public class DefaultSAMLRoleParser extends DefaultSubjectRoleParser implements SAMLRoleParser
| Modifier and Type | Field and Description |
|---|---|
static String |
SAML_ROLE_ATTRIBUTENAME_DEFAULT
This configuration tag specifies the default attribute name where the roles are present
The default is "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/role".
|
| Constructor and Description |
|---|
DefaultSAMLRoleParser() |
| Modifier and Type | Method and Description |
|---|---|
String |
getRoleAttributeName() |
boolean |
isUseJaasSubject() |
Set<Principal> |
parseRolesFromAssertion(Principal principal,
Subject subject,
org.apache.wss4j.common.saml.SamlAssertionWrapper assertion)
Return the set of User/Principal roles from the Assertion.
|
void |
setRoleAttributeName(String roleAttributeName)
Set the attribute URI of the SAML AttributeStatement where the role information is stored.
|
void |
setUseJaasSubject(boolean useJaasSubject)
Whether to get roles from the JAAS Subject (if not null) returned from SAML Assertion
Validation or not.
|
getRoleClassifier, getRoleClassifierType, parseRolesFromSubject, setRoleClassifier, setRoleClassifierTypeclone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, waitparseRolesFromSubjectpublic static final String SAML_ROLE_ATTRIBUTENAME_DEFAULT
public Set<Principal> parseRolesFromAssertion(Principal principal, Subject subject, org.apache.wss4j.common.saml.SamlAssertionWrapper assertion)
parseRolesFromAssertion in interface SAMLRoleParserprincipal - the Principal associated with the Assertionsubject - the JAAS Subject associated with a successful validation of the Assertionassertion - The Assertion objectpublic boolean isUseJaasSubject()
public void setUseJaasSubject(boolean useJaasSubject)
useJaasSubject - whether to get roles from the JAAS Subject or notpublic String getRoleAttributeName()
public void setRoleAttributeName(String roleAttributeName)
roleAttributeName - the Attribute URI where role information is storedApache CXF