com.atlassian.plugins.authentication.sso.web.saml.provider.impl

Class OneloginJavaSamlProvider

java.lang.Object

com.atlassian.plugins.authentication.sso.web.saml.provider.impl.OneloginJavaSamlProvider

All Implemented Interfaces:

SamlProvider

@Named
public class OneloginJavaSamlProvider
extends Object
implements SamlProvider

Nested Class Summary

Nested classes/interfaces inherited from interface com.atlassian.plugins.authentication.sso.web.saml.provider.SamlProvider

SamlProvider.ServiceProviderInfo

Method Summary

Modifier and Type	Method and Description
SamlRequest	createSamlSingleSignOnRequest(javax.servlet.http.HttpServletRequest request, javax.servlet.http.HttpServletResponse response, SamlProvider.ServiceProviderInfo serviceProviderInfo, boolean forceAuth, SamlConfig samlConfig) Prepares a SAML AuthnRequest
SamlResponse	extractSamlResponse(javax.servlet.http.HttpServletRequest request, javax.servlet.http.HttpServletResponse response, SamlProvider.ServiceProviderInfo serviceProviderInfo, SamlConfig samlConfig, SamlRequest samlRequest) Validates the SAML assertions provided in the request, and either returns a parsed response or throws
List<String>	getIssuers(javax.servlet.http.HttpServletRequest request) Parses response (does not authenticate or validate) and returns issuers in SAMLResponse query parameter

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Method Detail

createSamlSingleSignOnRequest

public SamlRequest createSamlSingleSignOnRequest(@Nonnull
                                                 javax.servlet.http.HttpServletRequest request,
                                                 @Nonnull
                                                 javax.servlet.http.HttpServletResponse response,
                                                 @Nonnull
                                                 SamlProvider.ServiceProviderInfo serviceProviderInfo,
                                                 boolean forceAuth,
                                                 SamlConfig samlConfig)

Description copied from interface: SamlProvider

Prepares a SAML AuthnRequest

Specified by:

createSamlSingleSignOnRequest in interface SamlProvider

forceAuth - if set to true, Identity Provider should explicitly ask user for credentials

samlConfig - the SAML IdP to whom the AuthnRequest will be prepared

Returns:

a representation of the SAML request

extractSamlResponse

public SamlResponse extractSamlResponse(@Nonnull
                                        javax.servlet.http.HttpServletRequest request,
                                        @Nonnull
                                        javax.servlet.http.HttpServletResponse response,
                                        @Nonnull
                                        SamlProvider.ServiceProviderInfo serviceProviderInfo,
                                        @Nonnull
                                        SamlConfig samlConfig,
                                        @Nullable
                                        SamlRequest samlRequest)
                                 throws InvalidSamlResponse

Description copied from interface: SamlProvider

Validates the SAML assertions provided in the request, and either returns a parsed response or throws

Specified by:

extractSamlResponse in interface SamlProvider

samlRequest - the AuthnRequest data that this request is a response to, null for IDP initiated authentication

Returns:

a parsed, valid SAML response

Throws:

InvalidSamlResponse - if the assertions can't be verified, are invalid, or the request doesn't contain assertions

getIssuers

public List<String> getIssuers(javax.servlet.http.HttpServletRequest request)

Description copied from interface: SamlProvider

Parses response (does not authenticate or validate) and returns issuers in SAMLResponse query parameter

Specified by:

getIssuers in interface SamlProvider

Returns:

list of issuers