Package org.apache.cxf.rs.security.saml.sso

Class SAMLSSOResponseValidator

java.lang.Object
org.apache.cxf.rs.security.saml.sso.SAMLSSOResponseValidator
public class SAMLSSOResponseValidator extends Object
Validate a SAML 2.0 Protocol Response according to the Web SSO profile. The Response should be validated by the SAMLProtocolResponseValidator first.

  • Constructor Details

    • SAMLSSOResponseValidator

      public SAMLSSOResponseValidator()

  • Method Details

    • setEnforceAssertionsSigned

      public void setEnforceAssertionsSigned(boolean enforceAssertionsSigned)
      Enforce that Assertions contained in the Response must be signed (if the Response itself is not signed). The default is true.

    • setEnforceKnownIssuer

      public void setEnforceKnownIssuer(boolean enforceKnownIssuer)
      Enforce that the Issuer of the received Response/Assertion is known. The default is true.

    • setEnforceStrictIssuerMatch

      public void setEnforceStrictIssuerMatch(boolean enforceStrictIssuerMatch)
      Require the Issuer of the received Response/Assertion to match the configured Issuer IDP exactly, rather than allowing a same-origin prefix. The default is false, which keeps backwards compatibility for deployments whose entityID is a prefix of the configured value.

    • validateSamlResponse

      public SSOValidatorResponse validateSamlResponse(org.opensaml.saml.saml2.core.Response samlResponse, boolean postBinding) throws org.apache.wss4j.common.ext.WSSecurityException
      Validate a SAML 2 Protocol Response
      Parameters:
      samlResponse -
      postBinding -
      Returns:
      a SSOValidatorResponse object
      Throws:
      org.apache.wss4j.common.ext.WSSecurityException

    • getIssuerIDP

      public String getIssuerIDP()

    • setIssuerIDP

      public void setIssuerIDP(String issuerIDP)

    • getAssertionConsumerURL

      public String getAssertionConsumerURL()

    • setAssertionConsumerURL

      public void setAssertionConsumerURL(String assertionConsumerURL)

    • getClientAddress

      public String getClientAddress()

    • setClientAddress

      public void setClientAddress(String clientAddress)

    • getRequestId

      public String getRequestId()

    • setRequestId

      public void setRequestId(String requestId)

    • getSpIdentifier

      public String getSpIdentifier()

    • setSpIdentifier

      public void setSpIdentifier(String spIdentifier)

    • setReplayCache

      public void setReplayCache(TokenReplayCache<String> replayCache)

    • isEnforceResponseSigned

      public boolean isEnforceResponseSigned()

    • setEnforceResponseSigned

      public void setEnforceResponseSigned(boolean enforceResponseSigned)
      Enforce whether a SAML Response must be signed.