-
local
boolean local
Setting of the value determines whether the entity is deployed locally (hosted on the current installation) or
whether it's an entity deployed elsewhere.
-
alias
String alias
Local alias of the entity used for construction of well-known metadata address and determining target
entity from incoming requests.
-
idpDiscoveryEnabled
boolean idpDiscoveryEnabled
When true IDP discovery will be invoked before SSO. Only valid for local entities.
-
idpDiscoveryURL
String idpDiscoveryURL
URL of the IDP Discovery service user should be redirected to upon request to determine which IDP to use.
Value can override settings in the local SP metadata. Only valid for local entities.
-
idpDiscoveryResponseURL
String idpDiscoveryResponseURL
URL where the discovery service should send back response to our discovery request. Only valid for local
entities.
-
ecpEnabled
boolean ecpEnabled
Indicates whether Enhanced Client/Proxy profile should be used for requests which support it. Only valid for
local entities.
-
securityProfile
String securityProfile
Profile used for trust verification, MetaIOP by default. Only relevant for local entities.
-
sslSecurityProfile
String sslSecurityProfile
Profile used for SSL/TLS trust verification, PKIX by default. Only relevant for local entities.
-
sslHostnameVerification
String sslHostnameVerification
Hostname verifier to use for verification of SSL connections, e.g. for ArtifactResolution.
-
signingKey
String signingKey
Key (stored in the local keystore) used for signing/verifying signature of messages sent/coming from this
entity. For local entities private key must be available, for remote entities only public key is required.
-
signingAlgorithm
String signingAlgorithm
Algorithm used for creation of digital signatures of this entity. At the moment only used for metadata signatures.
Only valid for local entities.
-
signMetadata
boolean signMetadata
Flag indicating whether to sign metadata for this entity. Only valid for local entities.
-
keyInfoGeneratorName
String keyInfoGeneratorName
Name of generator for KeyInfo elements in metadata and signatures. At the moment only used for metadata signatures.
Only valid for local entities.
-
encryptionKey
String encryptionKey
Key (stored in the local keystore) used for encryption/decryption of messages coming/sent from this entity. For local entities
private key must be available, for remote entities only public key is required.
-
tlsKey
String tlsKey
Key used for verification of SSL/TLS connections. For local entities key is included in the generated metadata when specified.
For remote entities key is used to for server authentication of SSL/TLS when specified and when MetaIOP security profile is used.
-
trustedKeys
Set<E> trustedKeys
Keys used as anchors for trust verification when PKIX mode is enabled for the local entity. In case value is null
all keys in the keyStore will be treated as trusted.
-
requireLogoutRequestSigned
boolean requireLogoutRequestSigned
SAML specification mandates that incoming LogoutRequests must be authenticated.
-
requireLogoutResponseSigned
boolean requireLogoutResponseSigned
Flag indicating whether incoming LogoutResposne messages must be authenticated.
-
requireArtifactResolveSigned
boolean requireArtifactResolveSigned
If true received artifactResolve messages will require a signature, sent artifactResolve will be signed.
-
supportUnsolicitedResponse
boolean supportUnsolicitedResponse
Flag indicating whether to support unsolicited responses (IDP-initialized SSO). Only valid for remote
entities.
-
digestMethodAlgorithm
String digestMethodAlgorithm
Algorithm used for creation of digest method of this entity. At the moment only used for metadata signatures.
Only valid for local entities.