net.shibboleth.idp.saml.saml2.profile.config

Interface SAML2ProfileConfiguration

All Known Implementing Classes:

AbstractSAML2ArtifactAwareProfileConfiguration, AbstractSAML2ProfileConfiguration, ArtifactResolutionProfileConfiguration, AttributeQueryProfileConfiguration, BrowserSSOProfileConfiguration, ECPProfileConfiguration, SingleLogoutProfileConfiguration, SSOSProfileConfiguration

public interface SAML2ProfileConfiguration

Base interface for SAML 2 profile configurations.

Method Summary

Methods

Modifier and Type	Method and Description
com.google.common.base.Predicate<ProfileRequestContext>	getEncryptAssertions() Get the predicate used to determine if assertions should be encrypted.
com.google.common.base.Predicate<ProfileRequestContext>	getEncryptAttributes() Get the predicate used to determine if attributes should be encrypted.
com.google.common.base.Predicate<ProfileRequestContext>	getEncryptNameIDs() Get the predicate used to determine if name identifiers should be encrypted.
Collection<String>	getProxyAudiences() Get the unmodifiable collection of audiences for a proxied assertion.
long	getProxyCount() Get the maximum number of times an assertion may be proxied.
boolean	isEncryptionOptional() Get whether to ignore an inability to encrypt due to external factors.

Method Detail

getProxyCount

@NonNegative
long getProxyCount()

Get the maximum number of times an assertion may be proxied.

Returns:

maximum number of times an assertion may be proxied

getProxyAudiences

@Nonnull
@NonnullElements
@NotLive
@Unmodifiable
Collection<String> getProxyAudiences()

Get the unmodifiable collection of audiences for a proxied assertion.

Returns:

audiences for a proxied assertion

isEncryptionOptional

boolean isEncryptionOptional()

Get whether to ignore an inability to encrypt due to external factors.

This allows a deployer to signal that encryption is "best effort" and can be omitted if a relying party doesn't possess a key, support a compatible algorithm, etc.

Defaults to false.

Returns:

true iff encryption should be treated as optional

getEncryptAssertions

@Nonnull
com.google.common.base.Predicate<ProfileRequestContext> getEncryptAssertions()

Get the predicate used to determine if assertions should be encrypted.

Returns:

predicate used to determine if assertions should be encrypted

getEncryptNameIDs

@Nonnull
com.google.common.base.Predicate<ProfileRequestContext> getEncryptNameIDs()

Get the predicate used to determine if name identifiers should be encrypted.

Returns:

predicate used to determine if name identifiers should be encrypted

getEncryptAttributes

@Nonnull
com.google.common.base.Predicate<ProfileRequestContext> getEncryptAttributes()

Get the predicate used to determine if attributes should be encrypted.

Returns:

predicate used to determine if attributes should be encrypted