Uses of Class
se.swedenconnect.spring.saml.idp.authentication.Saml2UserAuthentication
Package
Description
Support for SAML
NameID
s.Support for attribute release.
Audit data definitions.
Support for user authentication including SSO.
Authentication provider support.
Support for "external user authentication", i.e., when we redirect the user outside of the Spring Security flow to
get authenticated.
Event handling.
-
Uses of Saml2UserAuthentication in se.swedenconnect.spring.saml.idp.attributes.nameid
Modifier and TypeMethodDescriptionprotected abstract String
AbstractNameIDGenerator.getIdentifier
(Saml2UserAuthentication authentication) Gets theNameID
identifier to use.protected String
PersistentNameIDGenerator.getIdentifier
(Saml2UserAuthentication authentication) Gets theNameID
identifier to use.protected String
TransientNameIDGenerator.getIdentifier
(Saml2UserAuthentication authentication) Gets theNameID
identifier to use.org.opensaml.saml.saml2.core.NameID
AbstractNameIDGenerator.getNameID
(Saml2UserAuthentication authentication) Generate aNameID
based on the supplied authentication object.org.opensaml.saml.saml2.core.NameID
NameIDGenerator.getNameID
(Saml2UserAuthentication authentication) Generate aNameID
based on the supplied authentication object. -
Uses of Saml2UserAuthentication in se.swedenconnect.spring.saml.idp.attributes.release
Modifier and TypeMethodDescriptiondefault AttributeReleaseVote
AttributeReleaseVoter.apply
(Saml2UserAuthentication token, org.opensaml.saml.saml2.core.Attribute attribute) List
<org.opensaml.saml.saml2.core.Attribute> AttributeProducer.releaseAttributes
(Saml2UserAuthentication userAuthentication) Determines which attributes to release based on the supplied token.List
<org.opensaml.saml.saml2.core.Attribute> DefaultAttributeProducer.releaseAttributes
(Saml2UserAuthentication userAuthentication) Releases all attributes that are explicitly, or implicitly, requested.List
<org.opensaml.saml.saml2.core.Attribute> DefaultAttributeReleaseManager.releaseAttributes
(Saml2UserAuthentication userAuthentication) Determines which attributes to release based on the supplied token.List
<org.opensaml.saml.saml2.core.Attribute> ReleaseAllAttributeProducer.releaseAttributes
(Saml2UserAuthentication userAuthentication) Releases all attributes from theSaml2UserAuthentication
token.List
<org.opensaml.saml.saml2.core.Attribute> SwedenConnectAttributeProducer.releaseAttributes
(Saml2UserAuthentication userAuthentication) Releases all attributes that are explicitly, or implicitly, requested.AttributeReleaseVoter.vote
(Saml2UserAuthentication token, org.opensaml.saml.saml2.core.Attribute attribute) Tells whether this voter thinks that the suppliedAttribute
should be released or not.IncludeAllAttributeReleaseVoter.vote
(Saml2UserAuthentication token, org.opensaml.saml.saml2.core.Attribute attribute) Will always voteAttributeReleaseVote.INCLUDE
.SwedenConnectAttributeReleaseVoter.vote
(Saml2UserAuthentication token, org.opensaml.saml.saml2.core.Attribute attribute) Applies the following rules: If the attribute is "urn:oid:1.2.752.29.4.13" (personalIdentityNumber) and the contents is a Swedish coordination number (as opposed to the civic registration number) we require that the SP has opted in to received coordination numbers. TODO ... -
Uses of Saml2UserAuthentication in se.swedenconnect.spring.saml.idp.audit.data
Modifier and TypeMethodDescriptionSaml2UserAuthenticationInfoAuditData.of
(Saml2UserAuthentication token, boolean signServicePeer) Creates aSaml2UserAuthenticationInfoAuditData
based on the suppliedSaml2UserAuthentication
token. -
Uses of Saml2UserAuthentication in se.swedenconnect.spring.saml.idp.authentication
Modifier and TypeMethodDescriptionorg.opensaml.saml.saml2.core.Assertion
Saml2AssertionBuilder.buildAssertion
(Saml2UserAuthentication userAuthentication) Given aSaml2UserAuthentication
object a SAMLAssertion
is built.void
DelegatingPostAuthenticationProcessor.process
(Saml2UserAuthentication token) Applies post-processing of aSaml2UserAuthentication
token.void
PostAuthenticationProcessor.process
(Saml2UserAuthentication token) Applies post-processing of aSaml2UserAuthentication
token.void
SwedenConnectPostAuthenticationProcessor.process
(Saml2UserAuthentication token) Applies the following checks: If the request is from a Signature Service and the SignMessage has been flagged with "must show" the method asserts that a sign message has been displayed during authentication. TODO: more ... -
Uses of Saml2UserAuthentication in se.swedenconnect.spring.saml.idp.authentication.provider
Modifier and TypeMethodDescriptionprotected Saml2UserAuthentication
AbstractUserAuthenticationProvider.applySso
(Saml2UserAuthenticationInputToken token, List<String> authnContextUris) Applies the rules for re-using authentication, i.e., SSO.Modifier and TypeMethodDescriptionBaseSsoVoter.mayReuse
(Saml2UserAuthentication userAuthn, Saml2UserAuthenticationInputToken token, Collection<String> allowedAuthnContexts) Predicate that tells whether the suppliedAuthentication
object may be used in SSO (according to the voter's logic).PrincipalSelectionSsoVoter.mayReuse
(Saml2UserAuthentication userAuthn, Saml2UserAuthenticationInputToken token, Collection<String> allowedAuthnContexts) Predicate that tells whether the suppliedAuthentication
object may be used in SSO (according to the voter's logic).SignServiceSsoVoter.mayReuse
(Saml2UserAuthentication userAuthn, Saml2UserAuthenticationInputToken token, Collection<String> allowedAuthnContexts) Predicate that tells whether the suppliedAuthentication
object may be used in SSO (according to the voter's logic).SsoVoter.mayReuse
(Saml2UserAuthentication userAuthn, Saml2UserAuthenticationInputToken token, Collection<String> allowedAuthnContexts) Predicate that tells whether the suppliedAuthentication
object may be used in SSO (according to the voter's logic). -
Uses of Saml2UserAuthentication in se.swedenconnect.spring.saml.idp.authentication.provider.external
Modifier and TypeMethodDescriptionUserRedirectAuthenticationProvider.resumeAuthentication
(ResumedAuthenticationToken token) Is invoked when the user has been authenticated outside the SAML IdP Spring Security flow and the user agent has been re-directed back to theUserRedirectAuthenticationProvider.getResumeAuthnPath()
. -
Uses of Saml2UserAuthentication in se.swedenconnect.spring.saml.idp.events
Modifier and TypeMethodDescriptionSaml2PostUserAuthenticationEvent.getUserAuthentication()
Gets theSaml2UserAuthentication
representing the user authentication.Modifier and TypeMethodDescriptionvoid
Saml2IdpEventPublisher.publishUserAuthenticated
(Saml2UserAuthentication authn) Publishes aSaml2PostUserAuthenticationEvent
indicating that anUserAuthenticationProvider
has authenticated the user.ModifierConstructorDescriptionConstructor.