|
||||||||||
PREV NEXT | FRAMES NO FRAMES |
Action
.
Action
element specifies an action on the specified
resource for which permission is sought.Advice
contains any additional information that the
SAML authority wishes to provide.Artifact
element in
SAMLv2 protocol schema.ArtifactResolve
message is used to request that a SAML
protocol message be returned in an ArtifactResponse
message
by specifying an artifact that represents the SAML protocol message.ArtifactResopnse
message has the complex type
ArtifactResponseType
.Assertion
element.Attribute
element identifies an attribute by name and
optionally includes its value(s).AttributeStatement
element describes a statement by
the SAML authority asserting that the assertion subject is associated with
the specified attributes.AudienceRestriction
specifies that the assertion
is addressed to one or more specific Audience
s.AuthnContext
element specifies the context of an
authentication event.AuthnRequest
interface defines methods for properties
required by an authentication request.AuthnStatement
element describes a statement by the
SAML authority asserting that the assertion subject was authenticated
by a particular means at a particular time.AuthzDecisionStatement
element describes a statement
by the SAML authority asserting that a request for access by the assertion
subject tot he specified resource has resulted in the specified authorization
decision on the basis of some optionally specified evidence.BaseID
is an extension point that allows
applications to add new kinds of identifiers.BaseIDAbstract
is an abstract type usable only as
the base of a derived type.Hex
String.
Condition
serves as an extension point for new
conditions.ConditionAbstract
is abstract and is thus usable
as the base of a derived classConditions
defines the SAML constructs that place
constraints on the acceptable use if SAML Assertion
s.Action
.
Action
.
Action
.
Advice
.
Advice
.
Advice
The return object is immutable.
Artifact
.
Artifact
.
Artifact
.
ArtifactResolve
.
ArtifactResolve
.
ArtifactResolve
.
ArtifactResponse
.
ArtifactResponse
.
ArtifactResponse
.
Assertion
.
Assertion
.
Assertion
.
Attribute
.
Attribute
.
Attribute
.
AttributeStatement
.
AttributeStatement
.
AttributeStatement
.
AudienceRestriction
.
AudienceRestriction
.
AudienceRestriction
.
AuthnContext
.
AuthnContext
.
AuthnContext
.
AuthnRequest
Object.
AuthnRequest
Object.
AuthnRequest
Object.
AuthnStatement
.
AuthnStatement
.
AuthnStatement
.
AuthzDecisionStatement
.
AuthzDecisionStatement
.
AuthzDecisionStatement
.
BaseID
.
BaseID
.
BaseID
.
Condition
.
Condition
.
Condition
.
Conditions
.
Conditions
.
Conditions
.
EncryptedAssertion
.
EncryptedAssertion
.
EncryptedAttribute
.
EncryptedAttribute
.
EncryptedID
.
EncryptedID
.
Evidence
.
Evidence
.
Evidence
.
Extensions
Object.
Extensions
Object.
Extensions
Object.
GetComplete
Object.
GetComplete
Object.
GetComplete
Object.
IDPEntry
Object.
IDPEntry
Object.
IDPEntry
Object.
IDPList
Object.
IDPList
Object.
IDPList
Object.
Issuer
.
Issuer
.
Issuer
.
KeyInfoConfirmationData
.
KeyInfoConfirmationData
.
KeyInfoConfirmationData
.
LogoutRequest
Object.
LogoutRequest
Object.
LogoutRequest
Object.
LogoutResponse
Object.
LogoutResponse
Object.
LogoutResponse
Object.
NameID
.
NameID
.
NameID
.
NameIDPolicy
Object.
NameIDPolicy
Object.
NameIDPolicy
Object.
OneTimeUse
.
OneTimeUse
.
OneTimeUse
.
ProxyRestriction
.
ProxyRestriction
.
ProxyRestriction
.
RequesterID
Object.
RequesterID
Object.
RequesterID
Object.
Response
.
Response
.
Response
.
Scoping
Object.
Scoping
Object.
Scoping
Object.
SessionIndex
Object.
Status
Object.
Status
Object.
Status
Object.
StatusCode
Object.
StatusCode
Object.
StatusCode
Object.
StatusDetail
Object.
StatusDetail
Object.
StatusDetail
Object.
StatusMessage
Object.
Subject
.
Subject
.
Subject
.
SubjectConfirmation
.
SubjectConfirmation
.
SubjectConfirmation
.
SubjectConfirmationData
.
SubjectConfirmationData
.
SubjectConfirmationData
.
SubjectLocality
.
SubjectLocality
.
SubjectLocality
.
Attribute
object.
NewID
object.
EncryptedAssertion
represents an assertion in
encrypted fashion, as defined by the XML Encryption Syntax and
Processing specification [XMLEnc].EncryptedAttribute
element represents a SAML attribute
in encrypted fashion.EncryptedElement
carries the content of an unencrypted
identifier in encrypted fasion.EncryptedID
carries the content of an unencrypted
identifier in encrypted fasion.Evidence
element contains one or more assertions or
assertion references that the SAML authority relied on in issuing the
authorization decision.Extensions
defines methods for
adding protcol message extension elements.EncryptedAssertion
object.
EncryptedAttribute
object.
EncryptedID
object.
NewEncryptedID
object.
GetComplete
Element in the SAMLv2 Protocol Schema.Artifact
.
Action
(s) of the statement.
Address
attribute.
any
element of the response.
Extensions
object.
anyAttribute
of the attribute.
Artifact
of the request.
Assertion
(s) in the element.
Assertion
(s) of the response.
AssertionConsumerServiceIndex
attribute.
AssertionConsumerServiceURL
attribute.
AssertionIDRef
in the element.
AssertionIDRef
AssertionURIRef
(s) in the element.
AssertionURIRef
Assertion
Attribute
(s) of the statement.
AttributeConsumingServiceIndex
attribute.
AttributeValue
(s) of the Attribute
.
AttributeValue
(s) of the Attribute
.
Attribute
objects for an
authenticated user local attributes.
Attribute
s.
String
represented audiences
AudienceRestriction
AuthContext
.
AuthenticatingAuthority
property.
AuthnContext
property.
AuthnContext
AuthnContextClassRef
property.
AuthnContextDecl
property.
AuthnContextDeclRef
property.
AuthnInstant
attribute.
AuthnStatements
of the assertion
AuthzDecisionStatements
of the assertion
BaseID
format
Comparison
property.
Condition
Conditions
object.
Consent
attribute.
SubjectConfirmationData
object.
DNSName
attribute.
Decision
attribute of the statement.
Destination
attribute.
EncryptedAssertion
(s) in the element.
EncryptedAssertion
(s) of the response.
EncryptedAssertion
EncryptedAttribute
(s) of the statement.
encryptedID
property.
EndpointIndex
of the artifact.
Evidence
of the statement.
Extensions
Object.
Format
attribute.
FriendlyName
of the attribute.
GetComplete
Object.
ID
attribute.
IDPAuthnContextInfo
object.
IDPEntry
Objects.
IDPList
Object.
SAML
ManageNameIDRequest
.
SAML
Assertion
.
SAML
ManageNameIDRequest
.
AssertionFactory
.
ProtocolFactory
Object.
IssueInstant
attribute.
Issuer
Object.
Loc
attribute.
MessageHandle
of the artifact.
Name
of the attribute.
Name
attribute.
NameFormat
of the attribute.
NameID
format
NameID
information that contains
account federation with the corresponding remote and local entities.
nameID
property.
NameIDPolicy
object.
Namespace
attribute.
newEncryptedID
property.
NewID
property.
OneTimeUse
ProtocolBinding
attribute.
ProviderID
attribute value.
ProviderName
attribute value.
ProxyCount
attribute.
ProxyRestriction
RequestedAuthnContext
Object .
RequestedAuthnContext
object.
RequesterID
Objects..
Resource
of the statement.
SP
name qualifier
SP
name qualifier
SPNameQualifier
attribute.
SP
provided ID
Scoping
object.
SessionIndex
attribute.
SessionNotOnOrAfter
attribute.
Signature
Object as a string.
StatusResponse
contains
as String
.
SourceID
of the artifact.
Subject
object.
SubjectLocality
property.
TypeCode
of the artifact.
Action
.
GetComplete
URI.
NewID
URI.
RequesterID
URI.
SessionIndex
value.
StatusMessage
value.
Version
attribute.
Hex
String to Byte Array.
IDPAccountMapper
is used to map the
local identities to the SAML
protocol objects and
also the vice versa for some of the protocols for e.g.IDPAttributeMapper
is used to map the
authenticated user configured attributes to SAML Attribute
s
so that the SAML framework may insert these attribute information as SAML
AttributeStatement
s in SAML Assertion
.IDPAuthnContextInfo
consists of the mapping
between AuthnContextClassRef
and the actual
authentication mechanism at the Identity Provider.IDPAuthnContextMapper
creates an
IDPAuthnContextInfo based on the RequestAuthnContext from
the AuthnRequest sent by a Service Provider and the AuthnContext
configuration at the IDP entity config.- IDPENTITYID -
Static variable in interface com.sun.identity.saml2.common.SAML2Constants
-
- IDPENTRY -
Static variable in interface com.sun.identity.saml2.common.SAML2Constants
- Constant for IDPEntry Element.
- IDPENTRY -
Static variable in class com.sun.identity.saml2.common.SAML2SDKUtils
-
- IDPEntry - interface com.sun.identity.saml2.protocol.IDPEntry.
- This interface defines methods to set/retrieve single identity provider
information trusted by the request issuer to authenticate the presenter.
- IDPLIST -
Static variable in interface com.sun.identity.saml2.common.SAML2Constants
- Constant for IDPList Element.
- IDPLIST -
Static variable in class com.sun.identity.saml2.common.SAML2SDKUtils
-
- IDPList - interface com.sun.identity.saml2.protocol.IDPList.
- This interface specifies the identity providers trusted by the requester
to authenticate the presenter.
- IDP_ACCOUNT_MAPPER -
Static variable in interface com.sun.identity.saml2.common.SAML2Constants
- Identity provider account mapper.
- IDP_ATTRIBUTE_MAPPER -
Static variable in interface com.sun.identity.saml2.common.SAML2Constants
- Identity provider attribute mapper.
- IDP_AUTHNCONTEXT_CLASSREF_MAPPING -
Static variable in interface com.sun.identity.saml2.common.SAML2Constants
-
- IDP_AUTHNCONTEXT_MAPPER_CLASS -
Static variable in interface com.sun.identity.saml2.common.SAML2Constants
-
- IDP_META_ALIAS -
Static variable in interface com.sun.identity.saml2.common.SAML2Constants
- Constant for IDPMetaAlias SSO token property
- IDP_ROLE -
Static variable in interface com.sun.identity.saml2.common.SAML2Constants
-
- IDP_SESSION_INDEX -
Static variable in interface com.sun.identity.saml2.common.SAML2Constants
- Constant for SAML2IDPSessionIndex SSO token property
- ID_LENGTH -
Static variable in interface com.sun.identity.saml2.common.SAML2Constants
- Length for SAMLv2 IDs.
- INRESPONSETO -
Static variable in interface com.sun.identity.saml2.common.SAML2Constants
- Constant for InResponseTo
- INTERMEDIATE_URL -
Static variable in interface com.sun.identity.saml2.common.SAML2Constants
- Attribute to be configured in SPSSOConfig for intermediate url.
- IN_RESPONSE_TO -
Static variable in interface com.sun.identity.saml2.common.SAML2Constants
-
- ISPASSIVE -
Static variable in interface com.sun.identity.saml2.common.SAML2Constants
- Constant for isPassive attribute
- ISSUER -
Static variable in interface com.sun.identity.saml2.common.SAML2Constants
- Constant for Issuer
- ISSUER -
Static variable in class com.sun.identity.saml2.common.SAML2SDKUtils
-
- ISSUE_INSTANT -
Static variable in interface com.sun.identity.saml2.common.SAML2Constants
- Constant for IssueInstant
- Issuer - interface com.sun.identity.saml2.assertion.Issuer.
- The
Issuer
provides information about the issuer of
a SAML assertion or protocol message. - intToTwoBytes(int) -
Static method in class com.sun.identity.saml2.common.SAML2SDKUtils
- Converts integer to byte array.
- isAllowCreate() -
Method in interface com.sun.identity.saml2.protocol.NameIDPolicy
- Returns true if the identity provider is allowed to create a
new identifier to represent the principal.
- isFM() -
Static method in class com.sun.identity.saml2.common.SAML2SDKUtils
- Returns whether the existing installation is FM or AM.
- isForceAuthn() -
Method in interface com.sun.identity.saml2.protocol.AuthnRequest
- Returns value of
isForceAuthn
attribute.
- isMutable() -
Method in interface com.sun.identity.saml2.assertion.Action
- Returns the mutability of the object.
- isMutable() -
Method in interface com.sun.identity.saml2.assertion.Advice
- Returns true if the object is mutable
- isMutable() -
Method in interface com.sun.identity.saml2.assertion.Assertion
- Returns true if the object is mutable
- isMutable() -
Method in interface com.sun.identity.saml2.assertion.Attribute
- Returns the mutability of the object.
- isMutable() -
Method in interface com.sun.identity.saml2.assertion.AudienceRestriction
- Returns true if the object is mutable
- isMutable() -
Method in interface com.sun.identity.saml2.assertion.AuthnContext
- Returns the mutability of the object.
- isMutable() -
Method in interface com.sun.identity.saml2.assertion.BaseIDAbstract
- Returns true if the object is mutable
- isMutable() -
Method in interface com.sun.identity.saml2.assertion.ConditionAbstract
- Returns true if the object is mutable
- isMutable() -
Method in interface com.sun.identity.saml2.assertion.Conditions
- Returns true if the object is mutable
- isMutable() -
Method in interface com.sun.identity.saml2.assertion.Evidence
- Returns the mutability of the object.
- isMutable() -
Method in interface com.sun.identity.saml2.assertion.NameIDType
- Returns true if the object is mutable
- isMutable() -
Method in interface com.sun.identity.saml2.assertion.Statement
- Returns the mutability of the object.
- isMutable() -
Method in interface com.sun.identity.saml2.assertion.Subject
- Returns true if the object is mutable
- isMutable() -
Method in interface com.sun.identity.saml2.assertion.SubjectConfirmation
- Returns true if the object is mutable
- isMutable() -
Method in interface com.sun.identity.saml2.assertion.SubjectConfirmationData
- Returns true if the object is mutable
- isMutable() -
Method in interface com.sun.identity.saml2.assertion.SubjectLocality
- Returns the mutability of the object.
- isMutable() -
Method in interface com.sun.identity.saml2.protocol.Extensions
- Returns value true if object is mutable.
- isMutable() -
Method in interface com.sun.identity.saml2.protocol.GetComplete
- Returns true if object is mutable.
- isMutable() -
Method in interface com.sun.identity.saml2.protocol.IDPEntry
- Returns true if object is mutable.
- isMutable() -
Method in interface com.sun.identity.saml2.protocol.IDPList
- Returns true if object is mutable.
- isMutable() -
Method in interface com.sun.identity.saml2.protocol.NameIDPolicy
- Returns true if object is mutable.
- isMutable() -
Method in interface com.sun.identity.saml2.protocol.RequestAbstract
- Returns true if object is mutable.
- isMutable() -
Method in interface com.sun.identity.saml2.protocol.RequestedAuthnContext
- Returns true if mutable, false otherwise.
- isMutable() -
Method in interface com.sun.identity.saml2.protocol.RequesterID
- Returns value true if object is mutable.
- isMutable() -
Method in interface com.sun.identity.saml2.protocol.Scoping
- Returns true if object is mutable.
- isMutable() -
Method in interface com.sun.identity.saml2.protocol.Status
- Returns true if the object is mutable, false otherwise
- isMutable() -
Method in interface com.sun.identity.saml2.protocol.StatusCode
- Returns true if the object is mutable, false otherwise
- isMutable() -
Method in interface com.sun.identity.saml2.protocol.StatusDetail
- Returns true if the object is mutable, false otherwise
- isMutable() -
Method in interface com.sun.identity.saml2.protocol.StatusResponse
- Returns true if the object is mutable, false otherwise
- isPassive() -
Method in interface com.sun.identity.saml2.protocol.AuthnRequest
- Returns the value of the
isPassive
attribute.
- isSignatureValid(X509Certificate) -
Method in interface com.sun.identity.saml2.assertion.Assertion
- Return whether the signature is valid or not.
- isSignatureValid(X509Certificate) -
Method in interface com.sun.identity.saml2.protocol.RequestAbstract
- Return whether the signature is valid or not.
- isSignatureValid(X509Certificate) -
Method in interface com.sun.identity.saml2.protocol.StatusResponse
- Returns whether the signature on the
StatusResponse
is valid or not.
- isSigned() -
Method in interface com.sun.identity.saml2.assertion.Assertion
- Return true if the assertion is signed
- isSigned() -
Method in interface com.sun.identity.saml2.protocol.RequestAbstract
- Returns true if message is signed.
- isSigned() -
Method in interface com.sun.identity.saml2.protocol.StatusResponse
- Returns whether the
StatusResponse
is signed or not.
- isTimeValid() -
Method in interface com.sun.identity.saml2.assertion.Assertion
- Gets the validity of the assertion evaluating its conditions if
specified.
KeyInfoConfirmationData
constrains a
SubjectConfirmationData
element to contain one or more
LogoutRequest
element in
SAML protocol schema.LogoutResponse
element in
SAML protocol schema.NameID
is used in various SAML assertion constructs
such as Subject
and SubjectConfirmation
elements, and in various protocol messages.NameIDType
is used when an element serves to represent
an entity by a string-valued name.ManageNameIDRequest
message.OneTimeUse
indicates that the assertion should be
used immediately by the relying party and must not be retained for
future use.ProxyRestriction
specifies limitations that the
asserting party imposes on relying parties that in turn wish to
act as asserting parties and issue subsequent assertions of their
own on the basis of the information contained in the original
assertion.AuthnRequest
message.Response
message element is used when a response consists
of a list of zero or more assertions that satisfy the request.SAML2Exception
without a nested
Throwable
.
SAML2Exception
with the given
message.
SAML2Exception
with given
Throwable
.
SAML2SDKUtils
contains utility methods for SAML 2.0
implementation.SPAccountMapper
is used to identify the
local identities that maps the SAML
protocol objects such as
Assertion
, ManageNameIDRequest
etc.SPAttributeMapper
is used to map the
SAML Attribute
s to the local user attributes.SPAuthnContextMapper.java
determines
the Authentication Context to be set in the Authentication Request
and the Auth Level of an Authentication Context.SessionIndex
element in
SAML protocol schema.Statement
element is an extension point that allows
other assertion-based applications to reuse the SAML assertion framework.StatusType
complex type in
SAML protocol schema.StatusCodeType
complex type in
SAML protocol schema.StatusDetailType
complex type in
SAML protocol schema.StatusMessage
element in
SAML protocol schema.StatusResponseType
complex type in
SAML protocol schema.Subject
specifies the principal that is the subject
of all of the statements in the assertion.SubjectConfirmation
provides the means for a relying
party to verify the correspondence of the subject of the assertion
with the party with whom the relying party is communicating.SubjectConfirmationData
specifies additional data
that allows the subject to be confirmed or constrains the circumstances
under which the act of subject confirmation can take place.SubjectLocality
element specifies the DNS domain name
and IP address for the system entity that performed the authentication.Action
(s) of the statement.
Address
attribute.
AllowCreate
attribute.
any
element of the response.
Extensions
object.
anyAttribute
of the attribute.
Artifact
of the request.
Assertion
(s) in the element.
AssertionConsumerServiceIndex
attribute.
AssertionConsumerServiceURL
attribute.
AssertionIDRef
(s) in the element.
AssertionIDRef
AssertionURIRef
(s) in the element.
AssertionURIRef
Assertion
Attribute
(s) of the statement.
AttributeConsumingServiceIndex
attribute.
AttributeValue
(s) of the Attribute
.
AttributeValue
element(s).
AudienceRestriction
AuthenticatingAuthority
property.
AuthnContext
property.
AuthnContextClassRef
property.
AuthnContextDecl
property.
AuthnContextDeclRef
property.
AuthnInstant
attribute.
AuthnStatements
of the assertion
AuthzDecisionStatements
of the assertion
BaseID
format
Comparison
property.
Condition
Conditions
object.
Consent
attribute.
SubjectConfirmationData
object.
DNSName
attribute.
Decision
attribute.
Destination
attribute.
EncryptedAssertion
(s) in the element.
EncryptedAssertion
(s) of the response.
EncryptedAssertion
EncryptedAttribute
(s) of the statement.
encryptedID
property.
Evidence
of the statement.
Extensions
Object.
ForceAuthn
attribute.
Format
attribute.
FriendlyName
of the attribute.
GetComplete
Object.
ID
attribute.
IDPEntry
Object.
IDPList
Object.
IsPassive
attribute.
IssueInstant
attribute.
Issuer
object.
Loc
attribute.
Name
of the attribute.
Name
attribute.
NameFormat
of the attribute.
NameID
format
nameID
property.
NameIDPolicy
object.
Namespace
attribute.
newEncryptedID
property.
NewID
property.
OneTimeUse
ProtocolBinding
attribute.
ProviderID
attribute value.
ProviderName
attribute value.
ProxyCount
attribute.
ProxyRestriction
RequestedAuthnContext
.
RequesterID
Objects.
Resource
of the statement.
SP
name qualifier
SP
name qualifier
SPNameQualifier
attribute.
SP
provided ID
Scoping
object.
SessionIndex
attribute.
SessionNotOnOrAfter
attribute.
Subject
object.
SubjectLocality
property.
Action
.
GetComplete
URI.
RequesterID
URI.
Version
attribute.
StatusResponse
.
SubjectLocality
element.
SessionIndex
in an XML document String format
based on the SessionIndex
schema described above.
SessionIndex
in an XML document String format
based on the SessionIndex
schema described above.
Status
in an XML document String format
based on the Status
schema described above.
Status
in an XML document String format
based on the Status
schema described above.
StatusCode
in an XML document String format
based on the StatusCode
schema described above.
StatusCode
in an XML document String format
based on the StatusCode
schema described above.
StatusDetail
in an XML document String format
based on the StatusDetail
schema described above.
StatusDetail
in an XML document String format
based on the StatusDetail
schema described above.
StatusMessage
in an XML document String format
based on the StatusMessage
schema described above.
StatusMessage
in an XML document String format
based on the StatusMessage
schema described above.
StatusResponse
in an XML document String format
based on the StatusResponse
schema described above.
StatusResponse
in an XML document String format
based on the StatusResponse
schema described above.
|
||||||||||
PREV NEXT | FRAMES NO FRAMES |