com.bea.security.saml2.providers
Interface SAML2CredentialNameMapper

public interface SAML2CredentialNameMapper

Interface used to perform mapping of user and group information to SAML2 assertions.

To specify an instance of this interface to be used by the SAML2 Credential Mapper, set the NameMapperClassName attribute.

Classes implementing this interface must have a public no-arg constructor and must be in the system classpath.

setNameQualifier

void setNameQualifier(String nameQualifier)

Called by the SAML Credential Mapper to inform a SAMLCredentialNameMapper of the currently configured SAML NameQualifier value.

Parameters:

nameQualifier - The currently configured Name Qualifier

mapSubject

SAML2NameMapperInfo mapSubject(Subject subject,
                               ContextHandler handler)

Maps a Subject to a set of values used to construct a SAML NameIdentifier element for a SAML assertion. The returned SAMLNameMapperInfo may optionally include a Collection of group names, which will be used to construct a SAML AttributeStatement containing a WLSGroups attribute.

Parameters:

subject - The Subject that should be mapped.

handler - The ContextHandler passed to the SAML Credential Mapper.

Returns:

A SAMLNameMapperInfo containing user and group information, or null if no mapping is made.

mapName

SAML2NameMapperInfo mapName(String name,
                            ContextHandler handler)

Maps a String name to a set of values used to construct a SAML NameIdentifier element for a SAML assertion. The returned SAMLNameMapperInfo may optionally include a Collection of group names, which will be used to construct a SAML AttributeStatement containing a WLSGroups attribute.

Parameters:

name - The String name that should be mapped.

handler - The ContextHandler passed to the SAML Credential Mapper.

Returns:

A SAMLNameMapperInfo containing user and group information, or null if no mapping is made.