Populates a decrypter based on settings in the extended metadata or using a default credential when no
encryption credential is specified in the extended metadata.
Based on the settings in the extended metadata either creates a PKIX trust engine with trusted keys specified
in the extended metadata as anchors or (by default) an explicit trust engine using data from the metadata or
from the values overridden in the ExtendedMetadata.
Based on the settings in the extended metadata either creates a PKIX trust engine with trusted keys specified
in the extended metadata as anchors or (by default) an explicit trust engine using data from the metadata or
from the values overridden in the ExtendedMetadata.
This is a hook method enabling subclasses to process additional data from the SAML exchange, like assertions with different confirmations
or additional attributes.
The input context object must have set the properties related to the returned Response, which is validated
and in case no errors are found the SAMLCredential is returned.
Method processes IDP Discovery request, validates it for conformity and either sends a passive response with
default IDP (when isPassive mode is requested) or forwards browser to the IDP selection.
In case request parameter of name "local" is set to true or there is no authenticated user
only local logout will be performed and user will be redirected to the success page.
The filter attempts to generate application metadata (if configured so) and in case the call is made
to the expected URL the metadata value is displayed and no further filters are invoked.