Overview

Package

Class

Tree

Deprecated

Index

Help

Spring Security SAML

PREV NEXT

FRAMES NO FRAMES

Serialized Form

Package org.springframework.security.providers

Class org.springframework.security.providers.ExpiringUsernameAuthenticationToken extends org.springframework.security.authentication.UsernamePasswordAuthenticationToken implements Serializable

Serialized Fields

tokenExpiration

Date tokenExpiration

Package org.springframework.security.saml

Class org.springframework.security.saml.SAMLAuthenticationToken extends org.springframework.security.authentication.AbstractAuthenticationToken implements Serializable

serialVersionUID: 1L

Serialized Fields

credentials

SAMLMessageContext credentials

SAML context with content to verify

Class org.springframework.security.saml.SAMLCredential extends Object implements Serializable

Serialized Fields

nameID

SAMLObject<T extends org.opensaml.xml.XMLObject> nameID

authenticationAssertion

SAMLObject<T extends org.opensaml.xml.XMLObject> authenticationAssertion

localEntityID

String localEntityID

remoteEntityID

String remoteEntityID

relayState

String relayState

additionalData

Serializable additionalData

attributes

SAMLCollection<T extends org.opensaml.xml.XMLObject> attributes

Collection of attributes received from assertions.

Package org.springframework.security.saml.metadata

Class org.springframework.security.saml.metadata.ExtendedMetadata extends Object implements Serializable

Serialized Fields

local

boolean local

Setting of the value determines whether the entity is deployed locally (hosted on the current installation) or whether it's an entity deployed elsewhere.

alias

String alias

Local alias of the entity used for construction of well-known metadata address and determining target entity from incoming requests.

idpDiscoveryEnabled

boolean idpDiscoveryEnabled

When true IDP discovery will be invoked before SSO. Only valid for local entities.

idpDiscoveryURL

String idpDiscoveryURL

URL of the IDP Discovery service user should be redirected to upon request to determine which IDP to use. Value can override settings in the local SP metadata. Only valid for local entities.

idpDiscoveryResponseURL

String idpDiscoveryResponseURL

URL where should the discovery service send back response to our discovery request. Only valid for local entities.

ecpEnabled

boolean ecpEnabled

Indicates whether Enhanced Client/Proxy profile should be used for requests which support it. Only valid for local entities.

securityProfile

String securityProfile

Profile used for trust verification, MetaIOP by default. Only relevant for local entities.

sslSecurityProfile

String sslSecurityProfile

Profile used for SSL/TLS trust verification, PKIX by default. Only relevant for local entities.

signingKey

String signingKey

Key (stored in the local keystore) used for signing/verifying signature of messages sent/coming from this entity. For local entities private key must be available, for remote entities only public key is required.

encryptionKey

String encryptionKey

Key (stored in the local keystore) used for encryption/decryption of messages coming/sent from this entity. For local entities private key must be available, for remote entities only public key is required.

tlsKey

String tlsKey

Key used for verification of SSL/TLS connections. For local entities key is included in the generated metadata when specified. For remote entities key is used to for server authentication of SSL/TLS when specified and when MetaIOP security profile is used.

trustedKeys

Set<E> trustedKeys

Keys used as anchors for trust verification when PKIX mode is enabled for the local entity. In case no keys are specified all keys in the keyStore will be treated as trusted.

requireLogoutRequestSigned

boolean requireLogoutRequestSigned

SAML specification mandates that incoming LogoutRequests must be authenticated.

requireLogoutResponseSigned

boolean requireLogoutResponseSigned

requireArtifactResolveSigned

boolean requireArtifactResolveSigned

If true received artifactResolve messages will require a signature, sent artifactResolve will be signed.

Package org.springframework.security.saml.parser

Class org.springframework.security.saml.parser.SAMLBase extends Object implements Serializable

Serialized Fields

serializedObject

Serializable serializedObject

Version of the value stored within object transferable during serialization.

hashCode

int hashCode

Hash of the object.

Class org.springframework.security.saml.parser.SAMLCollection extends SAMLBase<T extends org.opensaml.xml.XMLObject,List<T extends org.opensaml.xml.XMLObject>> implements Serializable

Serialization Methods

readObject

private void readObject(ObjectInputStream in)
                 throws IOException,
                        ClassNotFoundException

Deserializes List of XMLObjects from the stream. Parsing of the content is done lazily upon access to the object. The reason for this is the fact that parser pool may not be initialized during system startup and the object may be stored in a serialized session.

Throws:: IOException - error deserializing String to XMLObject; ClassNotFoundException - class not found

writeObject

private void writeObject(ObjectOutputStream out)
                  throws IOException

Custom serialization logic which transform List of XMLObject into List of Strings.

Throws:: IOException - error performing XMLObject serialization

Class org.springframework.security.saml.parser.SAMLObject extends SAMLBase<T extends org.opensaml.xml.XMLObject,T extends org.opensaml.xml.XMLObject> implements Serializable

Serialization Methods

readObject

private void readObject(ObjectInputStream in)
                 throws IOException,
                        ClassNotFoundException

Deserializes XMLObject from the stream. Parsing of the content is done lazily upon access to the object. The reason for this is the fact that parser pool may not be initialized during system startup and the object may be stored in a serialized session.

Throws:: IOException - error deserializing String to XMLObject; ClassNotFoundException - class not found

writeObject

private void writeObject(ObjectOutputStream out)
                  throws IOException

Custom serialization logic which transform XMLObject into String.

Throws:: IOException - error performing XMLObject serialization

Package org.springframework.security.saml.trust

Class org.springframework.security.saml.trust.UntrustedCertificateException extends CertificateException implements Serializable

Serialized Fields

x509Certificates

X509Certificate[] x509Certificates

Untrusted chain.

Package org.springframework.security.saml.websso

Class org.springframework.security.saml.websso.WebSSOProfileOptions extends Object implements Serializable

Serialized Fields

binding

String binding

allowedIDPs

Set<E> allowedIDPs

providerName

String providerName

assertionConsumerIndex

Integer assertionConsumerIndex

nameID

String nameID

allowCreate

Boolean allowCreate

passive

Boolean passive

forceAuthn

Boolean forceAuthn

includeScoping

Boolean includeScoping

proxyCount

Integer proxyCount