Class FSNameMappingHandler


  • public class FSNameMappingHandler
    extends Object
    Handles ID-FF name identifier mapping.
    • Constructor Detail

      • FSNameMappingHandler

        public FSNameMappingHandler​(String entityID,
                                    com.sun.identity.liberty.ws.meta.jaxb.ProviderDescriptorType hostedDesc,
                                    com.sun.identity.federation.jaxb.entityconfig.BaseConfigType hostedConfig,
                                    String metaAlias)
        Construct a FSNameMappingHandler object for a provider.
        Parameters:
        entityID - hosted provider's entity id
        hostedDesc - hosted provider's meta descriptor
        hostedConfig - hosted provider's extended meta config
        metaAlias - hsoted provider's meta alias
    • Method Detail

      • getNameIdentifier

        public NameIdentifier getNameIdentifier​(String userID,
                                                String remoteEntityID,
                                                boolean local)
                                         throws FSAccountMgmtException,
                                                SAMLException
        Returns NameIdentifier of a provider.
        Parameters:
        userID - user id.
        remoteEntityID - the provider id whose NameIdentifier is to be returned.
        local - true if remoteProviderID is a local provider; false otherwise.
        Returns:
        NameIdentifier of an user corresponding to remoteProviderID.
        Throws:
        FSAccountMgmtException
        SAMLException
      • verifyNameIdMappingResponseSignature

        public static boolean verifyNameIdMappingResponseSignature​(Element elt,
                                                                   jakarta.xml.soap.SOAPMessage msg,
                                                                   String realm)
        Verifies signature on name identifier mapping response.
        Parameters:
        elt - DOM element which contains FSNameIdentifierMappingResopnse
        msg - SOAPMessage object which contains signed name identifier mapping response.
        realm - the realm in which the provider resides
        Returns:
        true if the signature is valid; false otherwise.