Skip navigation links

oracle.security.idaas.rp.spi
Interface SessionProvider

public interface SessionProvider

The SessionProvider interface is to create a session or helps in generating application session. For example, in OAM, the implementation of this interface uses the TAP mechanism to send back the authenticated principal information and other user attributes.

The applications could generate local sessions via some back-end or alternatively redirect to the corresponding session providers through mutually agreed secure mechanisms.

Since:

release specific (what release of product did this appear in)

Version:

$Header: SessionProvider.java 09-feb-2011.17:48:07 msimhach Exp $

Author:

msimhach

Method Summary

java.lang.Object

createSession(java.lang.String userID, java.util.Map<java.lang.String,java.lang.String> userAttributes, javax.servlet.http.HttpServletRequest request, javax.servlet.http.HttpServletResponse response) Creates/helps in creating a user session for a registered application after succesful authentication with an identity provider.

Method Detail

createSession

java.lang.Object createSession(java.lang.String userID,
                               java.util.Map<java.lang.String,java.lang.String> userAttributes,
                               javax.servlet.http.HttpServletRequest request,
                               javax.servlet.http.HttpServletResponse response)
                               throws RPException

Creates/helps in creating a user session for a registered application after succesful authentication with an identity provider.

Parameters:

userID - the principal being set on the session.

userAttributes - that user attributes that may be required to set as user sesssion attributes.

request - the HTTP request object.

response - the HTTP response object.

Returns:

the session object that may have been created.

Throws:

RPException - if there is an error during session creation.

Skip navigation links