# Package net.shibboleth.idp.saml.saml2.profile.impl

@NonnullElements package net.shibboleth.idp.saml.saml2.profile.impl
Profile processing actions related to SAML 2 messages.

Classes
Class
Description
AddAttributeStatementToAssertion
Action that builds an `AttributeStatement` and adds it to an `Assertion` returned by a lookup strategy, by default in the `InOutOperationContext.getOutboundMessageContext()`.
AddAuthnRequest
Action that creates an `AuthnRequest` and sets it as the message returned by `InOutOperationContext.getOutboundMessageContext()`.
AddAuthnStatementToAssertion
Action that builds an `AuthnStatement` and adds it to an `Assertion` returned by a lookup strategy, by default in the `InOutOperationContext.getOutboundMessageContext()`.
ContinueSAMLAuthentication
An action that checks for an `ExternalAuthenticationContext` for a signaled event via the `ExternalAuthenticationContext.getAuthnError()` method, and otherwise enforces the presence of an inbound SAML Response to process.
EnforceDisallowedSSOFeatures
An action that processes a SAML 2 `AuthnRequest` and blocks the use of any "simple" disallowed features.
FilterByQueriedAttributes
Action that filters a set of attributes against the `Attribute` objects in an `AttributeQuery`.
IdPInitiatedSSORequestMessageDecoder
Decodes an incoming Shibboleth Authentication Request message.
MapRequestedAttributesInAttributeConsumingService
Action that ensures that the attributes in the ACS (if any) are mapped.
PopulateEncryptionParameters
Action that resolves and populates `EncryptionParameters` on an `EncryptionContext` created/accessed via a lookup function, by default on a `RelyingPartyContext` child of the profile request context.
PreProcessLogoutMessage
Profile action that performs initial analysis of a `LogoutRequest` or `LogoutResponse` to dispatch it for subsequent processing.
ProcessAssertionsForAuthentication
Perform processing of a SAML 2 Response's Assertions that have been validated by earlier actions for use in finalization of SAML-based authentication by later actions.
ProcessLogoutRequest
Profile action that processes a `LogoutRequest` by resolving matching sessions, and destroys them, populating the associated `SPSession` objects (excepting the one initiating the logout) into a `LogoutContext`.
ProcessRequestedAuthnContext
An authentication action that processes the `RequestedAuthnContext` in a SAML 2 `AuthnRequest`, and populates a `RequestedPrincipalContext` with the corresponding information.
SAMLAuthnContext
Manages state during proxied SAML authentication.
SAMLAuthnController
MVC controller that handles outbound and inbound message I/O for proxied SAML authentication.
SOAPLogoutRequest
Profile action that propagates a prepared `LogoutRequest` message to an SP via the SOAP binding, encapsulating SOAP pipeline construction and execution.
ValidateSAMLAuthentication
An action that produces an `AuthenticationResult` based on an inbound SAML 2.0 SSO response.