weblogic.security.providers.saml
Interface SAMLCredentialNameMapper

public interface SAMLCredentialNameMapper

Interface used to perform mapping of user and group information to SAML assertions.

To specify an instance of this interface to be used by the SAML Credential Mapper, set the NameMapperClassName attribute.

Classes implementing this interface must have a public no-arg constructor and must be in the system classpath.

setNameQualifier

void setNameQualifier(String nameQualifier)

Called by the SAML Credential Mapper to inform a SAMLCredentialNameMapper of the currently configured SAML NameQualifier value.

Parameters:

nameQualifier - The currently configured Name Qualifier

mapSubject

SAMLNameMapperInfo mapSubject(Subject subject,
                              ContextHandler handler)

Maps a Subject to a set of values used to construct a SAML NameIdentifier element for a SAML assertion. The returned SAMLNameMapperInfo may optionally include a Collection of group names, which will be used to construct a SAML AttributeStatement containing a WLSGroups attribute.

Parameters:

subject - The Subject that should be mapped.

handler - The ContextHandler passed to the SAML Credential Mapper.

Returns:

A SAMLNameMapperInfo containing user and group information, or null if no mapping is made.

mapName

SAMLNameMapperInfo mapName(String name,
                           ContextHandler handler)

Maps a String name to a set of values used to construct a SAML NameIdentifier element for a SAML assertion. The returned SAMLNameMapperInfo may optionally include a Collection of group names, which will be used to construct a SAML AttributeStatement containing a WLSGroups attribute.

Parameters:

name - The String name that should be mapped.

handler - The ContextHandler passed to the SAML Credential Mapper.

Returns:

A SAMLNameMapperInfo containing user and group information, or null if no mapping is made.