public abstract class STSConfig extends TrustAuthorityConfig
STSConfig
represents the
configuration of a Security Token Service client entity. It extends
TrustAuthorityConfig
.
This class can be extended to define the trust authority config which is WS-Trust protocol based client (STS client) configuration.
Pluggable implementation of this abstract class can choose to store this configuration in desired configuration store. This pluggable implementation class can be configured in client's AMConfig.properties as value of "com.sun.identity.wss.sts.config.plugin" property for STS client configuration.
All the static methods in this class are for the persistent operations.
Modifier and Type | Field and Description |
---|---|
protected String |
attributeNS |
protected String |
dnsClaim |
protected boolean |
includeMemberships |
protected String |
kdcDomain |
protected String |
kdcServer |
protected String |
keyType |
protected String |
mexEndpoint |
protected String |
nameIDMapper |
protected String |
protocolVersion |
protected List<String> |
requestedClaims |
protected Set |
samlAttributes |
protected String |
servicePrincipal |
protected List |
signedElements |
protected String |
stsConfigName |
protected String |
ticketCacheDir |
customAdminToken, DISCOVERY_TRUST_AUTHORITY, encryptionAlgorithm, encryptionStrength, endpoint, isRequestEncrypted, isRequestHeaderEncrypted, isRequestSigned, isResponseEncrypted, isResponseSigned, name, privateKeyAlias, publicKeyAlias, secMech, signingRefType, STS_TRUST_AUTHORITY, type, usercredentials, WSS_DISCOVERY_CONFIG_PLUGIN, WSS_STS_CONFIG_PLUGIN
Constructor and Description |
---|
STSConfig()
Creates a new instance of STSConfig
|
Modifier and Type | Method and Description |
---|---|
String |
getDNSClaim()
Returns the DNS claim name.
|
String |
getKDCDomain()
Returns Kerberos Domain Controller Domain.
|
String |
getKDCServer()
Returns Kerberos Domain Controller Server.
|
String |
getKerberosServicePrincipal()
Returns kerberos service principal.
|
String |
getKerberosTicketCacheDir()
Returns the kerberos ticket cache directory.
|
String |
getKeyType()
Returns the keytype.
|
String |
getMexEndpoint()
Returns STS Mex endpoint.
|
String |
getNameIDMapper()
Returns the NameID mapper class
|
String |
getProtocolVersion()
Returns the protocol version.
|
List |
getRequestedClaims()
Returns the list of requested claims
|
Set |
getSAMLAttributeMapping()
Returns the SAML Attribute Mapping list.
|
String |
getSAMLAttributeNamespace()
Returns SAML attribute namespace.
|
List |
getSignedElements()
Returns the list of signed elements.
|
String |
getSTSConfigName()
Returns STS configuration name.
|
void |
setDNSClaim(String dnsClaim)
Sets the DNS claim name
|
void |
setIncludeMemberships(boolean include)
Sets a flag to include memberships for SAML attribute mapping.
|
void |
setKDCDomain(String domain)
Sets Kerberos Domain Controller Domain.
|
void |
setKDCServer(String kdcServer)
Sets Kerberos Domain Controller Server.
|
void |
setKerberosServicePrincipal(String principal)
Sets kerberos service principal.
|
void |
setKerberosTicketCacheDir(String cacheDir)
Sets kerberos ticket cache directory.
|
void |
setKeyType(String keyType)
Sets the keytype
|
void |
setMexEndpoint(String mexEndpoint)
Sets STS Mex endpoint.
|
void |
setNameIDMapper(String nameIDMapper)
Sets the NameID Mapper class.
|
void |
setProtocolVersion(String version)
Sets the protocol version.
|
void |
setRequestedClaims(List requestedClaims)
Sets the list of requested claims
|
void |
setSAMLAttributeMapping(Set attributeMap)
Sets the list of SAML attribute mappings.
|
void |
setSAMLAttributeNamespace(String attributeNS)
Sets SAML attribute namespace.
|
void |
setSignedElements(List signedElements)
Sets the signed elements
|
void |
setSTSConfigName(String stsConfigName)
Sets STS configuration name.
|
boolean |
shouldIncludeMemberships()
Checks if the memberships should be included in the SAML attribute
mapping.
|
delete, deleteConfig, getConfig, getEncryptionAlgorithm, getEncryptionStrength, getEndpoint, getKeyAlias, getName, getPublicKeyAlias, getSecurityMech, getSigningRefType, getType, getUsers, init, isRequestEncryptEnabled, isRequestHeaderEncryptEnabled, isRequestSignEnabled, isResponseEncryptEnabled, isResponseSignEnabled, saveConfig, setAdminToken, setEncryptionAlgorithm, setEncryptionStrength, setEndpoint, setKeyAlias, setName, setPublicKeyAlias, setRequestEncryptEnabled, setRequestHeaderEncryptEnabled, setRequestSignEnabled, setResponseEncryptEnabled, setResponseSignEnabled, setSecurityMechs, setSigningRefType, setType, setUsers, store
protected String mexEndpoint
protected String stsConfigName
protected String kdcDomain
protected String kdcServer
protected String ticketCacheDir
protected String servicePrincipal
protected String protocolVersion
protected Set samlAttributes
protected boolean includeMemberships
protected String nameIDMapper
protected String attributeNS
protected String keyType
protected String dnsClaim
protected List signedElements
public String getMexEndpoint()
public void setMexEndpoint(String mexEndpoint)
mexEndpoint
- STS Mex endpointpublic String getKeyType()
public void setKeyType(String keyType)
keyType
- public String getSTSConfigName()
public void setSTSConfigName(String stsConfigName)
stsConfigName
- STS configuration namepublic String getKDCDomain()
public void setKDCDomain(String domain)
domain
- Kerberos Domain Controller Domainpublic String getKDCServer()
public void setKDCServer(String kdcServer)
kdcServer
- Kerberos Domain Controller Serverpublic String getKerberosTicketCacheDir()
public void setKerberosTicketCacheDir(String cacheDir)
cacheDir
- kerberos ticket cache dirpublic String getKerberosServicePrincipal()
public void setKerberosServicePrincipal(String principal)
principal
- the kerberos service principal.public String getProtocolVersion()
public void setProtocolVersion(String version)
version
- the protocol version.public Set getSAMLAttributeMapping()
public void setSAMLAttributeMapping(Set attributeMap)
attributeMap
- the list of SAML attribute mappingpublic boolean shouldIncludeMemberships()
public void setIncludeMemberships(boolean include)
include
- boolean flag to indicate if the memberships needs to
be included.public String getNameIDMapper()
public void setNameIDMapper(String nameIDMapper)
nameIDMapper
- NameID Mapper class.public String getSAMLAttributeNamespace()
public void setSAMLAttributeNamespace(String attributeNS)
attributeNS
- SAML attribute namespace.public List getRequestedClaims()
public void setRequestedClaims(List requestedClaims)
requestedClaims
- the list of requested claims.public String getDNSClaim()
public void setDNSClaim(String dnsClaim)
dnsClaim
- the DNS claim namepublic List getSignedElements()
public void setSignedElements(List signedElements)
signedElements
- the signed elements.Copyright © 2010–2025 Open Identity Platform Community. All rights reserved.