com.sun.identity.wsfederation.plugins

Class DefaultLibrarySPAccountMapper

java.lang.Object

com.sun.identity.wsfederation.plugins.DefaultAccountMapper

com.sun.identity.wsfederation.plugins.DefaultLibrarySPAccountMapper

All Implemented Interfaces:

SPAccountMapper

Direct Known Subclasses:

DefaultADFSPartnerAccountMapper

public class DefaultLibrarySPAccountMapper
extends DefaultAccountMapper
implements SPAccountMapper

This class DefaultLibrarySPAccountMapper is the default implementation of the SPAccountMapper that is used to map the SAML protocol objects to the user accounts. at the ServiceProvider side of WSFederation plugin. Custom implementations may extend from this class to override some of these implementations if they choose to do so.

Field Summary

Fields inherited from class com.sun.identity.wsfederation.plugins.DefaultAccountMapper

bundle, debug, dsProvider, IDP, keyProvider, role, SP

Constructor Summary

Constructors

Constructor and Description
DefaultLibrarySPAccountMapper() Default constructor

Method Summary

Modifier and Type	Method and Description
String	getIdentity(RequestSecurityTokenResponse rstr, String hostEntityID, String realm) Returns the user's disntinguished name or the universal ID for the corresponding SAML Assertion.
protected boolean	isDynamicalOrIgnoredProfile(String realm) Checks if dynamical profile creation or ignore profile is enabled.

Methods inherited from class com.sun.identity.wsfederation.plugins.DefaultAccountMapper

getAttribute, getSearchParameters

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

DefaultLibrarySPAccountMapper

public DefaultLibrarySPAccountMapper()

Default constructor

Method Detail

getIdentity

public String getIdentity(RequestSecurityTokenResponse rstr,
                          String hostEntityID,
                          String realm)
                   throws WSFederationException

Returns the user's disntinguished name or the universal ID for the corresponding SAML Assertion. This method will be invoked by the WS-Federation framework while processing the Assertion and retrieves the identity information. The implementation of this method checks for the user for the corresponding name identifier in the assertion.

Specified by:

getIdentity in interface SPAccountMapper

Parameters:

rstr - Request Security Token Response.

hostEntityID - EntityID of the hosted provider.

realm - realm or the organization name that may be used to find the user information.

Returns:

user's disntinguished name or the universal ID.

Throws:

WSFederationException - if any failure.

isDynamicalOrIgnoredProfile

protected boolean isDynamicalOrIgnoredProfile(String realm)

Checks if dynamical profile creation or ignore profile is enabled.

Parameters:

realm - realm to check the dynamical profile creation attributes.

Returns:

true if dynamical profile creation or ignore profile is enabled, false otherwise.