com.bea.security.saml2.providers.registry
Class WSSIdPPartnerImpl

java.lang.Object
  com.bea.security.saml2.providers.registry.WSSIdPPartnerImpl

All Implemented Interfaces:

IdPPartner, Partner, WSSIdPPartner, WSSPartner, Serializable

public class WSSIdPPartnerImpl
extends Object
implements WSSIdPPartner, Serializable

See Also:

Serialized Form

WSSIdPPartnerImpl

public WSSIdPPartnerImpl()

getAssertionSigningCert

public X509Certificate getAssertionSigningCert()

Description copied from interface: WSSIdPPartner

Get the Assertion Signing Certificate. The certificate referenced by this alias is used to verify signatures on signed assertions.

Specified by:

getAssertionSigningCert in interface WSSIdPPartner

Returns:

The Assertion Signing Certificate.

setAssertionSigningCert

public void setAssertionSigningCert(X509Certificate assertionSigningCert)

Description copied from interface: WSSIdPPartner

Set the Assertion Signing Certificate.

Specified by:

setAssertionSigningCert in interface WSSIdPPartner

Parameters:

assertionSigningCert - The Assertion Signing Certificate to set.

See Also:

WSSIdPPartner.getAssertionSigningCert()

getAudienceURIs

public String[] getAudienceURIs()

Description copied from interface: Partner

Returns an array of <Audience> URI values for the <AudienceRestriction> condition of SAML assertions. In General cases, for IdP partners, this configuration specifies a list of audiences of the local site, one of which must be in each assertion from the IdP. For SP partners, this configuration specifies the audience list to include in generated assertions.

Note that for Web SSO cases, this value is not honored. The only Audience URI for Web SSO is the IdP's Entity ID.

Specified by:

getAudienceURIs in interface Partner

Returns:

<Audience> URI values

See Also:

MetadataPartner.getEntityID()

setAudienceURIs

public void setAudienceURIs(String[] audienceURIs)

Description copied from interface: Partner

Sets the <Audience> URI values for this partner.

Specified by:

setAudienceURIs in interface Partner

Parameters:

audienceURIs - <Audience> URI values

See Also:

Partner.getAudienceURIs()

getConfirmationMethod

public String getConfirmationMethod()

Description copied from interface: WSSPartner

get the subject confirmation method for this partner. the confirmation method could be one of: Partner.ASSERTION_TYPE_BEARER Partner.ASSERTION_TYPE_HOLDER_OF_KEY and Partner.ASSERTION_TYPE_SENDER_VOUCHES. hold-of-key, sender-vouches and bearer.

Specified by:

getConfirmationMethod in interface WSSPartner

Returns:

the conformation method

setConfirmationMethod

public void setConfirmationMethod(String confirmationMethod)

Description copied from interface: WSSPartner

set the confirmation method.

Specified by:

setConfirmationMethod in interface WSSPartner

getDescription

public String getDescription()

Description copied from interface: Partner

Returns the description for this partner.

Specified by:

getDescription in interface Partner

Returns:

description.

setDescription

public void setDescription(String description)

Description copied from interface: Partner

Set the description for this partner.

Specified by:

setDescription in interface Partner

Parameters:

description - The description value to set.

isEnabled

public boolean isEnabled()

Description copied from interface: Partner

Returns the enabled flag for this partner. This value indicates whether or not the partner is enabled.

Specified by:

isEnabled in interface Partner

Returns:

enabled flag.

setEnabled

public void setEnabled(boolean enabled)

Description copied from interface: Partner

Set the enabled flag for this partner.

Specified by:

setEnabled in interface Partner

Parameters:

enabled - The enabled flag to set.

getIdentityProviderNameMapperClassname

public String getIdentityProviderNameMapperClassname()

Description copied from interface: IdPPartner

Returns classname of IdP Provider name mapper for the conversion from JAAS Subject principals to SAML2 attributes

Specified by:

getIdentityProviderNameMapperClassname in interface IdPPartner

Returns:

IdP Provider name mapper classname

setIdentityProviderNameMapperClassname

public void setIdentityProviderNameMapperClassname(String identityProviderNameMapperClassname)

Description copied from interface: IdPPartner

Sets IdP Provider name mapper classname

Specified by:

setIdentityProviderNameMapperClassname in interface IdPPartner

Parameters:

identityProviderNameMapperClassname - Name mapper classname

See Also:

IdPPartner.getIdentityProviderNameMapperClassname()

getIssuerURI

public String getIssuerURI()

Description copied from interface: IdPPartner

Get this partner's Issuer URI. Defaults to entity ID for meta-data partners, e.g. WebSSOIdPPartner

Specified by:

getIssuerURI in interface IdPPartner

Returns:

The Issuer URI.

See Also:

MetadataPartner.getEntityID()

setIssuerURI

public void setIssuerURI(String issuerURI)

Description copied from interface: IdPPartner

Set the Issuer URI value for this partner.

Specified by:

setIssuerURI in interface IdPPartner

Parameters:

issuerURI - The partner's Issuer URI.

See Also:

IdPPartner.getIssuerURI()

isProcessAttributes

public boolean isProcessAttributes()

Description copied from interface: IdPPartner

Process attribute flag. If true, the SAML identity asserter will process the <AttributeStatement> in the assertion. The default implementation will process the WLSGroup information in the assertion.

This value works together with the default value in the identity asserter mbean settings. If either is true, the attribute will be processed.

Specified by:

isProcessAttributes in interface IdPPartner

Returns:

The process attribute flag.

setProcessAttributes

public void setProcessAttributes(boolean processAttributes)

Description copied from interface: IdPPartner

Set the process attribute flag.

Specified by:

setProcessAttributes in interface IdPPartner

See Also:

IdPPartner.isProcessAttributes()

isVirtualUserEnabled

public boolean isVirtualUserEnabled()

Description copied from interface: IdPPartner

Get the Virtual User Enabled value. If true, the SAML Authenticator will authenticate "virtual users" for names (user and group) obtained from this partner's assertions and returned by the SAML Identity Asserter. If false, virtual users are not allowed, and the user names returned by the SAML Identity Asserter must be authenticated by another authenticator, which will (probably) require that the user be registered in a user directory or database and will create user principals based on the user's directory information.

Specified by:

isVirtualUserEnabled in interface IdPPartner

Returns:

The Virtual User Enabled value.

setVirtualUserEnabled

public void setVirtualUserEnabled(boolean virtualUserEnabled)

Description copied from interface: IdPPartner

Set the Virtual User Enabled value.

Specified by:

setVirtualUserEnabled in interface IdPPartner

Parameters:

virtualUserEnabled - The Virtual user Enabled valuee to set.

isWantAssertionsSigned

public boolean isWantAssertionsSigned()

Specified by:

isWantAssertionsSigned in interface IdPPartner

setWantAssertionsSigned

public void setWantAssertionsSigned(boolean wantAssertionsSigned)

Specified by:

setWantAssertionsSigned in interface IdPPartner

isNameModified

public boolean isNameModified()

Description copied from interface: Partner

Returns the nameModified flag for this partner. This value indicates whether or not the partner name is modified.

Specified by:

isNameModified in interface Partner

Returns:

nameModified flag.

setName

public void setName(String name)

Description copied from interface: Partner

Set the partner's name. Name is required for a partner.

Specified by:

setName in interface Partner

getName

public String getName()

Description copied from interface: Partner

Returns this partner's name.

Specified by:

getName in interface Partner

Returns:

partner name