# Package net.shibboleth.idp.authn

@NonnullElements package net.shibboleth.idp.authn
APIs related to the authentication of a subject.

Related Packages
Package
Description
net.shibboleth.idp
Root package for IdP, contains a couple base/utility classes.
net.shibboleth.idp.authn.config
Configuration touchpoints for authentication flows.
net.shibboleth.idp.authn.context
Context classes for managing authentication-related state.
net.shibboleth.idp.authn.impl
Implementation of various authentication actions.
net.shibboleth.idp.authn.principal
Classes supporting Java `Principal` usage.
net.shibboleth.idp.authn.testing
Testing utility classes.
Class
Description
AbstractAuthenticationAction
A base class for authentication related actions.
AbstractCredentialValidator
An abstract `CredentialValidator` that handles some common behavior.
AbstractExtractionAction
A base class for authentication actions that extract usernames for subsequent use.
AbstractSubjectCanonicalizationAction
A base class for subject canonicalization actions.
AbstractSubjectCanonicalizer
A base class for "stand-alone" subject c14n implementations.
AbstractTemplateSearchDnResolver
Base class for `Template` based search dn resolvers.
AbstractTemplateSearchDnResolver.EscapingReferenceInsertionEventHandler
Escapes LDAP attribute values added to the template context.
AbstractUsernamePasswordCredentialValidator
An abstract `CredentialValidator` that checks for a `UsernamePasswordContext` and delegates to subclasses to produce a result.
AbstractValidationAction
A base class for authentication related actions that validate credentials and produce an `AuthenticationResult`.
AccountLockoutManager
A component that manages lockout state for accounts.
AuthenticationFlowDescriptor
A descriptor for an authentication flow.
AuthenticationResult
Describes an act of authentication.
AuthnAuditFields
Constants to use for audit logging fields stored in an `AuditContext`.
AuthnEventIds
Constants to use for `ProfileAction` `EventContext` results related to authentication and subject c14n.
CredentialValidator
High-level API for validating credentials and producing a Java Subject as a result.
CredentialValidator.ErrorHandler
Interface to use to report errors to the caller.
CredentialValidator.WarningHandler
Interface to use to report warnings to the caller.
EnumeratableAccountLockoutManager
An extension to `AccountLockoutManager` that allows for enumeration over partial matches of a key.
ExternalAuthentication
Public interface supporting external authentication outside the webflow engine.
ExternalAuthenticationException
Exception indicating a problem with the external authentication process.
MultiFactorAuthenticationTransition
A ruleset for managing the transition out of a step during the multi-factor authn flow.
SubjectCanonicalizationException
Exception indicating a problem translating a subject between forms.
SubjectCanonicalizationFlowDescriptor
A descriptor for a subject canonicalization flow or `SubjectCanonicalizer` implementation.
SubjectCanonicalizer
Marker interface for the ability to perform subject canonicalization "inline" without leveraging the Spring Webflow layer.
TemplateSearchDnResolver
`Template`-based search dn resolver.