Overview  Package   Class  Use  Tree  Deprecated  Index  Help 
Apache CXF API
 PREV CLASS   NEXT CLASS FRAMES    NO FRAMES    
SUMMARY: NESTED | FIELD | CONSTR | METHOD DETAIL: FIELD | CONSTR | METHOD

org.apache.cxf.rs.security.saml.sso
Class SAMLSSOResponseValidator

java.lang.Object
  extended by org.apache.cxf.rs.security.saml.sso.SAMLSSOResponseValidator

public class SAMLSSOResponseValidator
extends Object

Validate a SAML 2.0 Protocol Response according to the Web SSO profile. The Response should be validated by the SAMLProtocolResponseValidator first.

Constructor Summary
SAMLSSOResponseValidator()
           
 
Method Summary
 String getAssertionConsumerURL()
           
 String getClientAddress()
           
 String getIssuerIDP()
           
 String getRequestId()
           
 String getSpIdentifier()
           
 void setAssertionConsumerURL(String assertionConsumerURL)
           
 void setClientAddress(String clientAddress)
           
 void setEnforceAssertionsSigned(boolean enforceAssertionsSigned)
          Enforce that Assertions must be signed if the POST binding was used.
 void setEnforceKnownIssuer(boolean enforceKnownIssuer)
          Enforce that the Issuer of the received Response/Assertion is known.
 void setIssuerIDP(String issuerIDP)
           
 void setReplayCache(TokenReplayCache<String> replayCache)
           
 void setRequestId(String requestId)
           
 void setSpIdentifier(String spIdentifier)
           
 SSOValidatorResponse validateSamlResponse(org.opensaml.saml2.core.Response samlResponse, boolean postBinding)
          Validate a SAML 2 Protocol Response
 
Methods inherited from class java.lang.Object
clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait
 

Constructor Detail

SAMLSSOResponseValidator

public SAMLSSOResponseValidator()
Method Detail

setEnforceAssertionsSigned

public void setEnforceAssertionsSigned(boolean enforceAssertionsSigned)
Enforce that Assertions must be signed if the POST binding was used. The default is true.

setEnforceKnownIssuer

public void setEnforceKnownIssuer(boolean enforceKnownIssuer)
Enforce that the Issuer of the received Response/Assertion is known. The default is true.

validateSamlResponse

public SSOValidatorResponse validateSamlResponse(org.opensaml.saml2.core.Response samlResponse,
                                                 boolean postBinding)
                                          throws org.apache.wss4j.common.ext.WSSecurityException
Validate a SAML 2 Protocol Response

Parameters:
samlResponse -
postBinding -
Returns:
a SSOValidatorResponse object
Throws:
org.apache.wss4j.common.ext.WSSecurityException

getIssuerIDP

public String getIssuerIDP()

setIssuerIDP

public void setIssuerIDP(String issuerIDP)

getAssertionConsumerURL

public String getAssertionConsumerURL()

setAssertionConsumerURL

public void setAssertionConsumerURL(String assertionConsumerURL)

getClientAddress

public String getClientAddress()

setClientAddress

public void setClientAddress(String clientAddress)

getRequestId

public String getRequestId()

setRequestId

public void setRequestId(String requestId)

getSpIdentifier

public String getSpIdentifier()

setSpIdentifier

public void setSpIdentifier(String spIdentifier)

setReplayCache

public void setReplayCache(TokenReplayCache<String> replayCache)
Overview  Package   Class  Use  Tree  Deprecated  Index  Help 
Apache CXF API
 PREV CLASS   NEXT CLASS FRAMES    NO FRAMES    
SUMMARY: NESTED | FIELD | CONSTR | METHOD DETAIL: FIELD | CONSTR | METHOD
Apache CXF