that returns SessionIndex values from assertions in a response or a logout request.
SessionLifetimeLookupFunction
A function that returns `BrowserSSOProfileConfiguration.getMaximumSPSessionLifetime(ProfileRequestContext)` if such a profile is available from a `RelyingPartyContext` obtained via a lookup function, by default a child of the `ProfileRequestContext`.
SessionManager
Component that manages sessions between the IdP and client devices.
SessionResolver
A resolver that is capable of finding `IdPSession` objects that meet certain criteria.
SetRPUIInformation
Action to populate the `ProfileRequestContext` with a `RelyingPartyUIContext`.
SimpleAttributePredicate
Deprecated, for removal: This API element is subject to removal in a future version.
SimpleCSRFToken
A default, immutable, implementation of a `CSRFToken`.
SimplePrincipalSerializer<T extends Principal>
Principal serializer for string-based principals that serialize to a simple JSON structure.
SimpleSubjectCanonicalization
A `SubjectCanonicalizer` that transforms the input `Subject` into a principal name by searching for one and only one `UsernamePrincipal` custom principal.
SimpleTicketService
Simple CAS ticket management service that delegates storage to `StorageService`.
SingleLogoutProfileConfiguration
Configuration support for IdP SAML 2 Single Logout.
SLF4JMDCServletFilter
Servlet filter that sets some interesting MDC attributes as the request comes in and clears the MDC as the response is returned.
SLF4JMDCServletFilter
Deprecated, for removal: This API element is subject to removal in a future version.
SOAPErrorPredicate
Predicate that decides whether to handle an error by returning a SOAP fault to a requester or fail locally.
SOAPLogoutRequest
Profile action that propagates a prepared `LogoutRequest` message to an SP via the SOAP binding, encapsulating SOAP pipeline construction and execution.
SPNameQualifierAuditExtractor
`Function` that returns the SPNameQualifier from a SAML Subject.
SPNEGO
`IdPModule` implementation.
SPNEGOAuthnController
MVC controller for managing the SPNEGO exchanges implemented as an `ExternalAuthentication` mechanism.
SPNEGOAutoLoginManager
Component managing the auto-login state via cookie.
SPNEGOContext
Context, usually attached to `AuthenticationContext`, that carries configuration data and request state for SPNEGO authentication.
SpringAwareMessageDecoderFactory
A function that returns the correct `MessageDecoder` to use based on a simple map of strings to bean IDs.
SpringAwareMessageEncoderFactory
A function that returns the correct `MessageEncoder` to use based on an underlying `BindingDescriptor`.
SpringConfigServletContextInitializer
A `ServletContainerInitializer` implementation that sets core parameters used to install Spring support into the context.
SpringEventToViewLookupFunction
A function that returns a view name to render based on a Spring Web Flow `Event`.
SpringExpressionPredicate
Deprecated, for removal: This API element is subject to removal in a future version.
SpringFlowScopeLookupFunction
A lookup function that fetches a SWF flow scope parameters.
SpringRequestContext
A `BaseContext` which holds the Spring WebFlow `RequestContext` in which the overall parent context is operating.
SpringStatusMessageLookupFunction
A function that returns a status message to include, if any, in a SAML response based on the current profile request context state, using Spring's `MessageSource` functionality.
SPSession
Describes a session with a service in turn associated with an `IdPSession`.
SPSessionCriterion
`Criterion` representing a service ID and an implementation-specific service session key.
SPSessionSerializerRegistry
A registry of mappings between a `SPSession` class and a corresponding `StorageSerializer` for that type.
SPSessionSerializerRegistry.Entry<T extends SPSession>
Wrapper type for auto-wiring serializers.
SSOSProfileConfiguration
Deprecated, for removal: This API element is subject to removal in a future version.
StatusArguments
Command line processing for status flow.
StatusCodeAuditExtractor
`Function` that returns the StatusCode from a response.
StatusCodeLookupFunction
Looks up the protocol message status code from a CAS protocol message response.
StatusDetailLookupFunction
Looks up the protocol message status detail from a CAS protocol message response.
StatusMessageAuditExtractor
`Function` that returns the StatusMessage from a response.
StorageAwareCookieManager
An extended `CookieManager` that allows use of a `StorageService`.
StorageBackedAccountLockoutManager
Implementation of `EnumeratableAccountLockoutManager` interface that relies on a `StorageService` to track lockout state.
StorageBackedAccountLockoutManager.UsernameIPLockoutKeyStrategy
A function to generate a key for lockout storage.
StorageBackedIdPSession
Implementation of `IdPSession` for use with `StorageBackedSessionManager`.
StorageBackedIdPSessionSerializer
A serializer for instances of `StorageBackedIdPSession` designed in conjunction with the `StorageService`-backed `SessionManager` implementation.
StorageBackedSessionManager
Implementation of `SessionManager` and `SessionResolver` interfaces that relies on a `StorageService` for persistence and lifecycle management of data.
StorageBackedSessionManager.DefaultConsistentAddressConditionFactory
Simplifies Spring wiring of a true/false condition for the consistentAddress feature.
StoredPersistentIdDecoder
A decoder which contains the logic to decode SAML persistent IDs that are managed with a `DurablePairwiseIdStore`.
StoredTransientIdGenerationStrategy
Generates transients using a `StorageService` to manage the reverse mappings.
SubjectCanonicalizationContext
A context that holds an input `Subject` to canonicalize into a principal name, and the collection of c14n flows to attempt.
SubjectCanonicalizationContextSubjectLookupFunction
A function that returns the `Subject` from a `SubjectCanonicalizationContext`.
SubjectCanonicalizationException
Exception indicating a problem translating a subject between forms.
SubjectCanonicalizationFlowDescriptor
A descriptor for a subject canonicalization flow or `SubjectCanonicalizer` implementation.
SubjectCanonicalizationFlowDescriptorManager
Manager of `SubjectCanonicalizationFlowDescriptor` objects.
SubjectCanonicalizer
Marker interface for the ability to perform subject canonicalization "inline" without leveraging the Spring Webflow layer.
SubjectContext
A context that holds information about the subject of a request.
SubjectContextImpersonatingPrincipalLookupFunction
A function that returns the impersonating principal name from a `SubjectContext`.
SubjectContextPrincipalLookupFunction
A function that returns the principal name from a `SubjectContext`.
SubjectDerivedAttributesFunction
A Function which returns `IdPAttribute`s derived from the `Principal`s associated with the request.
SubjectDerivedAttributeValuesFunction
A Function which returns `IdPAttributeValue`s derived from the `Principal`s associated with the request.
SubjectScriptContextExtender
An extender that supplements an IdP `ScriptContext` with `Subject` information.
SubStatusCodeAuditExtractor
`Function` that returns the lower-level StatusCode(s) from a response.
SuppressAuthenticatingAuthorityPredicate
A predicate that evaluates a `ProfileRequestContext` and extracts the effective setting of `BrowserSSOProfileConfiguration.isSuppressAuthenticatingAuthority(ProfileRequestContext)`.
TemplateSearchDnResolver
`Template`-based search dn resolver.
TestPrincipal
Test Principal for testing requested authentication behavior.
TestSources
Basic data sources for testing the attribute generators.
TestSources.StaticAttributeDefinition
A static `AttributeDefinition` for testing.
TestSources.StaticDataConnector
A static `DataConnector`.
Ticket
Generic CAS ticket that has a natural identifier and expiration.
TicketContext
IdP context that stores a granted CAS ticket.
TicketIdentifierGenerationStrategy
Generates CAS protocol ticket identifiers of the form:
TicketIdGenerator
Strategy for ticket generation.
TicketLookupFunction
Looks up the service (proxy) ticket provided in a CAS protocol request or produced in a CAS protocol response.
TicketPrincipalLookupFunction
Looks up a principal name stored in a CAS ticket: `ProfileRequestContext` -> `ProtocolContext` -> `TicketContext` -> `Ticket.getTicketState()` -> `TicketState.getPrincipalName()`.
TicketService
CAS ticket management service.
TicketState
Supplemental state data to be stored with a ticket.
TicketValidationRequest
Ticket validation request message.
TicketValidationResponse
Service ticket validation response protocol message.
TOTPPrincipal
Principal based on a TOTP authentication.
TransformedUsernameAuditExtractor
`Function` that returns the transformed username in a subordinate `UsernamePasswordContext`, if any.
TransformingNameIDDecoder
Transform from a `NameID`.
TransformingNameIdentifierDecoder
Transform from a `NameIdentifier`.
TransientIdGenerationStrategy
Generates and manages transient identifiers according to specific strategies.
TransientIdParameters
The Parameters we need to store in, and get out of a transient ID, namely the attribute recipient (aka the SP) and the principal.
TransientNameIDDecoder
Decodes `XSString.getValue()` via the base class (reversing the work done by `TransientSAML2NameIDGenerator`).
TransientNameIdentifierDecoder
Decodes `XSString.getValue()` via the base class (reversing the work done by `TransientSAML1NameIdentifierGenerator`).
TransientSAML1NameIdentifierGenerator
Generator for transient `NameIdentifier` objects.
TransientSAML2NameIDGenerator
Generator for transient `NameID` objects.
TransitionMultiFactorAuthentication
An authentication action that acts as the driver regulating execution of transitions between MFA stages.
TrustStore
Deprecated, for removal: This API element is subject to removal in a future version.
TrustStore
Code to handle (load, update, check) the trust store for an individual plugin.
TrustStore.Signature
An opaque handle around a `PGPSignature`.
TrustStore.Signature
An opaque handle around a `PGPSignature`.
UnlockDataSealers
Action that sets keystore and key passwords for one or more DataSealer KeyStrategy objects based on query parameters.
UnlockKeys
`IdPModule` implementation.
UnlockPrivateKeys
Action that creates private key objects and injects them into existing `MutableCredential` objects.
UpdateCounter
Consent action which maintains a storage record whose value is the current time in milliseconds.
UpdateIdPArguments
Arguments for IdP "Updater" CLI.
UpdateIdPArguments.OperationType
Operation enum.
UpdateIdPCLI
Command line update cheker.
UpdateIdPSessionWithSPSessionAction<RequestType,ResponseType>
Conditionally updates the `IdPSession` with a `CASSPSession` to support SLO.
UpdateSAMLSelfEntityContext
Action that updates inbound and/or outbound instances of `SAMLSelfEntityContext` based on the identity of a relying party accessed via a lookup strategy, by default an immediate child of the profile request context.
UpdateSessionWithAuthenticationResult
An authentication action that establishes a record of the `AuthenticationResult` in an `IdPSession` for the client, either by updating an existing session or creating a new one.
UpdateSessionWithSPSession
An action that establishes a record of an `SPSession` in an existing `IdPSession` for the client.
UserAgentContext
A context containing data about the user agent.
UsernameContext
Context that carries a username (without a password) to be validated.
UsernamePasswordContext
Context that carries a username/password pair to be validated.
UsernamePrincipal
Principal based on a username.
UserPrefs
`IdPModule` implementation.
V5Install
Code to do most of the V4 Install.
ValidateConfiguration
CAS protocol configuration.
ValidateCredentials
An action that processes a list of `CredentialValidator` objects to produce an `AuthenticationResult`.
ValidateCredentials.UsernamePasswordCleanupHook
A default cleanup hook that removes the `UsernamePasswordContext` from the tree.
ValidatedExtractedConsent
Consent action which validates extracted user input when per-attribute consent is not enabled.
ValidateExternalAuthentication
An action that checks for an `ExternalAuthenticationContext` and directly produces an `AuthenticationResult` or records error state based on the contents.
ValidateExternalAuthentication.CertificateCleanupHook
A default cleanup hook that removes a `CertificateContext` from the tree.
ValidateFunctionResult
An action that executes a deployer-supplied function and produces an `AuthenticationResult` based on the function result.
ValidateProxyCallbackAction
Validates the proxy callback URL provided in the service ticket validation request and creates a PGT when the proxy callback is successfully authenticated.
ValidateRemoteUser
An action that checks for a `UsernameContext` and directly produces an `AuthenticationResult` based on that identity.
ValidateRenewAction
Ensures that a service ticket validation request that specifies renew=true matches the renew flag on the ticket that is presented for validation.
ValidateSAMLAuthentication
An action that produces an `AuthenticationResult` based on an inbound SAML 2.0 SSO response.
ValidateTicketAction
CAS protocol service ticket validation action.
ValidateUserAgentAddress
An action that ensures that a user-agent address found within a `UserAgentContext` is within a given range and generates an `AuthenticationResult`.
Version
Class for getting and printing the version of the IdP.
Warning
`IdPModule` implementation.
WebFlowCurrentEventLookupFunction
A `Function` that checks for cases in which the webflow's current event is not reflected by an attached `EventContext` and compensates, along with returning a suitably populated context.
WebFlowMessageHandlerAdaptor
An `AbstractProfileAction` subclass that adapts an OpenSAML `MessageHandler` for execution in a Spring WebFlow environment.
WebFlowMessageHandlerAdaptor.Direction
Used to indicate the target message context for invocation of the adapted message handler.
WebFlowProfileActionAdaptor
Adaptor that wraps a `ProfileAction` with a Spring Web Flow compatible action implementation so that it can be executed as part of a flow.
WebflowRequestContextProfileRequestContextLookup
A `Function` that extracts the `ProfileRequestContext` from the current Webflow conversation.
WriteAuditLog
Action that produces audit log entries based on an `AuditContext` and one or more formatting strings.
WriteFTICKSLog
Action that produces F-TICKS log entries for successful SAML SSO responses.
WriteProfileInterceptorResultToStorage
A profile interceptor action that writes a `ProfileInterceptorResult` to a `StorageService`.
WriteValidateResponseAction
CAS 1.0 protocol response handler.
X500PrincipalSerializer
Principal serializer for `X500Principal`.
X500SubjectCanonicalization
A `SubjectCanonicalizer` that transforms the input `Subject` into a principal name by searching for one and only one `X509Certificate` public credential, or in its absence one and only one `X500Principal`.
X509
`IdPModule` implementation.
X509AuthServlet
Servlet compatible with the `ExternalAuthentication` interface that extracts and validates an X.509 client certificate for user authentication.
X509CertificateCredentialValidator
A credential validator that validates an X.509 certificate.
X509ProxyFilter
Servlet filter to translate Apache mod_ssl certificate variables into Java servlet attributes.
X509ResourceCredentialConfig
Implementation of `CredentialConfig` that loads trust and key material using a `Resource`.