Options
All
  • Public
  • Public/Protected
  • All
Menu

Namespace ExtensionX509IdentityProvider

X509 Identity Provider Extension Schema

Enumerations

Properties

Functions

Properties

certMatchAttribute

certMatchAttribute: string

X509 Certificate Matching Attribute

*Added In:** 2010242156

*SCIM++ Properties:** - caseExact: false - idcsSearchable: false - multiValued: false - mutability: readWrite - required: true - returned: default - type: string - uniqueness: none

Optional crlCheckOnOCSPFailureEnabled

crlCheckOnOCSPFailureEnabled: undefined | false | true

Fallback on CRL Validation if OCSP fails.

*Added In:** 2010242156

*SCIM++ Properties:** - caseExact: false - idcsSearchable: false - multiValued: false - mutability: readWrite - required: false - returned: default - type: boolean - uniqueness: none

Optional crlEnabled

crlEnabled: undefined | false | true

Set to true to enable CRL Validation

*Added In:** 2010242156

*SCIM++ Properties:** - caseExact: false - idcsSearchable: false - multiValued: false - mutability: readWrite - required: false - returned: default - type: boolean - uniqueness: none

Optional crlLocation

crlLocation: undefined | string

CRL Location URL

*Added In:** 2010242156

*SCIM++ Properties:** - caseExact: false - idcsSearchable: false - multiValued: false - mutability: readWrite - required: false - returned: default - type: string - uniqueness: none

Optional crlReloadDuration

crlReloadDuration: undefined | number

Fetch the CRL contents every X minutes

*Added In:** 2010242156

*SCIM++ Properties:** - idcsSearchable: false - multiValued: false - mutability: readWrite - required: false - returned: default - type: integer - uniqueness: none Note: Numbers greater than Number.MAX_SAFE_INTEGER will result in rounding issues.

Optional ekuValidationEnabled

ekuValidationEnabled: undefined | false | true

Set to true to enable EKU Validation

*Added In:** 2304270343

*SCIM++ Properties:** - caseExact: false - idcsSearchable: false - multiValued: false - mutability: readWrite - required: false - returned: default - type: boolean - uniqueness: none

Optional ekuValues

ekuValues: Array<EkuValues>

List of EKU which needs to be validated

*Added In:** 2304270343

*SCIM++ Properties:** - caseExact: false - idcsSearchable: false - multiValued: true - mutability: readWrite - required: false - returned: default - type: string - uniqueness: none

Optional ocspAllowUnknownResponseStatus

ocspAllowUnknownResponseStatus: undefined | false | true

Allow access if OCSP response is UNKNOWN or OCSP Responder does not respond within the timeout duration

*Added In:** 2010242156

*SCIM++ Properties:** - caseExact: false - idcsSearchable: false - multiValued: false - mutability: readWrite - required: false - returned: default - type: boolean - uniqueness: none

Optional ocspEnableSignedResponse

ocspEnableSignedResponse: undefined | false | true

Describes if the OCSP response is signed

*Added In:** 2010242156

*SCIM++ Properties:** - caseExact: false - idcsSearchable: false - multiValued: false - mutability: readWrite - required: false - returned: default - type: boolean - uniqueness: none

Optional ocspEnabled

ocspEnabled: undefined | false | true

Set to true to enable OCSP Validation

*Added In:** 2010242156

*SCIM++ Properties:** - caseExact: false - idcsSearchable: false - multiValued: false - mutability: readWrite - required: false - returned: default - type: boolean - uniqueness: none

Optional ocspResponderURL

ocspResponderURL: undefined | string

This property specifies OCSP Responder URL.

*Added In:** 2010242156

*SCIM++ Properties:** - caseExact: false - idcsSearchable: false - multiValued: false - mutability: readWrite - required: false - returned: default - type: string - uniqueness: none

Optional ocspRevalidateTime

ocspRevalidateTime: undefined | number

Revalidate OCSP status for user after X hours

*Added In:** 2010242156

*SCIM++ Properties:** - idcsMaxValue: 24 - idcsMinValue: 0 - idcsSearchable: false - multiValued: false - mutability: readWrite - required: false - returned: default - type: integer - uniqueness: none Note: Numbers greater than Number.MAX_SAFE_INTEGER will result in rounding issues.

Optional ocspServerName

ocspServerName: undefined | string

This property specifies the OCSP Server alias name

*Added In:** 2010242156

*SCIM++ Properties:** - caseExact: false - idcsSearchable: false - multiValued: false - mutability: readWrite - required: false - returned: default - type: string - uniqueness: none

Optional ocspTrustCertChain

ocspTrustCertChain: Array<string>

OCSP Trusted Certificate Chain

*Added In:** 2010242156

*SCIM++ Properties:** - caseExact: false - idcsSearchable: false - multiValued: true - mutability: readWrite - required: false - returned: default - type: string - uniqueness: none

Optional otherCertMatchAttribute

otherCertMatchAttribute: undefined | string

Check for specific conditions of other certificate attributes

*Added In:** 2010242156

*SCIM++ Properties:** - caseExact: false - idcsSearchable: false - multiValued: false - mutability: readWrite - required: false - returned: default - type: string - uniqueness: none

signingCertificateChain

signingCertificateChain: Array<string>

Certificate alias list to create a chain for the incoming client certificate

*Added In:** 2010242156

*SCIM++ Properties:** - caseExact: false - idcsSearchable: false - multiValued: true - mutability: readWrite - required: true - returned: default - type: string - uniqueness: none

userMatchAttribute

userMatchAttribute: string

This property specifies the userstore attribute value that must match the incoming certificate attribute.

*Added In:** 2010242156

*SCIM++ Properties:** - caseExact: false - idcsSearchable: false - multiValued: false - mutability: readWrite - required: true - returned: default - type: string - uniqueness: none

Functions

getDeserializedJsonObj

getJsonObj