Index
All Classes and Interfaces|All Packages|Constant Field Values|Serialized Form
$
- $fillValuesFrom(C) - Method in class swiss.trustbroker.saml.dto.CpResponse.CpResponseBuilder
- $fillValuesFrom(C) - Method in class swiss.trustbroker.saml.dto.ResponseStatus.ResponseStatusBuilder
A
- abort(String, String, String) - Method in class swiss.trustbroker.saml.dto.ResponseStatus
-
Abort a SAML exchange (script hook).
- abort(String, String, String, Flow) - Method in class swiss.trustbroker.saml.dto.ResponseStatus
-
Abort a SAML exchange with a message to RP.
- abort(String, Flow) - Method in class swiss.trustbroker.saml.dto.ResponseStatus
-
Abort a SAML exchange with a message to RP.
- ABORTED - Enum constant in enum class swiss.trustbroker.sessioncache.dto.AccessRequestState
- AbstractSamlController - Class in swiss.trustbroker.saml.controller
- AbstractSamlController(TrustBrokerProperties, SamlValidator) - Constructor for class swiss.trustbroker.saml.controller.AbstractSamlController
- accept(OAuth2AuthorizationCodeRequestAuthenticationContext) - Method in class swiss.trustbroker.oidc.CustomRedirectUriValidator
- acceptSubjectConfirmationMethods(String) - Method in class swiss.trustbroker.config.dto.SecurityChecks.SecurityChecksBuilder
-
Acceptable subject confirmation methods.
- ACCESS_CONTROL_ALLOW_PRIVATE_NETWORK - Static variable in class swiss.trustbroker.util.HeaderBuilder
- ACCESS_CONTROL_PRIVATE_NETWORK - Static variable in class swiss.trustbroker.util.HeaderBuilder
- ACCESS_CONTROL_REQUEST_PRIVATE_NETWORK - Static variable in class swiss.trustbroker.util.HeaderBuilder
- ACCESS_REQUEST_ABORT_URL - Static variable in class swiss.trustbroker.util.ApiSupport
- ACCESS_REQUEST_COMPLETE_URL - Static variable in class swiss.trustbroker.util.ApiSupport
- ACCESS_REQUEST_INITIATE_URL - Static variable in class swiss.trustbroker.util.ApiSupport
- ACCESS_REQUEST_TRIGGER_URL - Static variable in class swiss.trustbroker.util.ApiSupport
- ACCESS_REQUEST_URL - Static variable in class swiss.trustbroker.util.ApiSupport
- accessCount(long) - Method in class swiss.trustbroker.sessioncache.dto.Lifecycle.LifecycleBuilder
- AccessFilter - Class in swiss.trustbroker.waf
-
Filter that responds with a 404 for URLs that we do not want to expose the Angular UI
- AccessFilter(TrustBrokerProperties) - Constructor for class swiss.trustbroker.waf.AccessFilter
- accessRequest(AccessRequest) - Method in class swiss.trustbroker.federation.xmlconfig.RelyingParty.RelyingPartyBuilder
-
AccessRequest configuration for this RP.
- accessRequest(AccessRequestSessionState) - Method in class swiss.trustbroker.sessioncache.dto.StateData.StateDataBuilder
- AccessRequest - Class in swiss.trustbroker.federation.xmlconfig
-
This class describes the configuration of the AccessRequest for an RP.
- AccessRequest() - Constructor for class swiss.trustbroker.federation.xmlconfig.AccessRequest
- AccessRequest(Boolean, AuthorizedApplications) - Constructor for class swiss.trustbroker.federation.xmlconfig.AccessRequest
-
Creates a new
AccessRequestinstance. - AccessRequest.AccessRequestBuilder - Class in swiss.trustbroker.federation.xmlconfig
- AccessRequestConfig - Class in swiss.trustbroker.config.dto
-
Access request configuration.
- AccessRequestConfig() - Constructor for class swiss.trustbroker.config.dto.AccessRequestConfig
- AccessRequestConfig(boolean, String, String, String, String, String, String, String, String, int, String, KeystoreProperties, KeystoreProperties, boolean, String, String, String, KeystoreProperties, String, String, List<RegexNameValue>, Map<String, Object>, List<String>) - Constructor for class swiss.trustbroker.config.dto.AccessRequestConfig
-
Creates a new
AccessRequestConfiginstance. - AccessRequestConfig.AccessRequestConfigBuilder - Class in swiss.trustbroker.config.dto
- accessRequestConfigurations(Map<String, Pair<RelyingParty, AuthorizedApplication>>) - Method in class swiss.trustbroker.config.dto.RelyingPartyDefinitions.RelyingPartyDefinitionsBuilder
- AccessRequestSessionState - Class in swiss.trustbroker.sessioncache.dto
- AccessRequestSessionState() - Constructor for class swiss.trustbroker.sessioncache.dto.AccessRequestSessionState
- AccessRequestSessionState(AccessRequestState, String, String, String, Timestamp, Timestamp, Timestamp, String) - Constructor for class swiss.trustbroker.sessioncache.dto.AccessRequestSessionState
- AccessRequestSessionState.AccessRequestSessionStateBuilder - Class in swiss.trustbroker.sessioncache.dto
- AccessRequestState - Enum Class in swiss.trustbroker.sessioncache.dto
- accessTokenTimeToLiveMin(Integer) - Method in class swiss.trustbroker.federation.xmlconfig.OidcSecurityPolicies.OidcSecurityPoliciesBuilder
-
Overrides tokenTimeToLiveMin for the access token.
- AcClass - Class in swiss.trustbroker.federation.xmlconfig
-
Authentication Context Class (ACClass).
- AcClass() - Constructor for class swiss.trustbroker.federation.xmlconfig.AcClass
- AcClass(Integer, Boolean, Boolean, Boolean, Boolean, String) - Constructor for class swiss.trustbroker.federation.xmlconfig.AcClass
-
Creates a new
AcClassinstance. - AcClass.AcClassBuilder - Class in swiss.trustbroker.federation.xmlconfig
- accountSource(AccountSource) - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsParty.ClaimsPartyBuilder
-
The Account Source consumed by the
IdmProvisioningService - AccountSource - Class in swiss.trustbroker.federation.xmlconfig
-
Account Source configuration.
- AccountSource() - Constructor for class swiss.trustbroker.federation.xmlconfig.AccountSource
- AccountSource(String) - Constructor for class swiss.trustbroker.federation.xmlconfig.AccountSource
- AccountSource.AccountSourceBuilder - Class in swiss.trustbroker.federation.xmlconfig
- acNetUrls(List<URI>) - Method in class swiss.trustbroker.federation.xmlconfig.AcWhitelist.AcWhitelistBuilder
- acrValues() - Method in record class swiss.trustbroker.oidc.client.dto.AuthorizationCodeFlowRequest
-
Returns the value of the
acrValuesrecord component. - acrValues(List<String>) - Method in class swiss.trustbroker.oidc.client.dto.AuthorizationCodeFlowRequest.AuthorizationCodeFlowRequestBuilder
- activateRefresh() - Method in class swiss.trustbroker.script.service.ScriptService
- acUrlDisabled() - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsParty
- acUrls(List<String>) - Method in class swiss.trustbroker.federation.xmlconfig.AcWhitelist.AcWhitelistBuilder
-
List of allowed URLs.
- acWhitelist(AcWhitelist) - Method in class swiss.trustbroker.federation.xmlconfig.RelyingParty.RelyingPartyBuilder
-
Assertion consumer service URL authorized to access XTB federation services for this RP.
- AcWhitelist - Class in swiss.trustbroker.federation.xmlconfig
-
Whitelist of Assertion consumer service URLs / OIDC redirect URLs.
- AcWhitelist() - Constructor for class swiss.trustbroker.federation.xmlconfig.AcWhitelist
- AcWhitelist(Boolean, List<String>, List<URI>, List<String>, List<String>, Set<String>, List<String>) - Constructor for class swiss.trustbroker.federation.xmlconfig.AcWhitelist
- AcWhitelist(List<String>) - Constructor for class swiss.trustbroker.federation.xmlconfig.AcWhitelist
- AcWhitelist.AcWhitelistBuilder - Class in swiss.trustbroker.federation.xmlconfig
- adaptClaimsProviderMappings(HrdHttpData, List<? extends HrdClaimsProviderToRelyingPartyMapping>) - Method in class swiss.trustbroker.homerealmdiscovery.service.NoOpHrdService
- add(Session) - Method in class swiss.trustbroker.oidc.session.TomcatSessionManager
- addAttribute(String, String) - Method in class swiss.trustbroker.saml.dto.CpResponse
-
Script hook: Add CP/IDP claim value to existing attribute or create entry.
- addBanner(UiBanner) - Method in class swiss.trustbroker.saml.dto.RpRequest
- addBanner(UiBanner) - Method in class swiss.trustbroker.saml.dto.UiObjects
-
Add banner if not yet present.
- addClaim(String, Object) - Method in class swiss.trustbroker.saml.dto.CpResponse
-
Add claim.
- addClaimToProviderConfiguration(OidcProviderConfiguration.Builder, String, Object) - Static method in class swiss.trustbroker.oidc.OidcConfigurationUtil
- addCompletedAuthnRequest(String) - Method in class swiss.trustbroker.sessioncache.dto.StateData
- addContext(String, String) - Method in class swiss.trustbroker.saml.dto.RpRequest
-
Add internal federation context required during federation.
- addContextClass(String) - Method in class swiss.trustbroker.saml.dto.RpRequest
- addCookie(Cookie) - Method in class swiss.trustbroker.oidc.tx.OidcTxResponseWrapper
- addCorsMappings(CorsRegistry) - Method in class swiss.trustbroker.config.WebConfiguration
- addError(String) - Method in class swiss.trustbroker.federation.xmlconfig.ValidationStatus
- addException(Throwable) - Method in class swiss.trustbroker.federation.xmlconfig.ValidationStatus
- addFeatureCondition(String) - Method in class swiss.trustbroker.saml.dto.ResponseStatus
-
Script hook: Add single feature condition.
- addFeatureCondition(String, String) - Method in class swiss.trustbroker.saml.dto.ResponseStatus
-
Script hook: Add single feature condition with a nullable parameter.
- addHeader(String, String) - Method in class swiss.trustbroker.oidc.tx.OidcTxResponseWrapper
- addInvalidClaimsParty(ClaimsProviderSetup, String, Exception, String) - Static method in class swiss.trustbroker.homerealmdiscovery.util.ClaimsProviderUtil
- addInvalidRelyingParty(RelyingPartySetup, String, Exception, String) - Static method in class swiss.trustbroker.homerealmdiscovery.util.ClaimsProviderUtil
- additionalIdmData(Map<Object, Object>) - Method in class swiss.trustbroker.saml.dto.CpResponse.CpResponseBuilder
-
Additional exchanged between related API implementations.
- addJsonClaim(String, Object) - Method in class swiss.trustbroker.saml.dto.CpResponse
-
Add claim.
- addJsonClaim(String, String, Object) - Method in class swiss.trustbroker.saml.dto.CpResponse
-
Add claim with optional link to parent.
- addListClaimToContext(JwtEncodingContext, String, List<?>) - Static method in class swiss.trustbroker.oidc.OidcConfigurationUtil
- addNamespace(SamlProperties, String, String) - Static method in class swiss.trustbroker.saml.util.SamlStatusCode
- addOptionalClaimToProviderConfiguration(OidcProviderConfiguration.Builder, String, Object) - Static method in class swiss.trustbroker.oidc.OidcConfigurationUtil
- addParsedJsonAsClaim(String, String, String) - Method in class swiss.trustbroker.saml.dto.CpResponse
-
Parse value as JSON and add, with optional parent.
- addProperties(String, String, List<String>) - Method in class swiss.trustbroker.saml.dto.CpResponse
-
Script hook use: Add values to an already available list value or create.
- addProperty(String, String) - Method in class swiss.trustbroker.saml.dto.CpResponse
-
Script hook use: Add value to an already available list value or create.
- addProperty(String, String, String) - Method in class swiss.trustbroker.saml.dto.CpResponse
-
Script hook use: Add value to an already available list value or create.
- addPropertyIfMissing(String, String, String) - Method in class swiss.trustbroker.saml.dto.CpResponse
-
Add property if not yet set.
- addResourceHandlers(ResourceHandlerRegistry) - Method in class swiss.trustbroker.config.WebConfiguration
- ADDRESS - Static variable in class swiss.trustbroker.federation.xmlconfig.Scope
- addSingledValueListAsStringToClaim(JwtEncodingContext, String, List<?>) - Static method in class swiss.trustbroker.oidc.OidcConfigurationUtil
- addSsoParticipant(SsoSessionParticipant) - Method in class swiss.trustbroker.sessioncache.dto.StateData
- addThemeIndicatorIfMissing(HttpServletRequest, HttpServletResponse, TrustBrokerProperties) - Static method in class swiss.trustbroker.gui.GuiSupport
- addTile(UiObject) - Method in class swiss.trustbroker.saml.dto.UiObjects
-
Add CP tile.
- addUiElement(UiObject) - Method in class swiss.trustbroker.saml.dto.RpRequest
- addUserDetail(String, String) - Method in class swiss.trustbroker.saml.dto.CpResponse
-
Script hook: Add value to existing user claim or create entry.
- addUserDetail(String, String, String) - Method in class swiss.trustbroker.saml.dto.CpResponse
-
Script hook: Add value to existing user claim or create entry.
- addUserDetail(String, String, String, String) - Method in class swiss.trustbroker.saml.dto.CpResponse
-
Script hook: Add value or create entry with optional source.
- addUserDetailIfMissing(String, String, String) - Method in class swiss.trustbroker.saml.dto.CpResponse
-
Add user details if not yet set.
- ADFS_ENTRY_PATH - Static variable in class swiss.trustbroker.util.ApiSupport
- ADFS_ENTRY_URL - Static variable in class swiss.trustbroker.util.ApiSupport
- ADFS_ENTRY_URL_TRAILING_SLASH - Static variable in class swiss.trustbroker.util.ApiSupport
- ADFS_PATH - Static variable in class swiss.trustbroker.util.ApiSupport
- ADFS_WS_TRUST_COMPAT_PATH - Static variable in class swiss.trustbroker.util.ApiSupport
- ADFS_WS_TRUST_COMPAT_URL - Static variable in class swiss.trustbroker.util.ApiSupport
- ADFS_WS_TRUST_ENTRY_URL - Static variable in class swiss.trustbroker.util.ApiSupport
- AdminAction - Class in swiss.trustbroker.config.dto
-
Admin action parameters - internal DTO.
- AdminAction() - Constructor for class swiss.trustbroker.config.dto.AdminAction
- AdminAction(String, String) - Constructor for class swiss.trustbroker.config.dto.AdminAction
- ADMINLOGIN - Static variable in class swiss.trustbroker.util.WebSupport
- algorithm(String) - Method in class swiss.trustbroker.config.dto.SecToken.SecTokenBuilder
-
Security token algorithm.
- alias(String) - Method in class swiss.trustbroker.config.dto.WsTrustConfig.WsTrustConfigBuilder
-
Keystore alias.
- alias(String) - Method in class swiss.trustbroker.federation.xmlconfig.SignerKeystore.SignerKeystoreBuilder
-
If the store contains multiple objects and a specific one shall be used.
- alias(String) - Method in class swiss.trustbroker.federation.xmlconfig.SignerTruststore.SignerTruststoreBuilder
-
If the store contains multiple objects and a specific one shall be used.
- ALL_ORIGINS - Static variable in class swiss.trustbroker.util.CorsSupport
- allow(boolean) - Method in enum class swiss.trustbroker.config.dto.AllowPrivateNetworkAccess
-
Allow private network access.
- ALLOW_UNKNOWN_USER - Enum constant in enum class swiss.trustbroker.federation.xmlconfig.StatusPolicy
-
Proceed anyway.
- allowClaimsOverride(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.OidcClaimsSources.OidcClaimsSourcesBuilder
-
Allow overriding claims by sources in the given order.
- allowClaimsOverride(OidcClaimsSource) - Method in class swiss.trustbroker.federation.xmlconfig.OidcClaimsSources
- allowedClientIpRegex(String) - Method in class swiss.trustbroker.config.dto.WsTrustConfig.WsTrustConfigBuilder
-
Regex of client IPs allowed (using
X-Forwarded-ForHTTP header). - allowedClientIps(List<String>) - Method in class swiss.trustbroker.config.dto.Support.SupportBuilder
-
List of IP regexp rules matched against the IP address received from perimeter or socket e.g.
- allowedHeaders(List<String>) - Method in class swiss.trustbroker.config.dto.CorsPolicies.CorsPoliciesBuilder
-
Headers permitted.
- allowedMethods(List<String>) - Method in class swiss.trustbroker.config.dto.CorsPolicies.CorsPoliciesBuilder
-
HTTP methods permitted.
- allowedNetworks(String) - Method in class swiss.trustbroker.config.dto.Support.SupportBuilder
-
Network header if present checked against the configured regexp e.g.
- allowedNetworks(List<String>) - Method in class swiss.trustbroker.config.dto.WsTrustConfig.WsTrustConfigBuilder
-
List of client networks allowed (using
trustbroker.config.network.networkHeaderHTTP header). - allowedOrigins(List<String>) - Method in class swiss.trustbroker.config.dto.CorsPolicies.CorsPoliciesBuilder
-
Origins permitted.
- allowedSignatureAlgorithms(List<String>) - Method in class swiss.trustbroker.config.dto.SecurityChecks.SecurityChecksBuilder
-
List of allowed message signature algorithms.
- allowedSignatureAlgorithms(List<String>) - Method in class swiss.trustbroker.federation.xmlconfig.SecurityPolicies.SecurityPoliciesBuilder
-
List of allowed message signature algorithms.
- allowFormBearerToken(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.OidcSecurityPolicies.OidcSecurityPoliciesBuilder
-
Allow access_token in form body
Default: false - allowPrivateNetwork() - Method in class swiss.trustbroker.util.HeaderBuilder
- allowPrivateNetworkAccess(AllowPrivateNetworkAccess) - Method in class swiss.trustbroker.config.dto.CorsPolicies.CorsPoliciesBuilder
-
Private network access permitted.
- AllowPrivateNetworkAccess - Enum Class in swiss.trustbroker.config.dto
-
Allow private network access.
- allowPublicClientTokenExchange(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.OidcSecurityPolicies.OidcSecurityPoliciesBuilder
-
Allow Token Exchange with Public Client
Default: false - allowSubjectOverride(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.OidcClaimsSources.OidcClaimsSourcesBuilder
-
Allow overriding subject by sources in the given order.
- allowSubjectOverride(OidcClaimsSource) - Method in class swiss.trustbroker.federation.xmlconfig.OidcClaimsSources
- altName(String) - Method in class swiss.trustbroker.config.dto.AttributeProperties.AttributePropertiesBuilder
-
Known external attributes we just document here - used when we cannot use namespaceUri due to semantics.
- altName(String) - Method in class swiss.trustbroker.federation.xmlconfig.Definition.DefinitionBuilder
-
Known external attributes we just document here - used when we cannot use namespaceUri due to semantics.
- ALWAYS - Enum constant in enum class swiss.trustbroker.config.dto.AllowPrivateNetworkAccess
-
Always allow private network access.
- ALWAYS - Enum constant in enum class swiss.trustbroker.config.dto.SsoSessionIdPolicy
-
Generate SSO session ID for SSO and temporary session ID otherwise.
- announcement(AnnouncementRpConfig) - Method in class swiss.trustbroker.federation.xmlconfig.RelyingParty.RelyingPartyBuilder
-
Announcement configuration for this RP.
- AnnouncementConfig - Class in swiss.trustbroker.config.dto
-
Announcement configuration.
- AnnouncementConfig() - Constructor for class swiss.trustbroker.config.dto.AnnouncementConfig
- AnnouncementConfig(boolean, String, String, String, int, String, String, String, List<String>, boolean, Map<String, Object>) - Constructor for class swiss.trustbroker.config.dto.AnnouncementConfig
-
Creates a new
AnnouncementConfiginstance. - AnnouncementConfig.AnnouncementConfigBuilder - Class in swiss.trustbroker.config.dto
- AnnouncementController - Class in swiss.trustbroker.announcement.controller
-
Controller for announcement services.
- AnnouncementController(TrustBrokerProperties, RelyingPartySetupService, AnnouncementService) - Constructor for class swiss.trustbroker.announcement.controller.AnnouncementController
- announcementCookie(CookieProperties) - Method in class swiss.trustbroker.config.dto.GuiProperties.GuiPropertiesBuilder
-
XTB can (via a plugin) support announcements to communicate with the federating user.
- announcementCookie(CookieConfig) - Method in class swiss.trustbroker.homerealmdiscovery.dto.GuiConfig.GuiConfigBuilder
- AnnouncementRpConfig - Class in swiss.trustbroker.federation.xmlconfig
-
This class describes the configuration of announcements for an RP.
- AnnouncementRpConfig() - Constructor for class swiss.trustbroker.federation.xmlconfig.AnnouncementRpConfig
- AnnouncementRpConfig(Boolean, List<String>) - Constructor for class swiss.trustbroker.federation.xmlconfig.AnnouncementRpConfig
-
Creates a new
AnnouncementRpConfiginstance. - AnnouncementRpConfig.AnnouncementRpConfigBuilder - Class in swiss.trustbroker.federation.xmlconfig
- ANNOUNCEMENTS_PAGE - Static variable in class swiss.trustbroker.util.ApiSupport
- ANNOUNCEMENTS_URL - Static variable in class swiss.trustbroker.util.ApiSupport
- announcementUrls(List<String>) - Method in class swiss.trustbroker.federation.xmlconfig.AnnouncementRpConfig.AnnouncementRpConfigBuilder
-
URLs for the announcement.
- ANY - Static variable in class swiss.trustbroker.sso.service.SsoService.SsoCookieNameParams
- anyHeaderMatches(HttpServletRequest, List<RegexNameValue>) - Static method in class swiss.trustbroker.util.WebSupport
- API_CONTEXT - Static variable in class swiss.trustbroker.util.ApiSupport
-
Base URL of APIs, prefix for the following API paths.
- ApiSupport - Class in swiss.trustbroker.util
-
Build application and API URLs in a consistent way with properly encoded parameters.
- ApiSupport(TrustBrokerProperties) - Constructor for class swiss.trustbroker.util.ApiSupport
- AppConfigService - Class in swiss.trustbroker.config
- AppConfigService(ApplicationEventPublisher, ConfigurableEnvironment, TrustBrokerProperties, GitService, RelyingPartyDefinitions, ScriptService, ClientConfigInMemoryRepository, List<IdmQueryService>, MetricsService, XmlConfigStatusService, OidcMetadataCacheService, WebResourceProvider, CredentialService, OidcEncryptionKeystoreService) - Constructor for class swiss.trustbroker.config.AppConfigService
- appContinue(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.Flow.FlowBuilder
-
Show error page including continue to application button (send SAML error on to application).
- AppController - Class in swiss.trustbroker.saml.controller
-
This is the main controller for SAML POST and federation metadata related interaction.
- AppController(RelyingPartyService, TrustBrokerProperties, SamlValidator, RelyingPartySetupService, SsoService, ArtifactResolutionService, AuthenticationService, RedirectOutputService, List<OutputService>) - Constructor for class swiss.trustbroker.saml.controller.AppController
- append(String, Object) - Method in class swiss.trustbroker.audit.service.AuditLogBuilder
- append(String, Object, String) - Method in class swiss.trustbroker.audit.service.AuditLogBuilder
- appendDtoFields(AuditDto) - Method in class swiss.trustbroker.audit.service.AuditLogBuilder
-
append all fields of the AuditDto
- AppErrorViewResolver - Class in swiss.trustbroker.exception
- AppErrorViewResolver(ApiSupport, TrustBrokerProperties) - Constructor for class swiss.trustbroker.exception.AppErrorViewResolver
- appFilter(String) - Method in class swiss.trustbroker.federation.xmlconfig.IdmQuery.IdmQueryBuilder
-
Application as filtering parameter for the IDM.
- ApplicationInitializer - Class in swiss.trustbroker
-
Initialize everything based on the spring container's initialization procedure.
- ApplicationInitializer(RelyingPartyDefinitions, TrustBrokerProperties, ConfigurableEnvironment, AppConfigService, ScriptService, GitService, List<AttributeInitializer>, List<IdmQueryService>, GlobalExceptionHandler, WebResourceProvider, OidcMetadataCacheService) - Constructor for class swiss.trustbroker.ApplicationInitializer
- applicationName(String) - Method in class swiss.trustbroker.audit.dto.AuditDto.AuditDtoBuilder
- applicationName(String) - Method in class swiss.trustbroker.federation.xmlconfig.RelyingParty.RelyingPartyBuilder
-
If the SAML ProviderName or OIDC client_id are wrong or missing, a relying party can be configured with a global ApplicationName used for AccessRequest ProfileSelection or AnnouncementService to select the matching data items.
- applicationName(String) - Method in class swiss.trustbroker.saml.dto.CpResponse.CpResponseBuilder
-
RP/OIDC context sending 'SAML clientId' in ProviderName.
- applicationName(String) - Method in class swiss.trustbroker.saml.dto.RpRequest.RpRequestBuilder
-
Application name e.g.
- applicationName(String) - Method in class swiss.trustbroker.sessioncache.dto.StateData.StateDataBuilder
- applicationNames(List<String>) - Method in class swiss.trustbroker.config.dto.AnnouncementConfig.AnnouncementConfigBuilder
-
A list of application names: Global announcements are shown to all users on every federated login CP related announcements as well, but they can also lead to disabling the HRD tile when the CP 'application' is marked as unavailable.
- ApplicationStart - Class in swiss.trustbroker
-
Initialize everything before starting spring container, especially libraries using statics.
- appliedFrameAncestors(List<String>) - Method in class swiss.trustbroker.oidc.OidcFrameAncestorHandler
- appliedFrameAncestors(List<String>) - Method in interface swiss.trustbroker.util.FrameAncestorHandler
- applies(EncodingParameters) - Method in class swiss.trustbroker.saml.service.SamlOutputService
- applUrl(String) - Method in class swiss.trustbroker.federation.xmlconfig.AuthorizedApplication.AuthorizedApplicationBuilder
-
If configured the value is sent as appUrl instead of sending app=name in the INTERACTIVE AccessRequest.
- applyConstantDefinitionValues(RelyingParty) - Static method in class swiss.trustbroker.mapping.service.ClaimsMapperService
- applyCpDefaults(ClaimsProviderSetup) - Static method in class swiss.trustbroker.util.DefaultUtil
- applyDefaultValues(Object, Set<Object>) - Static method in class swiss.trustbroker.util.DefaultUtil
- applyFinalAttributeMapping(CpResponse, ResponseParameters, String, RelyingParty) - Method in class swiss.trustbroker.mapping.service.ClaimsMapperService
-
Perform mapping of collected attributes before outputting them to the caller: - apply filter by config - apply Definition mappers - apply deduplication
- applyForDirection(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.AcClass
- applyIdmDeduplication(CpResponse) - Method in class swiss.trustbroker.mapping.service.ClaimsMapperService
-
Drop duplicate attributes coming from CP and IDM having the same value with a CP preference.
- applyMappers(Definition, List<T>, String) - Method in class swiss.trustbroker.mapping.service.ClaimsMapperService
-
Apply the mappers of a Definition.
- applyMergePolicy(Map<Definition, List<String>>, Map<Definition, List<String>>, Map<Definition, List<String>>) - Static method in class swiss.trustbroker.mapping.util.AttributeFilterUtil
- applyOverwritePolicy(Map<Definition, List<String>>, Map<Definition, List<String>>, Map<Definition, List<String>>) - Static method in class swiss.trustbroker.mapping.util.AttributeFilterUtil
- applyPenTestScenarioForBackend(OAuth2Authorization) - Method in class swiss.trustbroker.oidc.CustomOAuth2AuthorizationService
- applyProfileSelection(CpResponse, ProfileSelectionResult) - Method in class swiss.trustbroker.mapping.service.ClaimsMapperService
-
Apply profile selection result.
- applyRpDefaults(RelyingPartySetup) - Static method in class swiss.trustbroker.util.DefaultUtil
- applyUnknownUserPolicy(CpResponse, ClaimsParty) - Method in class swiss.trustbroker.saml.service.UnknownUserPolicyService
- appRedirectUrl(String) - Method in class swiss.trustbroker.federation.xmlconfig.Flow.FlowBuilder
-
Redirect to (application-specific) URL instead of showing an error page.
- appUrl(String) - Method in class swiss.trustbroker.federation.xmlconfig.Flow.FlowBuilder
-
Show a link to further information on the error page (general error information on the application or specific to this error code).
- appUrl(String) - Method in class swiss.trustbroker.homerealmdiscovery.dto.SupportInfo.SupportInfoBuilder
- arDurationSecs(Long) - Method in class swiss.trustbroker.audit.dto.AuditDto.AuditDtoBuilder
- arMode(String) - Method in class swiss.trustbroker.audit.dto.AuditDto.AuditDtoBuilder
- ARP_API - Static variable in class swiss.trustbroker.util.ApiSupport
- ARP_URL - Static variable in class swiss.trustbroker.util.ApiSupport
- arResponseId(String) - Method in class swiss.trustbroker.audit.dto.AuditDto.AuditDtoBuilder
- arReturnUrl(String) - Method in class swiss.trustbroker.audit.dto.AuditDto.AuditDtoBuilder
- arState(String) - Method in class swiss.trustbroker.audit.dto.AuditDto.AuditDtoBuilder
- ARTIFACT_ID_SIZE - Static variable in class swiss.trustbroker.sessioncache.dto.ArtifactCacheEntity
- ARTIFACT_RESOLVE - Enum constant in enum class swiss.trustbroker.audit.dto.EventType
- ARTIFACT_RESPONSE - Enum constant in enum class swiss.trustbroker.audit.dto.EventType
- artifactBinding(ArtifactBinding) - Method in class swiss.trustbroker.federation.xmlconfig.Saml.SamlBuilder
-
SAML Artifact Binding configuration
- ArtifactBinding - Class in swiss.trustbroker.federation.xmlconfig
-
Configuration for SAMl Artifact Binding.
- ArtifactBinding() - Constructor for class swiss.trustbroker.federation.xmlconfig.ArtifactBinding
- ArtifactBinding(ArtifactBindingMode, ArtifactBindingMode, String, String) - Constructor for class swiss.trustbroker.federation.xmlconfig.ArtifactBinding
-
Creates a new
ArtifactBindinginstance. - ArtifactBinding.ArtifactBindingBuilder - Class in swiss.trustbroker.federation.xmlconfig
- ArtifactBindingMode - Enum Class in swiss.trustbroker.federation.xmlconfig
-
Modes for SAML Artifact Binding.
- ArtifactCacheEntity - Class in swiss.trustbroker.sessioncache.dto
- ArtifactCacheEntity() - Constructor for class swiss.trustbroker.sessioncache.dto.ArtifactCacheEntity
- ArtifactCacheEntity(String, String, Timestamp) - Constructor for class swiss.trustbroker.sessioncache.dto.ArtifactCacheEntity
- ArtifactCacheRepository - Interface in swiss.trustbroker.sessioncache.repo
- artifactCacheService(ArtifactCacheRepository, TrustBrokerProperties, Clock, MetricsService) - Static method in class swiss.trustbroker.config.TrustBrokerConfiguration
- ArtifactCleanupTask() - Constructor for class swiss.trustbroker.sessioncache.service.ArtifactStorageService.ArtifactCleanupTask
- artifactLifetimeSecs(int) - Method in class swiss.trustbroker.config.dto.ArtifactResolution.ArtifactResolutionBuilder
-
Lifetime of artifacts in cache in seconds.
- artifactReapIntervalSecs(int) - Method in class swiss.trustbroker.config.dto.ArtifactResolution.ArtifactResolutionBuilder
-
Artifact cache reap interval in seconds.
- artifactResolution(ArtifactResolution) - Method in class swiss.trustbroker.config.dto.SamlProperties.SamlPropertiesBuilder
-
SAML Artifact Resolution configuration.
- ArtifactResolution - Class in swiss.trustbroker.config.dto
-
SAML artifact resolution protocol configuration.
- ArtifactResolution() - Constructor for class swiss.trustbroker.config.dto.ArtifactResolution
- ArtifactResolution(String, int, int, int, Boolean, String, KeystoreProperties, KeystoreProperties) - Constructor for class swiss.trustbroker.config.dto.ArtifactResolution
-
Deprecated.Use NetworkConfig.proxyUrl
- ArtifactResolution.ArtifactResolutionBuilder - Class in swiss.trustbroker.config.dto
- artifactResolutionIndex(Integer) - Method in class swiss.trustbroker.federation.xmlconfig.ProtocolEndpoints.ProtocolEndpointsBuilder
-
SAML Artifact Resolution Protocol index.
- artifactResolutionKeystore(SignerKeystore) - Method in class swiss.trustbroker.federation.xmlconfig.Certificates.CertificatesBuilder
-
Deprecated.Use backendKeystore
- artifactResolutionProxyUrl(String) - Method in class swiss.trustbroker.federation.xmlconfig.ProtocolEndpoints.ProtocolEndpointsBuilder
-
Deprecated.Use proxyUrl.
- ArtifactResolutionService - Class in swiss.trustbroker.saml.service
- ArtifactResolutionService(TrustBrokerProperties, ArtifactCacheService, RelyingPartyService, RelyingPartySetupService, AuditService) - Constructor for class swiss.trustbroker.saml.service.ArtifactResolutionService
- artifactResolutionTruststore(SignerTruststore) - Method in class swiss.trustbroker.federation.xmlconfig.Certificates.CertificatesBuilder
-
Deprecated.Use backendTruststore
- artifactResolutionUrl(String) - Method in class swiss.trustbroker.federation.xmlconfig.ProtocolEndpoints.ProtocolEndpointsBuilder
-
SAML Artifact Resolution Protocol URL.
- ArtifactStorageService - Class in swiss.trustbroker.sessioncache.service
-
Minimal implementation with only methods used by OpenSAML StorageServiceSAMLArtifactMap
- ArtifactStorageService(ArtifactCacheRepository, Clock, Duration, MetricsService) - Constructor for class swiss.trustbroker.sessioncache.service.ArtifactStorageService
- ArtifactStorageService.ArtifactCleanupTask - Class in swiss.trustbroker.sessioncache.service
- assertion(Assertion) - Method in class swiss.trustbroker.wstrustclient.dto.WsTrustRstRequest.WsTrustRstRequestBuilder
- AssertionConsumerService - Class in swiss.trustbroker.saml.service
- AssertionConsumerService(TrustBrokerProperties, RelyingPartySetupService, StateCacheService, ScriptService, AuditService, AnnouncementService, HrdService, QoaMappingService) - Constructor for class swiss.trustbroker.saml.service.AssertionConsumerService
- assertionConsumerServiceUrl(String) - Method in class swiss.trustbroker.sessioncache.dto.SsoSessionParticipant.SsoSessionParticipantBuilder
- assertionConsumerServiceUrl(String) - Method in class swiss.trustbroker.sessioncache.dto.StateData.StateDataBuilder
- assertionConsumerUrl() - Method in record class swiss.trustbroker.oidc.client.dto.AuthorizationCodeFlowRequest
-
Returns the value of the
assertionConsumerUrlrecord component. - assertionConsumerUrl(String) - Method in class swiss.trustbroker.audit.dto.AuditDto.AuditDtoBuilder
- assertionConsumerUrl(String) - Method in class swiss.trustbroker.oidc.client.dto.AuthorizationCodeFlowRequest.AuthorizationCodeFlowRequestBuilder
- AssertionValidator - Class in swiss.trustbroker.saml.util
-
Validate (parts of) SAML messages applying our XTB specific business rules to increase security.
- AssertionValidator.ExpectedAssertionValues - Class in swiss.trustbroker.saml.util
- AssertionValidator.ExpectedAssertionValues.ExpectedAssertionValuesBuilder - Class in swiss.trustbroker.saml.util
- AssertionValidator.MessageValidationResult - Class in swiss.trustbroker.saml.util
- AssertionValidator.MessageValidationResult.MessageValidationResultBuilder - Class in swiss.trustbroker.saml.util
- ASSETS_URL - Static variable in class swiss.trustbroker.util.ApiSupport
- AttributeConfig - Class in swiss.trustbroker.config.dto
-
Configuration of attributes.
- AttributeConfig() - Constructor for class swiss.trustbroker.config.dto.AttributeConfig
- AttributeConfig(List<AttributeProperties>) - Constructor for class swiss.trustbroker.config.dto.AttributeConfig
-
Creates a new
AttributeConfiginstance. - AttributeConfig.AttributeConfigBuilder - Class in swiss.trustbroker.config.dto
- attributeDefinitions(List<Definition>) - Method in class swiss.trustbroker.federation.xmlconfig.ConstAttributes.ConstAttributesBuilder
-
List of attributes.
- AttributeFilterUtil - Class in swiss.trustbroker.mapping.util
- AttributeProperties - Class in swiss.trustbroker.config.dto
-
Configuration of individual attributes.
- AttributeProperties() - Constructor for class swiss.trustbroker.config.dto.AttributeProperties
- AttributeProperties(String, String, String, List<String>, String) - Constructor for class swiss.trustbroker.config.dto.AttributeProperties
-
Creates a new
AttributePropertiesinstance. - AttributeProperties.AttributePropertiesBuilder - Class in swiss.trustbroker.config.dto
- attributes(Map<String, Object>) - Method in class swiss.trustbroker.config.dto.AccessRequestConfig.AccessRequestConfigBuilder
-
Custom attributes that might be needed by the implementation.
- attributes(Map<String, Object>) - Method in class swiss.trustbroker.config.dto.AnnouncementConfig.AnnouncementConfigBuilder
-
Custom attributes that might be needed by the implementation.
- attributes(Map<String, Object>) - Method in class swiss.trustbroker.config.dto.IdmConfig.IdmConfigBuilder
-
Custom attributes that might be needed by the implementation.
- attributes(Map<String, Object>) - Method in class swiss.trustbroker.config.dto.ProfileSelectionConfig.ProfileSelectionConfigBuilder
-
Custom attributes that might be needed by the implementation.
- attributes(Map<Definition, List<String>>) - Method in class swiss.trustbroker.saml.dto.CpResponse.CpResponseBuilder
-
The attributes map contains these attributes: CP SAML Response attributes extracted from the message Derived attributes computed in ScriptService BeforeIdm hooks The names in this map are usually fully qualified as represented in the SAML response from the CP.
- attributesSelection(AttributesSelection) - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsParty.ClaimsPartyBuilder
-
The filtering is done when the SAML response is received from the CP.
- attributesSelection(AttributesSelection) - Method in class swiss.trustbroker.federation.xmlconfig.RelyingParty.RelyingPartyBuilder
-
RP side attribute selection.
- AttributesSelection - Class in swiss.trustbroker.federation.xmlconfig
-
Selection of claims returned by CP/IDM.
- AttributesSelection() - Constructor for class swiss.trustbroker.federation.xmlconfig.AttributesSelection
- AttributesSelection(MultiResultPolicy, List<Definition>) - Constructor for class swiss.trustbroker.federation.xmlconfig.AttributesSelection
-
Creates a new
AttributesSelectioninstance. - AttributesSelection.AttributesSelectionBuilder - Class in swiss.trustbroker.federation.xmlconfig
- attrValue(String) - Method in class swiss.trustbroker.federation.xmlconfig.HomeName.HomeNameBuilder
-
Overridden by value.
- audienceNotOnOrAfterSeconds(Integer) - Method in class swiss.trustbroker.federation.xmlconfig.SecurityPolicies.SecurityPoliciesBuilder
-
Overrides the global
notOnOrAfterSecondsfor conditionsnotOnOrAfterif greater than zero. - audiences(Audiences) - Method in class swiss.trustbroker.federation.xmlconfig.OidcClient.OidcClientBuilder
-
OIDC allowed audience in TokenExchange.
- Audiences - Class in swiss.trustbroker.federation.xmlconfig
-
OIDC client audiences.
- Audiences() - Constructor for class swiss.trustbroker.federation.xmlconfig.Audiences
- Audiences(Set<String>) - Constructor for class swiss.trustbroker.federation.xmlconfig.Audiences
-
Creates a new
Audiencesinstance. - Audiences.AudiencesBuilder - Class in swiss.trustbroker.federation.xmlconfig
- audiencesList(Set<String>) - Method in class swiss.trustbroker.federation.xmlconfig.Audiences.AudiencesBuilder
-
List of audiences.
- audienceValiditySeconds(long) - Method in class swiss.trustbroker.saml.dto.ResponseParameters.ResponseParametersBuilder
- AuditConfig - Class in swiss.trustbroker.config.dto
-
Auditing configuration.
- AuditConfig() - Constructor for class swiss.trustbroker.config.dto.AuditConfig
- AuditDto - Class in swiss.trustbroker.audit.dto
-
Represents the data that we can base reports on.
- AuditDto.AttributeSource - Enum Class in swiss.trustbroker.audit.dto
- AuditDto.AuditDtoBuilder - Class in swiss.trustbroker.audit.dto
- AuditDto.ResponseAttributeValue - Class in swiss.trustbroker.audit.dto
- AuditDto.ResponseAttributeValue.ResponseAttributeValueBuilder - Class in swiss.trustbroker.audit.dto
- AuditDto.ResponseAttributeValues - Class in swiss.trustbroker.audit.dto
- AuditLogBuilder - Class in swiss.trustbroker.audit.service
-
Build log entry for audit log in expected format:
key=value[,key=value ...]. - AuditLogBuilder(AuditLogFilter) - Constructor for class swiss.trustbroker.audit.service.AuditLogBuilder
- AuditLogBuilder(AuditLogFilter, String) - Constructor for class swiss.trustbroker.audit.service.AuditLogBuilder
- AuditLogFilter - Interface in swiss.trustbroker.audit.service
-
Filtering of audit data.
- AuditLogger - Interface in swiss.trustbroker.audit.service
-
Interface for audit logging.
- auditLogoutRequestFromRp(HttpServletRequest, LogoutRequest, StateData, RelyingParty, OidcAuditData) - Method in class swiss.trustbroker.sso.service.SsoService
- AuditMapper - Class in swiss.trustbroker.audit.service
-
Maps DTOs for auditing.
- AuditMapper(TrustBrokerProperties) - Constructor for class swiss.trustbroker.audit.service.AuditMapper
- AuditService - Class in swiss.trustbroker.audit.service
- AuditService(List<AuditLogger>, MetricsService) - Constructor for class swiss.trustbroker.audit.service.AuditService
- auditTokenClaims(String, JwtEncodingContext, String, String, String, TrustBrokerProperties, TomcatSession, HttpServletRequest) - Method in class swiss.trustbroker.oidc.OidcAuditService
- auditTokenRequest(HttpServletRequest, TrustBrokerProperties) - Method in class swiss.trustbroker.oidc.OidcAuditService
- authenticate(Authentication) - Method in class swiss.trustbroker.oidc.CustomOAuth2TokenExchangeAuthenticationProvider
- authenticate(Authentication) - Method in class swiss.trustbroker.oidc.CustomTokenIntrospectionAuthenticationProvider
- authenticate(Authentication) - Method in class swiss.trustbroker.oidc.CustomTokenRevocationAuthenticationProvider
- authenticate(Authentication) - Method in class swiss.trustbroker.oidc.CustomUserInfoAuthenticationProvider
- authenticate(Authentication) - Method in class swiss.trustbroker.oidc.opensaml5.OpenSaml5AuthenticationProvider
- authenticate(Authentication) - Method in class swiss.trustbroker.oidc.pkce.PublicClientRefreshTokenAuthenticationProvider
- authenticationMethods(ClientAuthenticationMethods) - Method in class swiss.trustbroker.oidc.client.dto.OpenIdProviderConfiguration.OpenIdProviderConfigurationBuilder
- AuthenticationService - Class in swiss.trustbroker.saml.service
- AuthenticationService(AssertionConsumerService, RelyingPartyService, ClaimsProviderService, RelyingPartySetupService, ApiSupport, AnnouncementService, SsoService, TrustBrokerProperties, SkinnyHrdService) - Constructor for class swiss.trustbroker.saml.service.AuthenticationService
- authLevel(String) - Method in class swiss.trustbroker.audit.dto.AuditDto.AuditDtoBuilder
- authLevel(String) - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsParty.ClaimsPartyBuilder
-
Configure what QoA the CP can deliver per default, e.g.
- authLevel(String) - Method in class swiss.trustbroker.saml.dto.CpResponse.CpResponseBuilder
-
Declared QoA CP side.
- AUTHN_REQUEST - Enum constant in enum class swiss.trustbroker.audit.dto.EventType
- AuthnRequestContext(HttpServletRequest, RelyingPartyRegistration, AuthnRequest) - Constructor for class swiss.trustbroker.oidc.opensaml5.OpenSaml5AuthenticationRequestResolver.AuthnRequestContext
- authnRequestIssuerId(String) - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsParty.ClaimsPartyBuilder
-
Override of the global issuer for this CP.
- authnStatementInstant(Instant) - Method in class swiss.trustbroker.saml.dto.ResponseParameters.ResponseParametersBuilder
- AUTHORIZATION_CODE - Enum constant in enum class swiss.trustbroker.federation.xmlconfig.AuthorizationGrantType
- AuthorizationCodeFlowRequest - Record Class in swiss.trustbroker.oidc.client.dto
-
Holds information on an OIDC Authorization Code Flow Request for auditing.
- AuthorizationCodeFlowRequest(String, List<String>, List<String>, Boolean, String, String, String) - Constructor for record class swiss.trustbroker.oidc.client.dto.AuthorizationCodeFlowRequest
-
Creates an instance of a
AuthorizationCodeFlowRequestrecord class. - AuthorizationCodeFlowRequest.AuthorizationCodeFlowRequestBuilder - Class in swiss.trustbroker.oidc.client.dto
- AuthorizationCodeFlowService - Class in swiss.trustbroker.oidc.client.service
-
OIDC client for Authorization Code Flow.
- AuthorizationCodeFlowService(ApiSupport, OidcMetadataCacheService, OidcTokenService, OidcUserinfoService, JwtClaimsService, OidcClaimValidatorService, TrustBrokerProperties) - Constructor for class swiss.trustbroker.oidc.client.service.AuthorizationCodeFlowService
- authorizationCodeResponseQuery(HttpServletRequest, HttpServletResponse, String, String, String, String, String, String) - Method in class swiss.trustbroker.oidc.client.controller.OidcClientController
- authorizationCodeTimeToLiveMin(Integer) - Method in class swiss.trustbroker.federation.xmlconfig.OidcSecurityPolicies.OidcSecurityPoliciesBuilder
-
Overrides tokenTimeToLiveMin for the authorization code.
- authorizationEndpoint(URI) - Method in class swiss.trustbroker.oidc.client.dto.OpenIdProviderConfiguration.OpenIdProviderConfigurationBuilder
- AuthorizationGrantType - Enum Class in swiss.trustbroker.federation.xmlconfig
-
OIDC authorization grant types.
- authorizationGrantTypes(AuthorizationGrantTypes) - Method in class swiss.trustbroker.federation.xmlconfig.OidcClient.OidcClientBuilder
-
Authorization grant types to be allowed.
- AuthorizationGrantTypes - Class in swiss.trustbroker.federation.xmlconfig
-
OIDC authorization grant types.
- AuthorizationGrantTypes() - Constructor for class swiss.trustbroker.federation.xmlconfig.AuthorizationGrantTypes
- AuthorizationGrantTypes(List<AuthorizationGrantType>) - Constructor for class swiss.trustbroker.federation.xmlconfig.AuthorizationGrantTypes
-
Creates a new
AuthorizationGrantTypesinstance. - AuthorizationGrantTypes.AuthorizationGrantTypesBuilder - Class in swiss.trustbroker.federation.xmlconfig
- AuthorizationPrincipalModule - Class in swiss.trustbroker.oidc.jackson
- AuthorizationPrincipalModule() - Constructor for class swiss.trustbroker.oidc.jackson.AuthorizationPrincipalModule
- authorizationServerSecurityFilterChain(HttpSecurity, OAuth2AuthorizationService, JwtDecoder, JWKSource<SecurityContext>, CustomOAuth2AuthorizationService, OAuth2TokenGenerator<OAuth2Token>) - Method in class swiss.trustbroker.oidc.OidcServerConfiguration
- authorizationServerSettings() - Method in class swiss.trustbroker.oidc.OidcServerConfiguration
- authorizationService(JdbcTemplate, RegisteredClientRepository, TrustBrokerProperties, GlobalExceptionHandler, Clock, MetricsService) - Method in class swiss.trustbroker.oidc.OidcServerConfiguration
- authorizationServiceDev() - Method in class swiss.trustbroker.oidc.OidcServerConfiguration
- AuthorizedApplication - Class in swiss.trustbroker.federation.xmlconfig
-
This class describes the configuration of an application to be authorized by AccessRequest.
- AuthorizedApplication() - Constructor for class swiss.trustbroker.federation.xmlconfig.AuthorizedApplication
- AuthorizedApplication(String, String, String, String, Integer, String, Boolean, String, String, String, String, String, String, Boolean, String) - Constructor for class swiss.trustbroker.federation.xmlconfig.AuthorizedApplication
-
Creates a new
AuthorizedApplicationinstance. - AuthorizedApplication.AuthorizedApplicationBuilder - Class in swiss.trustbroker.federation.xmlconfig
- authorizedApplicationList(List<AuthorizedApplication>) - Method in class swiss.trustbroker.federation.xmlconfig.AuthorizedApplications.AuthorizedApplicationsBuilder
-
List of Authorized Applications.
- authorizedApplications(AuthorizedApplications) - Method in class swiss.trustbroker.federation.xmlconfig.AccessRequest.AccessRequestBuilder
-
Authorized applications for the AccessRequest.
- AuthorizedApplications - Class in swiss.trustbroker.federation.xmlconfig
-
Describes Authorized Applications for AccessRequest.
- AuthorizedApplications() - Constructor for class swiss.trustbroker.federation.xmlconfig.AuthorizedApplications
- AuthorizedApplications(List<AuthorizedApplication>) - Constructor for class swiss.trustbroker.federation.xmlconfig.AuthorizedApplications
-
Creates a new
AuthorizedApplicationsinstance. - AuthorizedApplications.AuthorizedApplicationsBuilder - Class in swiss.trustbroker.federation.xmlconfig
- authStateInstant(String) - Method in class swiss.trustbroker.saml.dto.CpResponse.CpResponseBuilder
-
Issuing instant of authentication statement.
B
- BACKDROP - Enum constant in enum class swiss.trustbroker.config.dto.GuiFeatures
-
Enable backdrop component.
- backendConnectTimeoutSec(int) - Method in class swiss.trustbroker.config.dto.NetworkConfig.NetworkConfigBuilder
-
Backend service connect timeout in seconds.
- backendKeystore(SignerKeystore) - Method in class swiss.trustbroker.federation.xmlconfig.Certificates.CertificatesBuilder
-
Keystore for backend connections (via SAML the artifact resolution or OIDC metadata protocol).
- backendTruststore(SignerTruststore) - Method in class swiss.trustbroker.federation.xmlconfig.Certificates.CertificatesBuilder
-
Truststore for backend connections (via SAML the artifact resolution or OIDC metadata protocol).
- backToHrd(String) - Method in class swiss.trustbroker.homerealmdiscovery.controller.HrdController
- banner(String) - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsProvider.ClaimsProviderBuilder
-
Show this banner above the HRD selection area if tile is enabled.
- Banner - Class in swiss.trustbroker.config.dto
-
Specifies optional banner displayed on top of the screen.
- Banner() - Constructor for class swiss.trustbroker.config.dto.Banner
- Banner(String, Boolean, Integer, Boolean, String, List<String>) - Constructor for class swiss.trustbroker.config.dto.Banner
-
Creates a new
Bannerinstance. - Banner.BannerBuilder - Class in swiss.trustbroker.config.dto
- banners(List<Banner>) - Method in class swiss.trustbroker.config.dto.GuiProperties.GuiPropertiesBuilder
-
Banners.
- banners(List<UiBanner>) - Method in class swiss.trustbroker.saml.dto.UiObjects.UiObjectsBuilder
-
Banners.
- base(String) - Method in class swiss.trustbroker.federation.xmlconfig.RelyingParty.RelyingPartyBuilder
-
Base profile.
- BaseAuditLogger - Class in swiss.trustbroker.audit.service
-
Base class of loggers that perrform the actual logging.
- BaseAuditLogger() - Constructor for class swiss.trustbroker.audit.service.BaseAuditLogger
- BEARER_SUBJECT_CONFIRMATION - Static variable in class swiss.trustbroker.config.dto.SecurityChecks
- begin(HttpServletRequest, HttpServletResponse) - Static method in class swiss.trustbroker.oidc.session.HttpExchangeSupport
- BETTER - Enum constant in enum class swiss.trustbroker.federation.xmlconfig.QoaComparison
- billingId(String) - Method in class swiss.trustbroker.audit.dto.AuditDto.AuditDtoBuilder
- billingId(String) - Method in class swiss.trustbroker.federation.xmlconfig.RelyingParty.RelyingPartyBuilder
-
We introduce the billing field, so we can start make some trials adding it to the config.
- binding(SamlBinding) - Method in class swiss.trustbroker.federation.xmlconfig.SloResponse.SloResponseBuilder
-
The protocol binding for which this entry applies.
- bindings(List<String>) - Method in class swiss.trustbroker.config.dto.SamlProperties.SamlPropertiesBuilder
-
List of exposed SAML protocols.
- bindings(List<String>) - Method in class swiss.trustbroker.config.dto.WsTrustConfig.WsTrustConfigBuilder
-
List of exposed WS-Trust bindings.
- BLOCK - Enum constant in enum class swiss.trustbroker.federation.xmlconfig.StatusPolicy
-
Throw an exception, leading to the standard error page.
- BLOCK_EXCEPTION - Enum constant in enum class swiss.trustbroker.federation.xmlconfig.StatusPolicy
-
Display 'unknownuser' error page with text and instructions and a button continue to application.
- BLOCK_RESPONDER - Enum constant in enum class swiss.trustbroker.federation.xmlconfig.StatusPolicy
-
Send a SAML responder state UnknownPrincipal.
- BLOCK_UNKNOWN_USER - Enum constant in enum class swiss.trustbroker.federation.xmlconfig.StatusPolicy
-
Display 'unknownuser' error page with text and instructions.
- BOOLEAN - Enum constant in enum class swiss.trustbroker.federation.xmlconfig.ClaimsMapper
- build() - Method in class swiss.trustbroker.audit.dto.AuditDto.AuditDtoBuilder
- build() - Method in class swiss.trustbroker.audit.dto.AuditDto.ResponseAttributeValue.ResponseAttributeValueBuilder
- build() - Method in class swiss.trustbroker.audit.dto.OidcAuditData.OidcAuditDataBuilder
- build() - Method in class swiss.trustbroker.audit.service.AuditLogBuilder
- build() - Method in class swiss.trustbroker.audit.service.AuditMapper
- build() - Method in class swiss.trustbroker.config.dto.AccessRequestConfig.AccessRequestConfigBuilder
- build() - Method in class swiss.trustbroker.config.dto.AnnouncementConfig.AnnouncementConfigBuilder
- build() - Method in class swiss.trustbroker.config.dto.ArtifactResolution.ArtifactResolutionBuilder
- build() - Method in class swiss.trustbroker.config.dto.AttributeConfig.AttributeConfigBuilder
- build() - Method in class swiss.trustbroker.config.dto.AttributeProperties.AttributePropertiesBuilder
- build() - Method in class swiss.trustbroker.config.dto.Banner.BannerBuilder
- build() - Method in class swiss.trustbroker.config.dto.ContentSecurityPolicies.ContentSecurityPoliciesBuilder
- build() - Method in class swiss.trustbroker.config.dto.CookieProperties.CookiePropertiesBuilder
- build() - Method in class swiss.trustbroker.config.dto.CorsPolicies.CorsPoliciesBuilder
- build() - Method in class swiss.trustbroker.config.dto.FrameOptionsPolicies.FrameOptionsPoliciesBuilder
- build() - Method in class swiss.trustbroker.config.dto.GuiProperties.GuiPropertiesBuilder
- build() - Method in class swiss.trustbroker.config.dto.IdmConfig.IdmConfigBuilder
- build() - Method in class swiss.trustbroker.config.dto.MonitoringConfig.MonitoringConfigBuilder
- build() - Method in class swiss.trustbroker.config.dto.NetworkConfig.NetworkConfigBuilder
- build() - Method in class swiss.trustbroker.config.dto.OidcIdpCredential.OidcIdpCredentialBuilder
- build() - Method in class swiss.trustbroker.config.dto.ProfileSelectionConfig.ProfileSelectionConfigBuilder
- build() - Method in class swiss.trustbroker.config.dto.QualityOfAuthenticationConfig.QualityOfAuthenticationConfigBuilder
- build() - Method in class swiss.trustbroker.config.dto.RelyingPartyDefinitions.RelyingPartyDefinitionsBuilder
- build() - Method in class swiss.trustbroker.config.dto.SamlNamespace.SamlNamespaceBuilder
- build() - Method in class swiss.trustbroker.config.dto.SamlProperties.SamlPropertiesBuilder
- build() - Method in class swiss.trustbroker.config.dto.SecToken.SecTokenBuilder
- build() - Method in class swiss.trustbroker.config.dto.SecurityChecks.SecurityChecksBuilder
- build() - Method in class swiss.trustbroker.config.dto.SsoConfig.SsoConfigBuilder
- build() - Method in class swiss.trustbroker.config.dto.StateCacheProperties.StateCachePropertiesBuilder
- build() - Method in class swiss.trustbroker.config.dto.Support.SupportBuilder
- build() - Method in class swiss.trustbroker.config.dto.TechUserProperties.TechUserPropertiesBuilder
- build() - Method in class swiss.trustbroker.config.dto.WsFedConfig.WsFedConfigBuilder
- build() - Method in class swiss.trustbroker.config.dto.WsTrustConfig.WsTrustConfigBuilder
- build() - Method in class swiss.trustbroker.federation.dto.ConfigElementStatus.ConfigElementStatusBuilder
- build() - Method in class swiss.trustbroker.federation.dto.ConfigStatusData.ConfigStatusDataBuilder
- build() - Method in class swiss.trustbroker.federation.xmlconfig.AccessRequest.AccessRequestBuilder
- build() - Method in class swiss.trustbroker.federation.xmlconfig.AcClass.AcClassBuilder
- build() - Method in class swiss.trustbroker.federation.xmlconfig.AccountSource.AccountSourceBuilder
- build() - Method in class swiss.trustbroker.federation.xmlconfig.AcWhitelist.AcWhitelistBuilder
- build() - Method in class swiss.trustbroker.federation.xmlconfig.AnnouncementRpConfig.AnnouncementRpConfigBuilder
- build() - Method in class swiss.trustbroker.federation.xmlconfig.ArtifactBinding.ArtifactBindingBuilder
- build() - Method in class swiss.trustbroker.federation.xmlconfig.AttributesSelection.AttributesSelectionBuilder
- build() - Method in class swiss.trustbroker.federation.xmlconfig.Audiences.AudiencesBuilder
- build() - Method in class swiss.trustbroker.federation.xmlconfig.AuthorizationGrantTypes.AuthorizationGrantTypesBuilder
- build() - Method in class swiss.trustbroker.federation.xmlconfig.AuthorizedApplication.AuthorizedApplicationBuilder
- build() - Method in class swiss.trustbroker.federation.xmlconfig.AuthorizedApplications.AuthorizedApplicationsBuilder
- build() - Method in class swiss.trustbroker.federation.xmlconfig.Certificates.CertificatesBuilder
- build() - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsParty.ClaimsPartyBuilder
- build() - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsProvider.ClaimsProviderBuilder
- build() - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsProviderDefinitions.ClaimsProviderDefinitionsBuilder
- build() - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsProviderMappings.ClaimsProviderMappingsBuilder
- build() - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsProviderSetup.ClaimsProviderSetupBuilder
- build() - Method in class swiss.trustbroker.federation.xmlconfig.ClientAuthenticationMethods.ClientAuthenticationMethodsBuilder
- build() - Method in class swiss.trustbroker.federation.xmlconfig.ConstAttributes.ConstAttributesBuilder
- build() - Method in class swiss.trustbroker.federation.xmlconfig.CounterParty.CounterPartyBuilder
- build() - Method in class swiss.trustbroker.federation.xmlconfig.Definition.DefinitionBuilder
- build() - Method in class swiss.trustbroker.federation.xmlconfig.Encryption.EncryptionBuilder
- build() - Method in class swiss.trustbroker.federation.xmlconfig.Flow.FlowBuilder
- build() - Method in class swiss.trustbroker.federation.xmlconfig.FlowPolicies.FlowPoliciesBuilder
- build() - Method in class swiss.trustbroker.federation.xmlconfig.HomeName.HomeNameBuilder
- build() - Method in class swiss.trustbroker.federation.xmlconfig.IdmLookup.IdmLookupBuilder
- build() - Method in class swiss.trustbroker.federation.xmlconfig.IdmQuery.IdmQueryBuilder
- build() - Method in class swiss.trustbroker.federation.xmlconfig.Oidc.OidcBuilder
- build() - Method in class swiss.trustbroker.federation.xmlconfig.OidcClaimsSources.OidcClaimsSourcesBuilder
- build() - Method in class swiss.trustbroker.federation.xmlconfig.OidcClient.OidcClientBuilder
- build() - Method in class swiss.trustbroker.federation.xmlconfig.OidcSecurityPolicies.OidcSecurityPoliciesBuilder
- build() - Method in class swiss.trustbroker.federation.xmlconfig.ProfileSelection.ProfileSelectionBuilder
- build() - Method in class swiss.trustbroker.federation.xmlconfig.ProtocolEndpoints.ProtocolEndpointsBuilder
- build() - Method in class swiss.trustbroker.federation.xmlconfig.Provisioning.ProvisioningBuilder
- build() - Method in class swiss.trustbroker.federation.xmlconfig.Qoa.QoaBuilder
- build() - Method in class swiss.trustbroker.federation.xmlconfig.RelyingParty.RelyingPartyBuilder
- build() - Method in class swiss.trustbroker.federation.xmlconfig.RelyingPartySetup.RelyingPartySetupBuilder
- build() - Method in class swiss.trustbroker.federation.xmlconfig.Resources.ResourcesBuilder
- build() - Method in class swiss.trustbroker.federation.xmlconfig.Saml.SamlBuilder
- build() - Method in class swiss.trustbroker.federation.xmlconfig.Scopes.ScopesBuilder
- build() - Method in class swiss.trustbroker.federation.xmlconfig.Script.ScriptBuilder
- build() - Method in class swiss.trustbroker.federation.xmlconfig.Scripts.ScriptsBuilder
- build() - Method in class swiss.trustbroker.federation.xmlconfig.SecurityPolicies.SecurityPoliciesBuilder
- build() - Method in class swiss.trustbroker.federation.xmlconfig.Signature.SignatureBuilder
- build() - Method in class swiss.trustbroker.federation.xmlconfig.SignerKeystore.SignerKeystoreBuilder
- build() - Method in class swiss.trustbroker.federation.xmlconfig.SignerStore.SignerStoreBuilder
- build() - Method in class swiss.trustbroker.federation.xmlconfig.SignerTruststore.SignerTruststoreBuilder
- build() - Method in class swiss.trustbroker.federation.xmlconfig.SloResponse.SloResponseBuilder
- build() - Method in class swiss.trustbroker.federation.xmlconfig.Sso.SsoBuilder
- build() - Method in class swiss.trustbroker.federation.xmlconfig.SsoGroup.SsoGroupBuilder
- build() - Method in class swiss.trustbroker.federation.xmlconfig.SsoGroupSetup.SsoGroupSetupBuilder
- build() - Method in class swiss.trustbroker.federation.xmlconfig.SubjectName.SubjectNameBuilder
- build() - Method in class swiss.trustbroker.federation.xmlconfig.SubjectNameMappings.SubjectNameMappingsBuilder
- build() - Method in class swiss.trustbroker.federation.xmlconfig.WsTrust.WsTrustBuilder
- build() - Method in class swiss.trustbroker.homerealmdiscovery.dto.CookieConfig.CookieConfigBuilder
- build() - Method in class swiss.trustbroker.homerealmdiscovery.dto.GuiConfig.GuiConfigBuilder
- build() - Method in class swiss.trustbroker.homerealmdiscovery.dto.SupportInfo.SupportInfoBuilder
- build() - Method in class swiss.trustbroker.monitoring.dto.MonitoringResponse.MonitoringResponseBuilder
- build() - Method in class swiss.trustbroker.oidc.client.dto.AuthorizationCodeFlowRequest.AuthorizationCodeFlowRequestBuilder
- build() - Method in class swiss.trustbroker.oidc.client.dto.OpenIdProviderConfiguration.OpenIdProviderConfigurationBuilder
- build() - Method in class swiss.trustbroker.oidc.OidcEncryptionKeystoreService.EncryptionParams.EncryptionParamsBuilder
- build() - Method in class swiss.trustbroker.saml.dto.CpResponse.CpResponseBuilder
- build() - Method in class swiss.trustbroker.saml.dto.ResponseData.ResponseDataBuilder
- build() - Method in class swiss.trustbroker.saml.dto.ResponseParameters.ResponseParametersBuilder
- build() - Method in class swiss.trustbroker.saml.dto.ResponseStatus.ResponseStatusBuilder
- build() - Method in class swiss.trustbroker.saml.dto.RpRequest.RpRequestBuilder
- build() - Method in class swiss.trustbroker.saml.dto.SsoParticipant.SsoParticipantBuilder
- build() - Method in class swiss.trustbroker.saml.dto.SsoParticipants.SsoParticipantsBuilder
- build() - Method in class swiss.trustbroker.saml.dto.UiBanner.UiBannerBuilder
- build() - Method in class swiss.trustbroker.saml.dto.UiObject.UiObjectBuilder
- build() - Method in class swiss.trustbroker.saml.dto.UiObjects.UiObjectsBuilder
- build() - Method in class swiss.trustbroker.saml.util.AssertionValidator.ExpectedAssertionValues.ExpectedAssertionValuesBuilder
- build() - Method in class swiss.trustbroker.saml.util.AssertionValidator.MessageValidationResult.MessageValidationResultBuilder
- build() - Method in class swiss.trustbroker.sessioncache.dto.AccessRequestSessionState.AccessRequestSessionStateBuilder
- build() - Method in class swiss.trustbroker.sessioncache.dto.Lifecycle.LifecycleBuilder
- build() - Method in class swiss.trustbroker.sessioncache.dto.SsoSessionParticipant.SsoSessionParticipantBuilder
- build() - Method in class swiss.trustbroker.sessioncache.dto.SsoState.SsoStateBuilder
- build() - Method in class swiss.trustbroker.sessioncache.dto.StateData.StateDataBuilder
- build() - Method in class swiss.trustbroker.sso.service.SsoService.SloState.SloStateBuilder
- build() - Method in class swiss.trustbroker.wstrustclient.dto.WsTrustRstRequest.WsTrustRstRequestBuilder
- buildClaimSource(ClaimSource, String) - Static method in class swiss.trustbroker.saml.util.ClaimSourceUtil
- buildClaimSource(ClaimSource, ClaimSource) - Static method in class swiss.trustbroker.saml.util.ClaimSourceUtil
- buildConfig(GuiProperties) - Static method in class swiss.trustbroker.gui.GuiSupport
- builder() - Static method in class swiss.trustbroker.audit.dto.AuditDto
- builder() - Static method in class swiss.trustbroker.audit.dto.AuditDto.ResponseAttributeValue
- builder() - Static method in class swiss.trustbroker.audit.dto.OidcAuditData
- builder() - Static method in class swiss.trustbroker.config.dto.AccessRequestConfig
- builder() - Static method in class swiss.trustbroker.config.dto.AnnouncementConfig
- builder() - Static method in class swiss.trustbroker.config.dto.ArtifactResolution
- builder() - Static method in class swiss.trustbroker.config.dto.AttributeConfig
- builder() - Static method in class swiss.trustbroker.config.dto.AttributeProperties
- builder() - Static method in class swiss.trustbroker.config.dto.Banner
- builder() - Static method in class swiss.trustbroker.config.dto.ContentSecurityPolicies
- builder() - Static method in class swiss.trustbroker.config.dto.CookieProperties
- builder() - Static method in class swiss.trustbroker.config.dto.CorsPolicies
- builder() - Static method in class swiss.trustbroker.config.dto.FrameOptionsPolicies
- builder() - Static method in class swiss.trustbroker.config.dto.GuiProperties
- builder() - Static method in class swiss.trustbroker.config.dto.IdmConfig
- builder() - Static method in class swiss.trustbroker.config.dto.MonitoringConfig
- builder() - Static method in class swiss.trustbroker.config.dto.NetworkConfig
- builder() - Static method in class swiss.trustbroker.config.dto.OidcIdpCredential
- builder() - Static method in class swiss.trustbroker.config.dto.ProfileSelectionConfig
- builder() - Static method in class swiss.trustbroker.config.dto.QualityOfAuthenticationConfig
- builder() - Static method in class swiss.trustbroker.config.dto.RelyingPartyDefinitions
- builder() - Static method in class swiss.trustbroker.config.dto.SamlNamespace
- builder() - Static method in class swiss.trustbroker.config.dto.SamlProperties
- builder() - Static method in class swiss.trustbroker.config.dto.SecToken
- builder() - Static method in class swiss.trustbroker.config.dto.SecurityChecks
- builder() - Static method in class swiss.trustbroker.config.dto.SsoConfig
- builder() - Static method in class swiss.trustbroker.config.dto.StateCacheProperties
- builder() - Static method in class swiss.trustbroker.config.dto.Support
- builder() - Static method in class swiss.trustbroker.config.dto.TechUserProperties
- builder() - Static method in class swiss.trustbroker.config.dto.WsFedConfig
- builder() - Static method in class swiss.trustbroker.config.dto.WsTrustConfig
- builder() - Static method in class swiss.trustbroker.federation.dto.ConfigElementStatus
- builder() - Static method in class swiss.trustbroker.federation.dto.ConfigStatusData
- builder() - Static method in class swiss.trustbroker.federation.xmlconfig.AccessRequest
- builder() - Static method in class swiss.trustbroker.federation.xmlconfig.AcClass
- builder() - Static method in class swiss.trustbroker.federation.xmlconfig.AccountSource
- builder() - Static method in class swiss.trustbroker.federation.xmlconfig.AcWhitelist
- builder() - Static method in class swiss.trustbroker.federation.xmlconfig.AnnouncementRpConfig
- builder() - Static method in class swiss.trustbroker.federation.xmlconfig.ArtifactBinding
- builder() - Static method in class swiss.trustbroker.federation.xmlconfig.AttributesSelection
- builder() - Static method in class swiss.trustbroker.federation.xmlconfig.Audiences
- builder() - Static method in class swiss.trustbroker.federation.xmlconfig.AuthorizationGrantTypes
- builder() - Static method in class swiss.trustbroker.federation.xmlconfig.AuthorizedApplication
- builder() - Static method in class swiss.trustbroker.federation.xmlconfig.AuthorizedApplications
- builder() - Static method in class swiss.trustbroker.federation.xmlconfig.Certificates
- builder() - Static method in class swiss.trustbroker.federation.xmlconfig.ClaimsParty
- builder() - Static method in class swiss.trustbroker.federation.xmlconfig.ClaimsProvider
- builder() - Static method in class swiss.trustbroker.federation.xmlconfig.ClaimsProviderDefinitions
- builder() - Static method in class swiss.trustbroker.federation.xmlconfig.ClaimsProviderMappings
- builder() - Static method in class swiss.trustbroker.federation.xmlconfig.ClaimsProviderSetup
- builder() - Static method in class swiss.trustbroker.federation.xmlconfig.ClientAuthenticationMethods
- builder() - Static method in class swiss.trustbroker.federation.xmlconfig.ConstAttributes
- builder() - Static method in class swiss.trustbroker.federation.xmlconfig.Definition
- builder() - Static method in class swiss.trustbroker.federation.xmlconfig.Encryption
- builder() - Static method in class swiss.trustbroker.federation.xmlconfig.Flow
- builder() - Static method in class swiss.trustbroker.federation.xmlconfig.FlowPolicies
- builder() - Static method in class swiss.trustbroker.federation.xmlconfig.HomeName
- builder() - Static method in class swiss.trustbroker.federation.xmlconfig.IdmLookup
- builder() - Static method in class swiss.trustbroker.federation.xmlconfig.IdmQuery
- builder() - Static method in class swiss.trustbroker.federation.xmlconfig.Oidc
- builder() - Static method in class swiss.trustbroker.federation.xmlconfig.OidcClaimsSources
- builder() - Static method in class swiss.trustbroker.federation.xmlconfig.OidcClient
- builder() - Static method in class swiss.trustbroker.federation.xmlconfig.OidcSecurityPolicies
- builder() - Static method in class swiss.trustbroker.federation.xmlconfig.ProfileSelection
- builder() - Static method in class swiss.trustbroker.federation.xmlconfig.ProtocolEndpoints
- builder() - Static method in class swiss.trustbroker.federation.xmlconfig.Provisioning
- builder() - Static method in class swiss.trustbroker.federation.xmlconfig.Qoa
- builder() - Static method in class swiss.trustbroker.federation.xmlconfig.RelyingParty
- builder() - Static method in class swiss.trustbroker.federation.xmlconfig.RelyingPartySetup
- builder() - Static method in class swiss.trustbroker.federation.xmlconfig.Resources
- builder() - Static method in class swiss.trustbroker.federation.xmlconfig.Saml
- builder() - Static method in class swiss.trustbroker.federation.xmlconfig.Scopes
- builder() - Static method in class swiss.trustbroker.federation.xmlconfig.Script
- builder() - Static method in class swiss.trustbroker.federation.xmlconfig.Scripts
- builder() - Static method in class swiss.trustbroker.federation.xmlconfig.SecurityPolicies
- builder() - Static method in class swiss.trustbroker.federation.xmlconfig.Signature
- builder() - Static method in class swiss.trustbroker.federation.xmlconfig.SignerKeystore
- builder() - Static method in class swiss.trustbroker.federation.xmlconfig.SignerTruststore
- builder() - Static method in class swiss.trustbroker.federation.xmlconfig.SloResponse
- builder() - Static method in class swiss.trustbroker.federation.xmlconfig.Sso
- builder() - Static method in class swiss.trustbroker.federation.xmlconfig.SsoGroup
- builder() - Static method in class swiss.trustbroker.federation.xmlconfig.SsoGroupSetup
- builder() - Static method in class swiss.trustbroker.federation.xmlconfig.SubjectName
- builder() - Static method in class swiss.trustbroker.federation.xmlconfig.SubjectNameMappings
- builder() - Static method in class swiss.trustbroker.federation.xmlconfig.WsTrust
- builder() - Static method in class swiss.trustbroker.homerealmdiscovery.dto.CookieConfig
- builder() - Static method in class swiss.trustbroker.homerealmdiscovery.dto.GuiConfig
- builder() - Static method in class swiss.trustbroker.homerealmdiscovery.dto.SupportInfo
- builder() - Static method in class swiss.trustbroker.monitoring.dto.MonitoringResponse
- builder() - Static method in record class swiss.trustbroker.oidc.client.dto.AuthorizationCodeFlowRequest
- builder() - Static method in class swiss.trustbroker.oidc.client.dto.OpenIdProviderConfiguration
- builder() - Static method in class swiss.trustbroker.oidc.OidcEncryptionKeystoreService.EncryptionParams
- builder() - Static method in class swiss.trustbroker.saml.dto.CpResponse
- builder() - Static method in class swiss.trustbroker.saml.dto.ResponseData
- builder() - Static method in class swiss.trustbroker.saml.dto.ResponseParameters
- builder() - Static method in class swiss.trustbroker.saml.dto.RpRequest
- builder() - Static method in class swiss.trustbroker.saml.dto.SsoParticipant
- builder() - Static method in class swiss.trustbroker.saml.dto.SsoParticipants
- builder() - Static method in class swiss.trustbroker.saml.dto.UiBanner
- builder() - Static method in class swiss.trustbroker.saml.dto.UiObject
- builder() - Static method in class swiss.trustbroker.saml.dto.UiObjects
- builder() - Static method in class swiss.trustbroker.saml.util.AssertionValidator.ExpectedAssertionValues
- builder() - Static method in class swiss.trustbroker.saml.util.AssertionValidator.MessageValidationResult
- builder() - Static method in class swiss.trustbroker.sessioncache.dto.AccessRequestSessionState
- builder() - Static method in class swiss.trustbroker.sessioncache.dto.Lifecycle
- builder() - Static method in class swiss.trustbroker.sessioncache.dto.SsoSessionParticipant
- builder() - Static method in class swiss.trustbroker.sessioncache.dto.SsoState
- builder() - Static method in class swiss.trustbroker.sessioncache.dto.StateData
- builder() - Static method in class swiss.trustbroker.sso.service.SsoService.SloState
- builder() - Static method in class swiss.trustbroker.wstrustclient.dto.WsTrustRstRequest
- buildIdpSsoDescriptor() - Method in class swiss.trustbroker.federation.service.FederationMetadataService
- buildLocationForAuthenticationException(HttpServletRequest, String, String, String, Predicate<String>) - Static method in class swiss.trustbroker.oidc.OidcExceptionHelper
- buildLocationForAuthenticationException(HttpServletRequest, AuthenticationException, String, String, String, Predicate<String>) - Static method in class swiss.trustbroker.oidc.OidcExceptionHelper
- buildObject() - Method in class swiss.trustbroker.wstrustclient.xml.ClaimTypeBuilder
- buildObject(String, String, String) - Method in class swiss.trustbroker.wstrustclient.xml.ClaimTypeBuilder
- buildProfileResponse(ProfileSelectionData, CpResponseData) - Method in class swiss.trustbroker.profileselection.service.LdapIdentitySelectionService
- buildProfileResponse(ProfileSelectionData, CpResponseData) - Method in class swiss.trustbroker.profileselection.service.NoOpProfileSelectionService
- buildQueryString() - Method in class swiss.trustbroker.saml.util.RedirectUrlBuilder
- buildSloResponseParameters(RelyingParty, String, Set<SsoSessionParticipant>, NameID, String, String) - Method in class swiss.trustbroker.sso.service.SsoService
- buildSpSsoDescriptor() - Method in class swiss.trustbroker.federation.service.FederationMetadataService
- button(String) - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsProvider.ClaimsProviderBuilder
-
Deprecated.remove
- buttons(List<GuiButtons>) - Method in class swiss.trustbroker.config.dto.GuiProperties.GuiPropertiesBuilder
-
Buttons enabled for the theme.
- buttons(List<GuiButtons>) - Method in class swiss.trustbroker.homerealmdiscovery.dto.GuiConfig.GuiConfigBuilder
C
- cachePath(String) - Method in class swiss.trustbroker.config.dto.AnnouncementConfig.AnnouncementConfigBuilder
-
Path for the local announcements cache.
- calculateDerivedUrls() - Method in class swiss.trustbroker.federation.xmlconfig.AcWhitelist
- canaryEnabledValue(String) - Method in class swiss.trustbroker.config.dto.NetworkConfig.NetworkConfigBuilder
-
Value for
canaryMarkerName. - canaryMarkerName(String) - Method in class swiss.trustbroker.config.dto.NetworkConfig.NetworkConfigBuilder
-
Running on K8S supporting canary routing using cookies, a test instance.
- canaryModeEnabled(HttpServletRequest, NetworkConfig) - Static method in class swiss.trustbroker.util.WebSupport
- canCpFulfillRequestQoas(QoaComparison, List<String>, QoaConfig, QoaConfig) - Method in class swiss.trustbroker.mapping.service.QoaMappingService
- canEqual(Object) - Method in class swiss.trustbroker.audit.dto.AuditDto
- canEqual(Object) - Method in class swiss.trustbroker.audit.dto.AuditDto.ResponseAttributeValue
- canEqual(Object) - Method in class swiss.trustbroker.audit.dto.AuditDto.ResponseAttributeValues
- canEqual(Object) - Method in class swiss.trustbroker.audit.dto.OidcAuditData
- canEqual(Object) - Method in class swiss.trustbroker.config.dto.AccessRequestConfig
- canEqual(Object) - Method in class swiss.trustbroker.config.dto.AdminAction
- canEqual(Object) - Method in class swiss.trustbroker.config.dto.AnnouncementConfig
- canEqual(Object) - Method in class swiss.trustbroker.config.dto.ArtifactResolution
- canEqual(Object) - Method in class swiss.trustbroker.config.dto.AttributeConfig
- canEqual(Object) - Method in class swiss.trustbroker.config.dto.AttributeProperties
- canEqual(Object) - Method in class swiss.trustbroker.config.dto.AuditConfig
- canEqual(Object) - Method in class swiss.trustbroker.config.dto.Banner
- canEqual(Object) - Method in class swiss.trustbroker.config.dto.ContentSecurityPolicies
- canEqual(Object) - Method in class swiss.trustbroker.config.dto.CookieProperties
- canEqual(Object) - Method in class swiss.trustbroker.config.dto.CorsPolicies
- canEqual(Object) - Method in class swiss.trustbroker.config.dto.FrameOptionsPolicies
- canEqual(Object) - Method in class swiss.trustbroker.config.dto.GuiProperties
- canEqual(Object) - Method in class swiss.trustbroker.config.dto.IdmConfig
- canEqual(Object) - Method in class swiss.trustbroker.config.dto.LdapStoreConfig
- canEqual(Object) - Method in class swiss.trustbroker.config.dto.MonitoringConfig
- canEqual(Object) - Method in class swiss.trustbroker.config.dto.NetworkConfig
- canEqual(Object) - Method in class swiss.trustbroker.config.dto.OidcIdentityProvider
- canEqual(Object) - Method in class swiss.trustbroker.config.dto.OidcIdpCredential
- canEqual(Object) - Method in class swiss.trustbroker.config.dto.OidcProperties
- canEqual(Object) - Method in class swiss.trustbroker.config.dto.OpsAuditConfig
- canEqual(Object) - Method in class swiss.trustbroker.config.dto.ProfileSelectionConfig
- canEqual(Object) - Method in class swiss.trustbroker.config.dto.QualityOfAuthenticationConfig
- canEqual(Object) - Method in class swiss.trustbroker.config.dto.RelyingPartyDefinitions
- canEqual(Object) - Method in class swiss.trustbroker.config.dto.SamlNamespace
- canEqual(Object) - Method in class swiss.trustbroker.config.dto.SamlProperties
- canEqual(Object) - Method in class swiss.trustbroker.config.dto.SecToken
- canEqual(Object) - Method in class swiss.trustbroker.config.dto.SecurityChecks
- canEqual(Object) - Method in class swiss.trustbroker.config.dto.SsoConfig
- canEqual(Object) - Method in class swiss.trustbroker.config.dto.StateCacheProperties
- canEqual(Object) - Method in class swiss.trustbroker.config.dto.Support
- canEqual(Object) - Method in class swiss.trustbroker.config.dto.TechUserProperties
- canEqual(Object) - Method in class swiss.trustbroker.config.dto.VersionInfo
- canEqual(Object) - Method in class swiss.trustbroker.config.dto.WsFedConfig
- canEqual(Object) - Method in class swiss.trustbroker.config.dto.WsTrustConfig
- canEqual(Object) - Method in class swiss.trustbroker.config.TrustBrokerProperties
- canEqual(Object) - Method in class swiss.trustbroker.federation.dto.ConfigElementStatus
- canEqual(Object) - Method in class swiss.trustbroker.federation.dto.ConfigStatusData
- canEqual(Object) - Method in class swiss.trustbroker.federation.xmlconfig.AccessRequest
- canEqual(Object) - Method in class swiss.trustbroker.federation.xmlconfig.AcClass
- canEqual(Object) - Method in class swiss.trustbroker.federation.xmlconfig.AccountSource
- canEqual(Object) - Method in class swiss.trustbroker.federation.xmlconfig.AcWhitelist
- canEqual(Object) - Method in class swiss.trustbroker.federation.xmlconfig.AnnouncementRpConfig
- canEqual(Object) - Method in class swiss.trustbroker.federation.xmlconfig.ArtifactBinding
- canEqual(Object) - Method in class swiss.trustbroker.federation.xmlconfig.AttributesSelection
- canEqual(Object) - Method in class swiss.trustbroker.federation.xmlconfig.Audiences
- canEqual(Object) - Method in class swiss.trustbroker.federation.xmlconfig.AuthorizationGrantTypes
- canEqual(Object) - Method in class swiss.trustbroker.federation.xmlconfig.AuthorizedApplication
- canEqual(Object) - Method in class swiss.trustbroker.federation.xmlconfig.AuthorizedApplications
- canEqual(Object) - Method in class swiss.trustbroker.federation.xmlconfig.Certificates
- canEqual(Object) - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsParty
- canEqual(Object) - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsProvider
- canEqual(Object) - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsProviderDefinitions
- canEqual(Object) - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsProviderMappings
- canEqual(Object) - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsProviderSetup
- canEqual(Object) - Method in class swiss.trustbroker.federation.xmlconfig.ClientAuthenticationMethods
- canEqual(Object) - Method in class swiss.trustbroker.federation.xmlconfig.ConstAttributes
- canEqual(Object) - Method in class swiss.trustbroker.federation.xmlconfig.CounterParty
- canEqual(Object) - Method in class swiss.trustbroker.federation.xmlconfig.Definition
- canEqual(Object) - Method in class swiss.trustbroker.federation.xmlconfig.Encryption
- canEqual(Object) - Method in class swiss.trustbroker.federation.xmlconfig.Flow
- canEqual(Object) - Method in class swiss.trustbroker.federation.xmlconfig.FlowPolicies
- canEqual(Object) - Method in class swiss.trustbroker.federation.xmlconfig.HomeName
- canEqual(Object) - Method in class swiss.trustbroker.federation.xmlconfig.IdmLookup
- canEqual(Object) - Method in class swiss.trustbroker.federation.xmlconfig.IdmQuery
- canEqual(Object) - Method in class swiss.trustbroker.federation.xmlconfig.Oidc
- canEqual(Object) - Method in class swiss.trustbroker.federation.xmlconfig.OidcClaimsSources
- canEqual(Object) - Method in class swiss.trustbroker.federation.xmlconfig.OidcClient
- canEqual(Object) - Method in class swiss.trustbroker.federation.xmlconfig.OidcSecurityPolicies
- canEqual(Object) - Method in class swiss.trustbroker.federation.xmlconfig.ProfileSelection
- canEqual(Object) - Method in class swiss.trustbroker.federation.xmlconfig.ProtocolEndpoints
- canEqual(Object) - Method in class swiss.trustbroker.federation.xmlconfig.Provisioning
- canEqual(Object) - Method in class swiss.trustbroker.federation.xmlconfig.Qoa
- canEqual(Object) - Method in class swiss.trustbroker.federation.xmlconfig.RelyingParty
- canEqual(Object) - Method in class swiss.trustbroker.federation.xmlconfig.RelyingPartySetup
- canEqual(Object) - Method in class swiss.trustbroker.federation.xmlconfig.Resources
- canEqual(Object) - Method in class swiss.trustbroker.federation.xmlconfig.Saml
- canEqual(Object) - Method in class swiss.trustbroker.federation.xmlconfig.Scopes
- canEqual(Object) - Method in class swiss.trustbroker.federation.xmlconfig.Script
- canEqual(Object) - Method in class swiss.trustbroker.federation.xmlconfig.Scripts
- canEqual(Object) - Method in class swiss.trustbroker.federation.xmlconfig.SecurityPolicies
- canEqual(Object) - Method in class swiss.trustbroker.federation.xmlconfig.Signature
- canEqual(Object) - Method in class swiss.trustbroker.federation.xmlconfig.SignerKeystore
- canEqual(Object) - Method in class swiss.trustbroker.federation.xmlconfig.SignerStore
- canEqual(Object) - Method in class swiss.trustbroker.federation.xmlconfig.SignerTruststore
- canEqual(Object) - Method in class swiss.trustbroker.federation.xmlconfig.SloResponse
- canEqual(Object) - Method in class swiss.trustbroker.federation.xmlconfig.Sso
- canEqual(Object) - Method in class swiss.trustbroker.federation.xmlconfig.SsoGroup
- canEqual(Object) - Method in class swiss.trustbroker.federation.xmlconfig.SsoGroupSetup
- canEqual(Object) - Method in class swiss.trustbroker.federation.xmlconfig.SubjectName
- canEqual(Object) - Method in class swiss.trustbroker.federation.xmlconfig.SubjectNameMappings
- canEqual(Object) - Method in class swiss.trustbroker.federation.xmlconfig.ValidationStatus
- canEqual(Object) - Method in class swiss.trustbroker.federation.xmlconfig.WsTrust
- canEqual(Object) - Method in class swiss.trustbroker.homerealmdiscovery.dto.CookieConfig
- canEqual(Object) - Method in class swiss.trustbroker.homerealmdiscovery.dto.GuiConfig
- canEqual(Object) - Method in class swiss.trustbroker.homerealmdiscovery.dto.ProfileRequest
- canEqual(Object) - Method in class swiss.trustbroker.homerealmdiscovery.dto.SessionRequest
- canEqual(Object) - Method in class swiss.trustbroker.homerealmdiscovery.dto.SupportInfo
- canEqual(Object) - Method in class swiss.trustbroker.mapping.dto.CustomQoa
- canEqual(Object) - Method in class swiss.trustbroker.monitoring.dto.MonitoringResponse
- canEqual(Object) - Method in class swiss.trustbroker.oidc.client.dto.OpenIdProviderConfiguration
- canEqual(Object) - Method in class swiss.trustbroker.oidc.session.HttpExchangeSupport
- canEqual(Object) - Method in class swiss.trustbroker.oidc.session.SessionPrincipal
- canEqual(Object) - Method in class swiss.trustbroker.saml.dto.CpResponse
- canEqual(Object) - Method in class swiss.trustbroker.saml.dto.DeviceInfoReq
- canEqual(Object) - Method in class swiss.trustbroker.saml.dto.ResponseData
- canEqual(Object) - Method in class swiss.trustbroker.saml.dto.ResponseParameters
- canEqual(Object) - Method in class swiss.trustbroker.saml.dto.ResponseStatus
- canEqual(Object) - Method in class swiss.trustbroker.saml.dto.RpRequest
- canEqual(Object) - Method in class swiss.trustbroker.saml.dto.SsoParticipant
- canEqual(Object) - Method in class swiss.trustbroker.saml.dto.SsoParticipants
- canEqual(Object) - Method in class swiss.trustbroker.saml.dto.UiBanner
- canEqual(Object) - Method in class swiss.trustbroker.saml.dto.UiObject
- canEqual(Object) - Method in class swiss.trustbroker.saml.dto.UiObjects
- canEqual(Object) - Method in class swiss.trustbroker.saml.util.AssertionValidator.ExpectedAssertionValues
- canEqual(Object) - Method in class swiss.trustbroker.saml.util.AssertionValidator.MessageValidationResult
- canEqual(Object) - Method in class swiss.trustbroker.sessioncache.dto.AccessRequestSessionState
- canEqual(Object) - Method in class swiss.trustbroker.sessioncache.dto.ArtifactCacheEntity
- canEqual(Object) - Method in class swiss.trustbroker.sessioncache.dto.Lifecycle
- canEqual(Object) - Method in class swiss.trustbroker.sessioncache.dto.SsoSessionParticipant
- canEqual(Object) - Method in class swiss.trustbroker.sessioncache.dto.SsoState
- canEqual(Object) - Method in class swiss.trustbroker.sessioncache.dto.StateData
- canEqual(Object) - Method in class swiss.trustbroker.sso.dto.SloNotification
- canEqual(Object) - Method in class swiss.trustbroker.sso.service.SsoService.SloState
- canEqual(Object) - Method in class swiss.trustbroker.sso.service.SsoService.SsoCookieNameParams
- canEqual(Object) - Method in class swiss.trustbroker.sso.service.SsoService.StateWithCookies
- canEqual(Object) - Method in class swiss.trustbroker.wstrustclient.dto.WsTrustRstRequest
- canEqual(Object) - Method in class swiss.trustbroker.wstrustclient.service.WsTrustSoapClientBase.MarshallingInfo
- canIssueIdToken(OidcClient, Set<String>) - Static method in class swiss.trustbroker.oidc.OidcConfigurationUtil
- canIssueRefreshToken(OidcClient) - Static method in class swiss.trustbroker.oidc.OidcConfigurationUtil
- canonicalizationAlgorithm(String) - Method in class swiss.trustbroker.config.dto.AccessRequestConfig.AccessRequestConfigBuilder
-
Access Request canonicalization algorithm.
- canonicalizationAlgorithm(String) - Method in class swiss.trustbroker.federation.xmlconfig.Signature.SignatureBuilder
-
Canonicalization algorithm.
- captureOutputStream() - Method in class swiss.trustbroker.oidc.tx.OidcTxResponseWrapper
- CatchAllAndOpTraceFilter - Class in swiss.trustbroker.waf
-
Springify OpTrace filter and add a UUID and client IP in a thread-local so: - GlobalException catcher can send UUID to the user to find the logs - Logback via the logging.pattern.console: ...
- CatchAllAndOpTraceFilter(GlobalExceptionHandler, TrustBrokerProperties) - Constructor for class swiss.trustbroker.waf.CatchAllAndOpTraceFilter
- centralCICD(String) - Method in class swiss.trustbroker.config.dto.AccessRequestConfig.AccessRequestConfigBuilder
-
Global default for optional request parameter added to URLs.
- centralCICD(String) - Method in class swiss.trustbroker.federation.xmlconfig.AuthorizedApplication.AuthorizedApplicationBuilder
-
Optional request parameter added to URLs.
- cert(String) - Method in class swiss.trustbroker.config.dto.WsTrustConfig.WsTrustConfigBuilder
-
Keystore path.
- CERTIFICATE - Enum constant in enum class swiss.trustbroker.federation.xmlconfig.EncryptionKeyInfo
-
Include
X509CertificateinKeyInfo. - certificates(Certificates) - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsParty.ClaimsPartyBuilder
-
You only need to declare SignerTruststore for SAML response verification.
- certificates(Certificates) - Method in class swiss.trustbroker.federation.xmlconfig.OidcClient.OidcClientBuilder
-
Required for JWT encryption
- certificates(Certificates) - Method in class swiss.trustbroker.federation.xmlconfig.RelyingParty.RelyingPartyBuilder
-
For verification and signing.
- Certificates - Class in swiss.trustbroker.federation.xmlconfig
-
The certificate configurations contain file paths relative to
- Certificates() - Constructor for class swiss.trustbroker.federation.xmlconfig.Certificates
- Certificates(SignerKeystore, SignerTruststore, SignerKeystore, SignerTruststore, SignerKeystore, SignerTruststore, SignerKeystore, SignerTruststore) - Constructor for class swiss.trustbroker.federation.xmlconfig.Certificates
-
Creates a new
Certificatesinstance. - Certificates.CertificatesBuilder - Class in swiss.trustbroker.federation.xmlconfig
- CertificateUtil - Class in swiss.trustbroker.util
-
Utility function related to keys and certificates with dependencies to this subproject.
- certPath(String) - Method in class swiss.trustbroker.federation.xmlconfig.SignerKeystore.SignerKeystoreBuilder
-
Path of the certificate.
- certPath(String) - Method in class swiss.trustbroker.federation.xmlconfig.SignerTruststore.SignerTruststoreBuilder
-
Path of the certificate.
- certType(String) - Method in class swiss.trustbroker.federation.xmlconfig.SignerKeystore.SignerKeystoreBuilder
-
If the store format cannot be derived from the file extension.
- certType(String) - Method in class swiss.trustbroker.federation.xmlconfig.SignerTruststore.SignerTruststoreBuilder
-
If the store format cannot be derived from the file extension.
- changeSessionId() - Method in class swiss.trustbroker.oidc.tx.OidcTxRequestWrapper
- changeSessionId(Session, String, boolean, boolean) - Method in class swiss.trustbroker.oidc.session.TomcatSessionManager
- checkAndLoadCert(SignerKeystore, String, String) - Method in class swiss.trustbroker.config.CredentialService
- checkAndLoadCpCertificates(ClaimsProviderSetup) - Method in class swiss.trustbroker.config.AppConfigService
- checkAndLoadJWKs(String, String, List<OidcClient>) - Method in class swiss.trustbroker.config.CredentialService
- checkAndLoadRelyingPartyCertificates(RelyingPartySetup) - Method in class swiss.trustbroker.config.AppConfigService
- checkAndLoadTrustCredential(SignerTruststore, String, String) - Method in class swiss.trustbroker.config.CredentialService
- checkAndUpdate() - Method in class swiss.trustbroker.config.AppConfigService
- checkAndUpdateOidcRegistry(RelyingPartySetup, ClaimsProviderSetup) - Method in class swiss.trustbroker.config.AppConfigService
- checkClaimAndRpMatch(RelyingPartySetup, SsoGroupSetup) - Method in class swiss.trustbroker.config.AppConfigService
- checkDeviceInfo(DeviceInfoReq, HttpServletRequest, HttpServletResponse) - Method in class swiss.trustbroker.homerealmdiscovery.controller.HrdController
- checkReconfig(AdminAction) - Method in class swiss.trustbroker.config.PropertyConfigScheduler
-
Allow a config reload every 1sec (a bit of DOS prevention) given the client knows the admin secret.
- checkSessionHijacking(HttpSession) - Static method in class swiss.trustbroker.oidc.session.OidcSessionSupport
- checkSessionOnFederationRedirect(String, HttpServletRequest) - Static method in class swiss.trustbroker.oidc.session.OidcSessionSupport
- cid(Boolean) - Method in class swiss.trustbroker.audit.dto.AuditDto.ResponseAttributeValue.ResponseAttributeValueBuilder
- cid(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.Definition.DefinitionBuilder
-
Indicates whether this field is considered CID (client identifying data).
- claim(String) - Method in class swiss.trustbroker.federation.xmlconfig.Qoa.QoaBuilder
-
Qoa Claim name
- claim(String) - Method in class swiss.trustbroker.federation.xmlconfig.SubjectName.SubjectNameBuilder
-
Subject Name ID claim name.
- claimMustBeInResponse(Definition, List<Definition>) - Static method in class swiss.trustbroker.mapping.util.AttributeFilterUtil
- claims(Map<String, Object>) - Method in class swiss.trustbroker.saml.dto.CpResponse.CpResponseBuilder
-
The claims map contains these OIDC claims: Everything that was annotated with an oidcName in the configuration. All well known OIDC claims of the openid scope declared in AttributeName (StandardClaims). Everything added or removed in a OIDC OnToken groovy script hook. We use Object values because of nested collection support.
- ClaimsMapper - Enum Class in swiss.trustbroker.federation.xmlconfig
-
Mapping of OIDC/SAML claims.
- ClaimsMapperService - Class in swiss.trustbroker.mapping.service
-
Service for mapping claims (attributes, user details, properties).
- ClaimsMapperService(RelyingPartySetupService, ScriptService, TrustBrokerProperties) - Constructor for class swiss.trustbroker.mapping.service.ClaimsMapperService
- ClaimSource - Enum Class in swiss.trustbroker.saml.dto
- ClaimSourceUtil - Class in swiss.trustbroker.saml.util
- claimsParties(List<ClaimsParty>) - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsProviderSetup.ClaimsProviderSetupBuilder
-
List of CPs.
- ClaimsParty - Class in swiss.trustbroker.federation.xmlconfig
-
This class describes the configuration of a claims provider (CP).
- ClaimsParty() - Constructor for class swiss.trustbroker.federation.xmlconfig.ClaimsParty
- ClaimsParty(String, FeatureEnum, Boolean, StatusPolicy, ProvisioningMode, String, String, HomeName, AccountSource, String, String, String, String, Certificates, SecurityPolicies, Oidc, Saml, WsTrust, SubjectNameMappings, Qoa, Provisioning, AttributesSelection, Scripts, List<Credential>, List<Credential>, Credential, List<Credential>) - Constructor for class swiss.trustbroker.federation.xmlconfig.ClaimsParty
-
Creates a new
ClaimsPartyinstance. - ClaimsParty(ClaimsParty.ClaimsPartyBuilder<?, ?>) - Constructor for class swiss.trustbroker.federation.xmlconfig.ClaimsParty
- ClaimsParty.ClaimsPartyBuilder<C,
B> - Class in swiss.trustbroker.federation.xmlconfig - ClaimsPartyBuilder() - Constructor for class swiss.trustbroker.federation.xmlconfig.ClaimsParty.ClaimsPartyBuilder
- ClaimsProvider - Class in swiss.trustbroker.federation.xmlconfig
-
Configuration for CP mapped to an RP.
- ClaimsProvider() - Constructor for class swiss.trustbroker.federation.xmlconfig.ClaimsProvider
- ClaimsProvider(String, Boolean, String, String, String, String, Integer, String, String, String, String, String, String, String, Boolean, Integer, List<String>) - Constructor for class swiss.trustbroker.federation.xmlconfig.ClaimsProvider
-
Deprecated.remove
- ClaimsProvider.ClaimsProviderBuilder - Class in swiss.trustbroker.federation.xmlconfig
- claimsProviderDefinitions(ClaimsProviderDefinitions) - Method in class swiss.trustbroker.config.dto.RelyingPartyDefinitions.RelyingPartyDefinitionsBuilder
- ClaimsProviderDefinitions - Class in swiss.trustbroker.federation.xmlconfig
-
Defines all known claims providers and their display on the HRD screen in a XML file config.
- ClaimsProviderDefinitions() - Constructor for class swiss.trustbroker.federation.xmlconfig.ClaimsProviderDefinitions
- ClaimsProviderDefinitions(List<ClaimsProvider>) - Constructor for class swiss.trustbroker.federation.xmlconfig.ClaimsProviderDefinitions
-
Creates a new
ClaimsProviderDefinitionsinstance. - ClaimsProviderDefinitions.ClaimsProviderDefinitionsBuilder - Class in swiss.trustbroker.federation.xmlconfig
- claimsProviderList(List<ClaimsProvider>) - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsProviderMappings.ClaimsProviderMappingsBuilder
-
List of CP mappings.
- claimsProviderMappings(ClaimsProviderMappings) - Method in class swiss.trustbroker.federation.xmlconfig.RelyingParty.RelyingPartyBuilder
-
List of CPs mapped to this RP.
- ClaimsProviderMappings - Class in swiss.trustbroker.federation.xmlconfig
-
List of CPs mappings for an RP.
- ClaimsProviderMappings() - Constructor for class swiss.trustbroker.federation.xmlconfig.ClaimsProviderMappings
- ClaimsProviderMappings(Boolean, String, List<ClaimsProvider>) - Constructor for class swiss.trustbroker.federation.xmlconfig.ClaimsProviderMappings
-
Creates a new
ClaimsProviderMappingsinstance. - ClaimsProviderMappings.ClaimsProviderMappingsBuilder - Class in swiss.trustbroker.federation.xmlconfig
- claimsProviderNoticeCookie(CookieProperties) - Method in class swiss.trustbroker.config.dto.GuiProperties.GuiPropertiesBuilder
-
XTB can (via a plugin) support a notice screen that can be configured, where an end user can set a cookie to not show the screen next time.
- claimsProviderNoticeCookie(CookieConfig) - Method in class swiss.trustbroker.homerealmdiscovery.dto.GuiConfig.GuiConfigBuilder
- claimsProviders(List<ConfigElementStatus>) - Method in class swiss.trustbroker.federation.dto.ConfigStatusData.ConfigStatusDataBuilder
- claimsProviders(List<ClaimsProvider>) - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsProviderDefinitions.ClaimsProviderDefinitionsBuilder
-
List of CPs
- claimsProviders(List<ClaimsProvider>) - Method in class swiss.trustbroker.saml.dto.RpRequest.RpRequestBuilder
-
ClaimsProvider mappings for RelyingParty.
- ClaimsProviderService - Class in swiss.trustbroker.saml.service
- ClaimsProviderService(StateCacheService, TrustBrokerProperties, RelyingPartySetupService, AuditService, ScriptService, QoaMappingService, SamlOutputService, AuthorizationCodeFlowService) - Constructor for class swiss.trustbroker.saml.service.ClaimsProviderService
- claimsProviderSetup(ClaimsProviderSetup) - Method in class swiss.trustbroker.config.dto.RelyingPartyDefinitions.RelyingPartyDefinitionsBuilder
- ClaimsProviderSetup - Class in swiss.trustbroker.federation.xmlconfig
-
Defines claims parties (CPs).
- ClaimsProviderSetup() - Constructor for class swiss.trustbroker.federation.xmlconfig.ClaimsProviderSetup
- ClaimsProviderSetup(List<ClaimsParty>, String, List<ClaimsParty>) - Constructor for class swiss.trustbroker.federation.xmlconfig.ClaimsProviderSetup
-
Creates a new
ClaimsProviderSetupinstance. - ClaimsProviderSetup.ClaimsProviderSetupBuilder - Class in swiss.trustbroker.federation.xmlconfig
- ClaimsProviderUtil - Class in swiss.trustbroker.homerealmdiscovery.util
- claimsSelection(AttributesSelection) - Method in class swiss.trustbroker.federation.xmlconfig.OidcClient.OidcClientBuilder
-
Attribute selection applied to the claims.
- claimsSelection(AttributesSelection) - Method in class swiss.trustbroker.federation.xmlconfig.RelyingParty.RelyingPartyBuilder
-
RP side claims selection.
- claimsSourceList(List<OidcClaimsSource>) - Method in class swiss.trustbroker.federation.xmlconfig.OidcClaimsSources.OidcClaimsSourcesBuilder
-
List of claims sources.
Claims from sources are combined in the given order. - claimsSources(OidcClaimsSources) - Method in class swiss.trustbroker.federation.xmlconfig.OidcClient.OidcClientBuilder
-
Sources of claims for OIDC CPs.
- ClaimType - Interface in swiss.trustbroker.wstrustclient.xml
- ClaimTypeBuilder - Class in swiss.trustbroker.wstrustclient.xml
- ClaimTypeBuilder() - Constructor for class swiss.trustbroker.wstrustclient.xml.ClaimTypeBuilder
- ClaimTypeImpl - Class in swiss.trustbroker.wstrustclient.xml
- ClaimTypeImpl(String, String, String) - Constructor for class swiss.trustbroker.wstrustclient.xml.ClaimTypeImpl
- ClaimTypeMarshaller - Class in swiss.trustbroker.wstrustclient.xml
- ClaimTypeMarshaller() - Constructor for class swiss.trustbroker.wstrustclient.xml.ClaimTypeMarshaller
- claimTypes(List<String>) - Method in class swiss.trustbroker.wstrustclient.dto.WsTrustRstRequest.WsTrustRstRequestBuilder
- ClaimTypeUnmarshaller - Class in swiss.trustbroker.wstrustclient.xml
- ClaimTypeUnmarshaller() - Constructor for class swiss.trustbroker.wstrustclient.xml.ClaimTypeUnmarshaller
- classes(List<AcClass>) - Method in class swiss.trustbroker.federation.xmlconfig.Qoa.QoaBuilder
-
List of SAML AuthnContextClassRef entries.
- clearDerivedValuesFromAuthentication(String, String, String, TrustBrokerProperties) - Static method in class swiss.trustbroker.oidc.session.OidcSessionSupport
- clearDerivedValuesFromAuthentication(TomcatSession, Object, TrustBrokerProperties) - Static method in class swiss.trustbroker.oidc.session.OidcSessionSupport
- CLIENT_CREDENTIALS - Enum constant in enum class swiss.trustbroker.federation.xmlconfig.AuthorizationGrantType
- CLIENT_ID_LABEL - Static variable in class swiss.trustbroker.metrics.service.MetricsService
- CLIENT_SECRET_BASIC - Enum constant in enum class swiss.trustbroker.federation.xmlconfig.ClientAuthenticationMethod
- CLIENT_SECRET_JWT - Enum constant in enum class swiss.trustbroker.federation.xmlconfig.ClientAuthenticationMethod
- CLIENT_SECRET_POST - Enum constant in enum class swiss.trustbroker.federation.xmlconfig.ClientAuthenticationMethod
- clientAssertionExpirationLifeTimeSec(Integer) - Method in class swiss.trustbroker.federation.xmlconfig.OidcSecurityPolicies.OidcSecurityPoliciesBuilder
-
Restrict client_assertion expiration maxLifeTime
Default: 3600 (1h) - clientAssertionMaxAgeSec(Integer) - Method in class swiss.trustbroker.federation.xmlconfig.OidcSecurityPolicies.OidcSecurityPoliciesBuilder
-
Restrict client_assertion age
Default: 60 - clientAssertionNotBeforeToleranceSec(Integer) - Method in class swiss.trustbroker.federation.xmlconfig.OidcSecurityPolicies.OidcSecurityPoliciesBuilder
-
client_assertion tolerance NTP drift tolerance.
- clientAssertionNotOnOrAfterToleranceSec(Integer) - Method in class swiss.trustbroker.federation.xmlconfig.OidcSecurityPolicies.OidcSecurityPoliciesBuilder
-
client_assertion timestamp clock/transfer tolerance.
- ClientAuthenticationMethod - Enum Class in swiss.trustbroker.federation.xmlconfig
-
OIDC client authentication methods.
- clientAuthenticationMethods(ClientAuthenticationMethods) - Method in class swiss.trustbroker.federation.xmlconfig.OidcClient.OidcClientBuilder
-
Client authentication methods to be allowed.
- ClientAuthenticationMethods - Class in swiss.trustbroker.federation.xmlconfig
-
OIDC client authentication methods.
- ClientAuthenticationMethods() - Constructor for class swiss.trustbroker.federation.xmlconfig.ClientAuthenticationMethods
- ClientAuthenticationMethods(List<ClientAuthenticationMethod>) - Constructor for class swiss.trustbroker.federation.xmlconfig.ClientAuthenticationMethods
-
Creates a new
ClientAuthenticationMethodsinstance. - ClientAuthenticationMethods.ClientAuthenticationMethodsBuilder - Class in swiss.trustbroker.federation.xmlconfig
- ClientConfigInMemoryRepository - Class in swiss.trustbroker.oidc
- ClientConfigInMemoryRepository(RelyingPartyDefinitions, TrustBrokerProperties) - Constructor for class swiss.trustbroker.oidc.ClientConfigInMemoryRepository
- clientEncryptionCredential(Credential) - Method in class swiss.trustbroker.federation.xmlconfig.OidcClient.OidcClientBuilder
- clientExtId(String) - Method in class swiss.trustbroker.federation.xmlconfig.IdmQuery.IdmQueryBuilder
-
Client External ID (tenant) as filtering parameter for the IDM.
- clientExtId(String) - Method in class swiss.trustbroker.federation.xmlconfig.RelyingParty.RelyingPartyBuilder
-
Primary key of the IDM client identifying an access tenant.
- clientExtId(String) - Method in class swiss.trustbroker.saml.dto.CpResponse.CpResponseBuilder
-
Retrieved IDM primary reference for internal reference.
- clientId() - Method in record class swiss.trustbroker.oidc.client.dto.AuthorizationCodeFlowRequest
-
Returns the value of the
clientIdrecord component. - clientId(String) - Method in class swiss.trustbroker.federation.xmlconfig.AuthorizedApplication.AuthorizedApplicationBuilder
-
If an RP contains multiple OIDC clients and AccessRequest configurations and the OIDC client_id or the applicationName (provided viy AuthnRequest.ProviderName) does not match the 'name', this attribute can be used to establish the relation.
- clientId(String) - Method in class swiss.trustbroker.oidc.client.dto.AuthorizationCodeFlowRequest.AuthorizationCodeFlowRequestBuilder
- clientIP(String) - Method in class swiss.trustbroker.audit.dto.AuditDto.AuditDtoBuilder
- clientName(String) - Method in class swiss.trustbroker.audit.dto.AuditDto.AuditDtoBuilder
- clientName(String) - Method in class swiss.trustbroker.federation.xmlconfig.RelyingParty.RelyingPartyBuilder
-
ClientName is the access tenant identifier (somewhat a short form of the relying party ID) applied to all
- clientName(String) - Method in class swiss.trustbroker.saml.dto.CpResponse.CpResponseBuilder
-
RelyingParty ClientName as used in the IDM credential SAML federation Issuer NameID.
- clientNetwork(String) - Method in class swiss.trustbroker.audit.dto.AuditDto.AuditDtoBuilder
- clientNetworks(String) - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsProvider.ClaimsProviderBuilder
-
A comma separated list of network identifiers.
- clients(List<OidcClient>) - Method in class swiss.trustbroker.federation.xmlconfig.Oidc.OidcBuilder
-
List of OIDC clients handled via the same configuration.
- clientSecret(String) - Method in class swiss.trustbroker.federation.xmlconfig.OidcClient.OidcClientBuilder
-
You can encode the secret with one of the supported encoders.
- clientSecret(String) - Method in class swiss.trustbroker.oidc.client.dto.OpenIdProviderConfiguration.OpenIdProviderConfigurationBuilder
- clientType(String) - Method in class swiss.trustbroker.audit.dto.AuditDto.AuditDtoBuilder
- clock() - Static method in class swiss.trustbroker.config.TrustBrokerConfiguration
- cloneIdmLookup(IdmLookup) - Method in class swiss.trustbroker.saml.dto.CpResponse
- collapseParagraphs() - Method in class swiss.trustbroker.config.dto.Banner
- collapseParagraphs(boolean) - Method in class swiss.trustbroker.saml.dto.UiBanner.UiBannerBuilder
-
True if paragraphs of banner are shown collapsed on a small screen.
- collapseParagraphs(Boolean) - Method in class swiss.trustbroker.config.dto.Banner.BannerBuilder
-
Display banner paragraphs collapsed on a small screen.
- color(String) - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsProvider.ClaimsProviderBuilder
-
HTML color code identifying the CP on small screens.
- color(String) - Method in class swiss.trustbroker.saml.dto.SsoParticipant.SsoParticipantBuilder
- color(String) - Method in class swiss.trustbroker.saml.dto.UiObject.UiObjectBuilder
-
HTML color code identifying the CP on small screens.
- commence(HttpServletRequest, HttpServletResponse, AuthenticationException) - Method in class swiss.trustbroker.oidc.CustomAuthenticationEntryPoint
- comparison() - Method in record class swiss.trustbroker.mapping.dto.QoaSpec
-
Returns the value of the
comparisonrecord component. - comparison(QoaComparison) - Method in class swiss.trustbroker.federation.xmlconfig.Qoa.QoaBuilder
-
Comparison type.
- comparisonType(QoaComparison) - Method in class swiss.trustbroker.saml.dto.RpRequest.RpRequestBuilder
-
AuthnRequest RequestedAuthnContext.comparisonType.
- comparisonType(QoaComparison) - Method in class swiss.trustbroker.sessioncache.dto.StateData.StateDataBuilder
- COMPLETED - Enum constant in enum class swiss.trustbroker.sessioncache.dto.AccessRequestState
- completedAuthnRequests(List<String>) - Method in class swiss.trustbroker.sessioncache.dto.StateData.StateDataBuilder
- completeDeviceInfoPreservingStateForSso(StateData, StateData, RelyingParty) - Method in class swiss.trustbroker.sso.service.SsoService
- completedTime(Timestamp) - Method in class swiss.trustbroker.sessioncache.dto.AccessRequestSessionState.AccessRequestSessionStateBuilder
- computeDefaultQoaFromConf(QoaConfig) - Method in class swiss.trustbroker.mapping.service.QoaMappingService
- computeOidcClaims(Map<String, List<Object>>, List<Definition>, ClaimsMapperService, boolean, OidcClient) - Static method in class swiss.trustbroker.oidc.OidcConfigurationUtil
- computeOidcSingleLogoutUrl(String, String, RelyingParty) - Method in class swiss.trustbroker.sso.service.SsoService
- computeQoasForComparisonType(QoaConfig, Map<String, Integer>, List<String>) - Static method in class swiss.trustbroker.mapping.util.QoaMappingUtil
- computeSamlSingleLogoutUrl(String, RelyingParty) - Method in class swiss.trustbroker.sso.service.SsoService
- config() - Method in record class swiss.trustbroker.mapping.dto.QoaConfig
-
Returns the value of the
configrecord component. - CONFIG - Enum constant in enum class swiss.trustbroker.saml.dto.ClaimSource
- CONFIG_API - Static variable in class swiss.trustbroker.util.ApiSupport
- CONFIG_FRONTEND_API - Static variable in class swiss.trustbroker.util.ApiSupport
- CONFIG_SCHEMAS_API - Static variable in class swiss.trustbroker.util.ApiSupport
- CONFIG_STATUS_API - Static variable in class swiss.trustbroker.util.ApiSupport
- CONFIG_STATUS_LABEL - Static variable in class swiss.trustbroker.metrics.service.MetricsService
- ConfigController - Class in swiss.trustbroker.config.controller
-
Controller for the version and UI config APIs.
- ConfigController(TrustBrokerProperties) - Constructor for class swiss.trustbroker.config.controller.ConfigController
- ConfigElementStatus - Class in swiss.trustbroker.federation.dto
-
Status details of a single XML configuration.
- ConfigElementStatus.ConfigElementStatusBuilder - Class in swiss.trustbroker.federation.dto
- ConfigStatus - Enum Class in swiss.trustbroker.federation.dto
-
Status flag of the XML configurations.
- ConfigStatusData - Class in swiss.trustbroker.federation.dto
-
Status of the XML configurations including details.
- ConfigStatusData.ConfigStatusDataBuilder - Class in swiss.trustbroker.federation.dto
- constAttributes(ConstAttributes) - Method in class swiss.trustbroker.federation.xmlconfig.RelyingParty.RelyingPartyBuilder
-
Deprecated.replaced with ClaimsSelection
- ConstAttributes - Class in swiss.trustbroker.federation.xmlconfig
-
List of constant attributes as declared.
- ConstAttributes() - Constructor for class swiss.trustbroker.federation.xmlconfig.ConstAttributes
- ConstAttributes(List<Definition>) - Constructor for class swiss.trustbroker.federation.xmlconfig.ConstAttributes
-
Creates a new
ConstAttributesinstance. - ConstAttributes.ConstAttributesBuilder - Class in swiss.trustbroker.federation.xmlconfig
- constContainsDefinition(ConstAttributes, Definition) - Static method in class swiss.trustbroker.homerealmdiscovery.util.DefinitionUtil
- constContainsDefinition(ConstAttributes, Definition, List<String>) - Static method in class swiss.trustbroker.homerealmdiscovery.util.DefinitionUtil
- consumerUrl(String) - Method in class swiss.trustbroker.config.dto.SamlProperties.SamlPropertiesBuilder
-
XTB SAML consumer URL, included in the metadata.
- CONTENT_SECURITY_POLICY - Static variable in class swiss.trustbroker.util.HeaderBuilder
- CONTENT_TYPE_OPTIONS - Static variable in class swiss.trustbroker.util.HeaderBuilder
- ContentSecurityPolicies - Class in swiss.trustbroker.config.dto
-
Calculating unsafe-hashes:
echo -n 'myscript()' | openssl sha256 -binary | openssl base64Risks: A thus whitelisted script could be injected in other parts of the page by an attacker. - ContentSecurityPolicies() - Constructor for class swiss.trustbroker.config.dto.ContentSecurityPolicies
- ContentSecurityPolicies(String, String, String, String) - Constructor for class swiss.trustbroker.config.dto.ContentSecurityPolicies
-
Creates a new
ContentSecurityPoliciesinstance. - ContentSecurityPolicies.ContentSecurityPoliciesBuilder - Class in swiss.trustbroker.config.dto
- contentTypeOptions() - Method in class swiss.trustbroker.util.HeaderBuilder
- context(Map<String, String>) - Method in class swiss.trustbroker.saml.dto.RpRequest.RpRequestBuilder
-
Map to store internal processing attributes required during federation.
- CONTEXT_OIDC_AUTHORIZATION_QUERY_PARAMETER - Static variable in class swiss.trustbroker.saml.dto.RpRequest
-
Context key set by script to add one or several query parameters to the authorization request towards an OIDC CP.
- contextClass(String) - Method in class swiss.trustbroker.federation.xmlconfig.AcClass.AcClassBuilder
-
ACClass name
- contextClasses() - Method in record class swiss.trustbroker.mapping.dto.QoaSpec
-
Returns the value of the
contextClassesrecord component. - contextClasses(List<String>) - Method in class swiss.trustbroker.saml.dto.CpResponse.CpResponseBuilder
-
Authentication context classes.
- contextClasses(List<String>) - Method in class swiss.trustbroker.saml.dto.RpRequest.RpRequestBuilder
-
AuthnRequest RequestedAuthnContext.ContextClassRefs.
- contextClasses(List<String>) - Method in class swiss.trustbroker.sessioncache.dto.StateData.StateDataBuilder
- CONTINUE_FLAG - Static variable in class swiss.trustbroker.federation.xmlconfig.Flow
- conversationId(String) - Method in class swiss.trustbroker.audit.dto.AuditDto.AuditDtoBuilder
- conversationId(String) - Method in class swiss.trustbroker.saml.dto.ResponseParameters.ResponseParametersBuilder
- convert(HttpServletRequest) - Method in class swiss.trustbroker.oidc.CustomOAuth2TokenExchangeAuthenticationConverter
- convert(HttpServletRequest) - Method in class swiss.trustbroker.oidc.opensaml5.OpenSaml5AuthenticationTokenConverter
-
Resolve an authentication request from the given
HttpServletRequest. - convert(HttpServletRequest) - Method in class swiss.trustbroker.oidc.pkce.PublicClientRefreshTokenAndTokenExchangeAuthenticationConverter
- COOKIE_MAXAGE_SESSION - Static variable in class swiss.trustbroker.util.WebSupport
- CookieConfig - Class in swiss.trustbroker.homerealmdiscovery.dto
- CookieConfig.CookieConfigBuilder - Class in swiss.trustbroker.homerealmdiscovery.dto
- CookieProperties - Class in swiss.trustbroker.config.dto
-
Cookie configuration.
- CookieProperties() - Constructor for class swiss.trustbroker.config.dto.CookieProperties
- CookieProperties(String, String, String, Integer, String[], String, Boolean, Boolean, String) - Constructor for class swiss.trustbroker.config.dto.CookieProperties
-
Creates a new
CookiePropertiesinstance. - CookieProperties.CookiePropertiesBuilder - Class in swiss.trustbroker.config.dto
- cookiesToExpire(List<Cookie>) - Method in class swiss.trustbroker.sso.service.SsoService.SloState.SloStateBuilder
- copyAbortConditions(ResponseStatus) - Method in class swiss.trustbroker.saml.dto.ResponseStatus
- copyAttributeIfBlank(BiConsumer<X, String>, Function<X, String>, X, X) - Static method in class swiss.trustbroker.util.PropertyUtil
-
Copy attribute from base to target if set in base, but not in target (blank check).
- copyAttributeIfMissing(BiConsumer<X, Y>, Function<X, Y>, X, X) - Static method in class swiss.trustbroker.util.PropertyUtil
-
Copy attribute from base to target if set in base, but not in target (null check).
- copyAttributeIfRequired(BiConsumer<X, Y>, Function<X, Y>, X, X, Predicate<Y>) - Static method in class swiss.trustbroker.util.PropertyUtil
-
Copy attribute from base to target if set in base, but not in target (using copyCondition Predicate).
- copyMissingAttributes(Set<String>, X, X) - Static method in class swiss.trustbroker.util.PropertyUtil
-
Copy all attributes from base to target if set in base, but not in target.
- copyMissingAttributes(X, X) - Static method in class swiss.trustbroker.util.PropertyUtil
-
Copy all attributes from base to target if set in base, but not in target.
- copyRpParametersIntoCpResponse(CpResponse) - Method in class swiss.trustbroker.sessioncache.dto.StateData
- CorsPolicies - Class in swiss.trustbroker.config.dto
-
HTTP CORS configurations.
- CorsPolicies() - Constructor for class swiss.trustbroker.config.dto.CorsPolicies
- CorsPolicies(List<String>, List<String>, List<String>, AllowPrivateNetworkAccess) - Constructor for class swiss.trustbroker.config.dto.CorsPolicies
-
Creates a new
CorsPoliciesinstance. - CorsPolicies.CorsPoliciesBuilder - Class in swiss.trustbroker.config.dto
- CorsSupport - Class in swiss.trustbroker.util
- CounterParty - Class in swiss.trustbroker.federation.xmlconfig
-
Abstraction for shared features of RP and CP.
- CounterParty() - Constructor for class swiss.trustbroker.federation.xmlconfig.CounterParty
- CounterParty(String, ValidationStatus) - Constructor for class swiss.trustbroker.federation.xmlconfig.CounterParty
- CounterParty(CounterParty.CounterPartyBuilder<?, ?>) - Constructor for class swiss.trustbroker.federation.xmlconfig.CounterParty
- CounterParty.CounterPartyBuilder<C,
B> - Class in swiss.trustbroker.federation.xmlconfig - CounterPartyBuilder() - Constructor for class swiss.trustbroker.federation.xmlconfig.CounterParty.CounterPartyBuilder
- counterPartyDefault(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.WsTrust.WsTrustBuilder
-
For CPs use this
WsTrustsetting as default for all RPs used in combination with this CP. - CP - Enum constant in enum class swiss.trustbroker.saml.dto.ClaimSource
- CP_ISSUER_LABEL - Static variable in class swiss.trustbroker.metrics.service.MetricsService
- CP_RESPONSE - Enum constant in enum class swiss.trustbroker.audit.dto.AuditDto.AttributeSource
- cpAttrOriginIssuer(String) - Method in class swiss.trustbroker.saml.dto.ResponseParameters.ResponseParametersBuilder
- cpBackendClientCredential(Credential) - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsParty.ClaimsPartyBuilder
- cpBackendTrustCredentials(List<Credential>) - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsParty.ClaimsPartyBuilder
- cpDecryptionCredentials(List<Credential>) - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsParty.ClaimsPartyBuilder
- cpId(String) - Method in class swiss.trustbroker.saml.dto.SsoParticipant.SsoParticipantBuilder
- cpIssuer(String) - Method in class swiss.trustbroker.audit.dto.AuditDto.AuditDtoBuilder
- cpIssuerId(String) - Method in class swiss.trustbroker.sessioncache.dto.SsoSessionParticipant.SsoSessionParticipantBuilder
- cpJwks(List<JWK>) - Method in class swiss.trustbroker.federation.xmlconfig.OidcClient.OidcClientBuilder
- cpNameId(String) - Method in class swiss.trustbroker.audit.dto.AuditDto.AuditDtoBuilder
- cpResponse(CpResponse) - Method in class swiss.trustbroker.sessioncache.dto.StateData.StateDataBuilder
- CpResponse - Class in swiss.trustbroker.saml.dto
-
This class implement the processing context which is the core of the XTB processing model according.
- CpResponse() - Constructor for class swiss.trustbroker.saml.dto.CpResponse
- CpResponse(String, String, String, String, String, String, String, List<String>, String, String, String, String, String, String, List<String>, String, String, String, String, String, String, Set<String>, String, Map<String, String>, Map<Definition, List<String>>, Map<Definition, List<String>>, IdmLookup, Map<Definition, List<String>>, int, Map<Definition, List<String>>, int, Map<Definition, List<String>>, Map<String, Object>, Map<Object, Object>, Set<String>) - Constructor for class swiss.trustbroker.saml.dto.CpResponse
-
Creates a new
CpResponseinstance. - CpResponse(CpResponse.CpResponseBuilder<?, ?>) - Constructor for class swiss.trustbroker.saml.dto.CpResponse
- CpResponse.CpResponseBuilder<C,
B> - Class in swiss.trustbroker.saml.dto - CpResponseBuilder() - Constructor for class swiss.trustbroker.saml.dto.CpResponse.CpResponseBuilder
- cpTrustCredential(List<Credential>) - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsParty.ClaimsPartyBuilder
- create(String, String, String, Long) - Method in class swiss.trustbroker.sessioncache.service.ArtifactStorageService
- createAssertion(StateData, CpResponse, ResponseParameters) - Method in class swiss.trustbroker.saml.util.ResponseFactory
- createAttributes(String, ConstAttributes, Map<Definition, List<String>>, String, Map<Definition, List<String>>, Map<Definition, List<String>>) - Static method in class swiss.trustbroker.saml.util.ResponseFactory
- createAuditLogBuilder(String) - Method in interface swiss.trustbroker.audit.service.AuditLogger
- createAuditLogBuilder(String) - Method in class swiss.trustbroker.audit.service.DefaultAuditLogger
- createAuditLogBuilder(String) - Method in class swiss.trustbroker.audit.service.OpsAuditLogger
- createAuthnRequest(ClaimsParty, StateData, QoaSpec, String) - Method in class swiss.trustbroker.oidc.client.service.AuthorizationCodeFlowService
-
Create Authorization Code Flow request URL with its parameters for auditing.
- createCpResponseAttributes(String, Map<Definition, List<String>>, String) - Static method in class swiss.trustbroker.saml.util.ResponseFactory
- createDecoder(RegisteredClient) - Method in class swiss.trustbroker.oidc.CustomJwtClientAssertionDecoderFactory
- createDefaultAssertionValidator() - Static method in class swiss.trustbroker.oidc.opensaml5.OpenSaml5AuthenticationProvider
-
Construct a default strategy for validating each SAML 2.0 Assertion and associated
Authenticationtoken - createDefaultAssertionValidator(Converter<OpenSaml5AuthenticationProvider.AssertionToken, ValidationContext>) - Static method in class swiss.trustbroker.oidc.opensaml5.OpenSaml5AuthenticationProvider
- createDefaultAssertionValidatorWithParameters(Consumer<Map<String, Object>>) - Static method in class swiss.trustbroker.oidc.opensaml5.OpenSaml5AuthenticationProvider
-
Construct a default strategy for validating each SAML 2.0 Assertion and associated
Authenticationtoken - createDefaultResponseAuthenticationConverter() - Static method in class swiss.trustbroker.oidc.opensaml5.OpenSaml5AuthenticationProvider
-
Construct a default strategy for converting a SAML 2.0 Response and
Authenticationtoken into aSaml2Authentication - createDefaultResponseValidator() - Static method in class swiss.trustbroker.oidc.opensaml5.OpenSaml5AuthenticationProvider
-
Construct a default strategy for validating the SAML 2.0 Response
- createEmptySession() - Method in class swiss.trustbroker.oidc.session.TomcatSessionManager
- createHttpClient(OidcClient, Certificates, URI) - Method in class swiss.trustbroker.oidc.OidcHttpClientProvider
- createJWK() - Method in class swiss.trustbroker.sessioncache.service.JwkCacheService
- createNameId(CpResponse) - Static method in class swiss.trustbroker.saml.util.ResponseFactory
- createOidcClientCookie(String, String, int, boolean, String) - Static method in class swiss.trustbroker.oidc.session.OidcSessionSupport
- createOidcException(String, String, String) - Static method in class swiss.trustbroker.oidc.OidcExceptionHelper
- createOidcSsoSessionCookie(String, String, HttpServletRequest, RelyingPartyDefinitions, TrustBrokerProperties) - Static method in class swiss.trustbroker.oidc.session.OidcSessionSupport
- createRequestSecToken(WsTrustRstRequest) - Method in class swiss.trustbroker.wstrustclient.service.WsTrustSoapClientBase
- createSamlAssertion(CpResponse, ConstAttributes, List<String>, ResponseParameters, List<Attribute>) - Static method in class swiss.trustbroker.saml.util.ResponseFactory
- createSession(String) - Method in class swiss.trustbroker.oidc.session.TomcatSessionManager
- createTransformer() - Static method in class swiss.trustbroker.wstrustclient.service.WsTrustSoapClientBase
- createUnmarshaller(Class<?>) - Static method in class swiss.trustbroker.homerealmdiscovery.util.XmlConfigUtil
- createUserDetailsAttributes(Map<Definition, List<String>>, String) - Static method in class swiss.trustbroker.saml.util.ResponseFactory
- credential(Credential) - Method in class swiss.trustbroker.oidc.OidcEncryptionKeystoreService.EncryptionParams.EncryptionParamsBuilder
- credential(Credential) - Method in class swiss.trustbroker.saml.dto.ResponseParameters.ResponseParametersBuilder
- CredentialService - Class in swiss.trustbroker.config
- CredentialService(TrustBrokerProperties) - Constructor for class swiss.trustbroker.config.CredentialService
- crossProtocol(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.SloResponse.SloResponseBuilder
-
Use notification cross-protocol (i.e.
- ctxClasses(String) - Method in class swiss.trustbroker.audit.dto.AuditDto.AuditDtoBuilder
- CustomAuthenticationEntryPoint - Class in swiss.trustbroker.oidc
- CustomAuthenticationEntryPoint(RelyingPartyDefinitions, TrustBrokerProperties) - Constructor for class swiss.trustbroker.oidc.CustomAuthenticationEntryPoint
- CustomBearerTokenResolver - Class in swiss.trustbroker.oidc
- CustomBearerTokenResolver(DefaultBearerTokenResolver, RelyingPartyDefinitions, TrustBrokerProperties) - Constructor for class swiss.trustbroker.oidc.CustomBearerTokenResolver
- CustomDPoPProofVerifier - Class in swiss.trustbroker.oidc
-
Copied from spring-security-oauth2-authorization-server: org.springframework.security.oauth2.server.authorization.authentication.DPoPProofVerifier That class is final and the method package private.
- CustomFailureHandler - Class in swiss.trustbroker.oidc
- CustomFailureHandler(String, RelyingPartyDefinitions, TrustBrokerProperties) - Constructor for class swiss.trustbroker.oidc.CustomFailureHandler
- customIssuer(String) - Method in class swiss.trustbroker.saml.dto.CpResponse.CpResponseBuilder
-
Override RP response issuer.
- customize(JwtEncodingContext) - Method in class swiss.trustbroker.oidc.TokenExchangeResponseCustomizer
- customizeProperties(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.ProfileSelection.ProfileSelectionBuilder
-
Apply name/value transformation for CustomProperties (if true regardless of n2k).
- customizeTomcat(TomcatSessionManager) - Method in class swiss.trustbroker.config.WebConfiguration
- customizeUnits(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.ProfileSelection.ProfileSelectionBuilder
-
Apply name/value transformation for UnitProperties if n2k=true.
- CustomJwtAudValidator - Class in swiss.trustbroker.oidc
- CustomJwtAudValidator() - Constructor for class swiss.trustbroker.oidc.CustomJwtAudValidator
- CustomJwtClientAssertionDecoderFactory - Class in swiss.trustbroker.oidc
- CustomJwtClientAssertionDecoderFactory(RelyingPartyDefinitions, TrustBrokerProperties, JwtDecoder) - Constructor for class swiss.trustbroker.oidc.CustomJwtClientAssertionDecoderFactory
- CustomJwtEncoder - Class in swiss.trustbroker.oidc
- CustomJwtEncoder(TrustBrokerProperties, RelyingPartyDefinitions, JWKSource<SecurityContext>, OidcEncryptionKeystoreService) - Constructor for class swiss.trustbroker.oidc.CustomJwtEncoder
- CustomJwtTimestampValidator - Class in swiss.trustbroker.oidc
- CustomJwtTimestampValidator(OidcClient, TrustBrokerProperties) - Constructor for class swiss.trustbroker.oidc.CustomJwtTimestampValidator
- CustomLogging - Annotation Interface in swiss.trustbroker.audit.dto
-
DTO field needs to be logged with a custom implementation
- CustomLogoutSuccessHandler - Class in swiss.trustbroker.oidc
- CustomLogoutSuccessHandler(ClientConfigInMemoryRepository, TrustBrokerProperties, RelyingPartyDefinitions, CustomOAuth2AuthorizationService, SsoService, VelocityEngine) - Constructor for class swiss.trustbroker.oidc.CustomLogoutSuccessHandler
- CustomOAuth2AuthenticationProviderUtils - Class in swiss.trustbroker.oidc
-
Copied from spring-security-oauth2-authorization-server: org.springframework.security.oauth2.server.authorization.authentication.OAuth2AuthenticationProviderUtils That class is final and the method package private.
- CustomOAuth2AuthorizationService - Class in swiss.trustbroker.oidc
- CustomOAuth2AuthorizationService(JdbcOperations, RegisteredClientRepository, TrustBrokerProperties, GlobalExceptionHandler, Clock, MetricsService) - Constructor for class swiss.trustbroker.oidc.CustomOAuth2AuthorizationService
- CustomOAuth2EndpointUtils - Class in swiss.trustbroker.oidc
-
Utility methods for the OAuth 2.0 Protocol Endpoints.
- CustomOAuth2TokenExchangeAuthenticationConverter - Class in swiss.trustbroker.oidc
-
Token exchange authentication converter.Copied from spring-security-oauth2-authorization-server: org.springframework.security.oauth2.server.authorization.web.authentication.OAuth2TokenExchangeAuthenticationConverter.
- CustomOAuth2TokenExchangeAuthenticationConverter() - Constructor for class swiss.trustbroker.oidc.CustomOAuth2TokenExchangeAuthenticationConverter
- CustomOAuth2TokenExchangeAuthenticationProvider - Class in swiss.trustbroker.oidc
-
Token exchange handler endpoint.
- CustomOAuth2TokenExchangeAuthenticationProvider(ClientConfigInMemoryRepository, CustomOAuth2AuthorizationService, OidcMetadataCacheService, RelyingPartyDefinitions, TrustBrokerProperties, RelyingPartyService, RelyingPartySetupService, QoaMappingService, OAuth2TokenGenerator<OAuth2Token>) - Constructor for class swiss.trustbroker.oidc.CustomOAuth2TokenExchangeAuthenticationProvider
- CustomQoa - Class in swiss.trustbroker.mapping.dto
- CustomQoa(String, int) - Constructor for class swiss.trustbroker.mapping.dto.CustomQoa
- CustomRedirectUriValidator - Class in swiss.trustbroker.oidc
-
Partially copied from spring-security-oauth2-authorization-server: org.springframework.security.oauth2.server.authorization.authentication.OAuth2AuthorizationCodeRequestAuthenticationValidator Javadoc of original class: A
Consumerproviding access to theOAuth2AuthorizationCodeRequestAuthenticationContextcontaining anOAuth2AuthorizationCodeRequestAuthenticationTokenand is the defaultauthentication validatorused for validating specific OAuth 2.0 Authorization Request parameters used in the Authorization Code Grant. - CustomRedirectUriValidator() - Constructor for class swiss.trustbroker.oidc.CustomRedirectUriValidator
- CustomRefreshTokenGenerator - Class in swiss.trustbroker.oidc
- CustomRefreshTokenGenerator(JwtEncoder, JWKSource<SecurityContext>, OAuth2RefreshTokenGenerator, TrustBrokerProperties, RelyingPartyDefinitions) - Constructor for class swiss.trustbroker.oidc.CustomRefreshTokenGenerator
- CustomRelyingPartyRegistrationRepository - Class in swiss.trustbroker.oidc
- CustomRelyingPartyRegistrationRepository(RelyingPartyDefinitions, OidcProperties, TrustBrokerProperties) - Constructor for class swiss.trustbroker.oidc.CustomRelyingPartyRegistrationRepository
- CustomSessionRegistry - Class in swiss.trustbroker.oidc
-
No-op SessionRegistry - sessions are handled in the DB.
- CustomSessionRegistry() - Constructor for class swiss.trustbroker.oidc.CustomSessionRegistry
- CustomTokenIntrospectionAuthenticationProvider - Class in swiss.trustbroker.oidc
-
Used to check tokens for validity and content on the OIDC provider org.springframework.security.oauth2.server.authorization.authentication.OAuth2TokenIntrospectionAuthenticationProvider NOTE We copied this class including their to-do remarks because this one does OIDC and in the XTB set-up the default one does SAML2 introspection.
- CustomTokenIntrospectionAuthenticationProvider(ClientConfigInMemoryRepository, OAuth2AuthorizationService, RelyingPartyDefinitions, TrustBrokerProperties) - Constructor for class swiss.trustbroker.oidc.CustomTokenIntrospectionAuthenticationProvider
- CustomTokenRevocationAuthenticationProvider - Class in swiss.trustbroker.oidc
-
Revocation handler endpoint.
- CustomTokenRevocationAuthenticationProvider(OAuth2AuthorizationService, TrustBrokerProperties) - Constructor for class swiss.trustbroker.oidc.CustomTokenRevocationAuthenticationProvider
- CustomUserInfoAuthenticationProvider - Class in swiss.trustbroker.oidc
- CustomUserInfoAuthenticationProvider(OAuth2AuthorizationService, JwtAuthenticationProvider, OidcUserInfoAuthenticationProvider) - Constructor for class swiss.trustbroker.oidc.CustomUserInfoAuthenticationProvider
- CustomUserInfoResponseHandler - Class in swiss.trustbroker.oidc
- CustomUserInfoResponseHandler(RelyingPartyDefinitions, TrustBrokerProperties, ObjectMapper, JWKSource<SecurityContext>, OidcEncryptionKeystoreService) - Constructor for class swiss.trustbroker.oidc.CustomUserInfoResponseHandler
D
- dataEncryptionAlgorithm(String) - Method in class swiss.trustbroker.federation.xmlconfig.Encryption.EncryptionBuilder
-
Data encryption algorithm.
- DATE_ISO - Enum constant in enum class swiss.trustbroker.federation.xmlconfig.ClaimsMapper
- DATE_LOCAL - Enum constant in enum class swiss.trustbroker.federation.xmlconfig.ClaimsMapper
- debugEnabledValue(String) - Method in class swiss.trustbroker.config.dto.Support.SupportBuilder
-
Value of the cookie or header signaling debug ON e.g.
- debugMarkerName(String) - Method in class swiss.trustbroker.config.dto.Support.SupportBuilder
-
HTTP cookie or header name identifying the debug session.
- decodeSamlArtifactRequest(HttpServletRequest) - Method in class swiss.trustbroker.saml.service.ArtifactResolutionService
- decodeSamlMessage(MessageContext) - Method in class swiss.trustbroker.saml.controller.AbstractSamlController
- decodeUrlParameter(String) - Static method in class swiss.trustbroker.util.ApiSupport
- deduplicatedCpAttributes(CpResponse, List<String>, ConstAttributes) - Static method in class swiss.trustbroker.mapping.service.ClaimsMapperService
- deduplicatedRpAttributes(Map<Definition, List<String>>, Map<Definition, List<String>>, ConstAttributes) - Method in class swiss.trustbroker.mapping.service.ClaimsMapperService
- Default - Annotation Interface in swiss.trustbroker.federation.xmlconfig
-
Annotation with default value for a field.
- DEFAULT_FRAME_OPTIONS - Static variable in class swiss.trustbroker.config.dto.FrameOptionsPolicies
- DEFAULT_HEADERS - Static variable in class swiss.trustbroker.util.CorsSupport
- DEFAULT_MAXAGE - Static variable in class swiss.trustbroker.util.CorsSupport
- DEFAULT_METHODS - Static variable in class swiss.trustbroker.util.CorsSupport
- DEFAULT_ORIGINS - Static variable in class swiss.trustbroker.util.CorsSupport
- DefaultAuditLogger - Class in swiss.trustbroker.audit.service
-
Regular audit logger that audits all details.
- DefaultAuditLogger() - Constructor for class swiss.trustbroker.audit.service.DefaultAuditLogger
- defaultCsp() - Method in class swiss.trustbroker.util.HeaderBuilder
- defaultFrameOptions() - Method in class swiss.trustbroker.util.HeaderBuilder
- DefaultIdmStatusPolicyCallback - Class in swiss.trustbroker.homerealmdiscovery.util
- DefaultIdmStatusPolicyCallback(CpResponse) - Constructor for class swiss.trustbroker.homerealmdiscovery.util.DefaultIdmStatusPolicyCallback
- defaultLanguage(String) - Method in class swiss.trustbroker.config.dto.GuiProperties.GuiPropertiesBuilder
-
Default language for the UI.
- defaultNames() - Static method in class swiss.trustbroker.federation.xmlconfig.Scope
- defaultQoa(String) - Method in class swiss.trustbroker.config.dto.QualityOfAuthenticationConfig.QualityOfAuthenticationConfigBuilder
-
Default Qoa value.
- defaultQoa(String) - Method in class swiss.trustbroker.federation.xmlconfig.Qoa.QoaBuilder
-
Default Qoa if there is none in the response
- DefaultUtil - Class in swiss.trustbroker.util
-
Handle default values defined via
@Defaultannotation. - defaultValue(String) - Method in class swiss.trustbroker.config.dto.CookieProperties.CookiePropertiesBuilder
-
Optional cookie default value.
- defaultValue(String) - Method in class swiss.trustbroker.homerealmdiscovery.dto.CookieConfig.CookieConfigBuilder
- defaultValues() - Static method in enum class swiss.trustbroker.federation.xmlconfig.AuthorizationGrantType
- defaultValues() - Static method in enum class swiss.trustbroker.federation.xmlconfig.ClientAuthenticationMethod
- defaultValues() - Static method in class swiss.trustbroker.federation.xmlconfig.Scope
- definition(String) - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsProviderMappings.ClaimsProviderMappingsBuilder
-
Define a CLaimsProviderMappings.xml definition/profile
- Definition - Class in swiss.trustbroker.federation.xmlconfig
-
Attribute definition.
- Definition() - Constructor for class swiss.trustbroker.federation.xmlconfig.Definition
- Definition(String) - Constructor for class swiss.trustbroker.federation.xmlconfig.Definition
- Definition(String, String) - Constructor for class swiss.trustbroker.federation.xmlconfig.Definition
- Definition(String, String, String) - Constructor for class swiss.trustbroker.federation.xmlconfig.Definition
- Definition(String, String, String, String, String, Boolean, Multivalued, String, ClaimsMapper, String, Boolean, String, String, Boolean) - Constructor for class swiss.trustbroker.federation.xmlconfig.Definition
-
Deprecated.use mappers
- Definition(AttributeName) - Constructor for class swiss.trustbroker.federation.xmlconfig.Definition
- DEFINITION_PATH - Static variable in class swiss.trustbroker.homerealmdiscovery.util.RelyingPartySetupUtil
- Definition.DefinitionBuilder - Class in swiss.trustbroker.federation.xmlconfig
- DefinitionDeserializer - Class in swiss.trustbroker.saml.dto
-
Because jackson cannot properly deal with complex map keys, custom deserialization support on maps are necessary.
- DefinitionDeserializer() - Constructor for class swiss.trustbroker.saml.dto.DefinitionDeserializer
- definitions(List<AttributeProperties>) - Method in class swiss.trustbroker.config.dto.AttributeConfig.AttributeConfigBuilder
-
List of attributes.
- definitions(List<Definition>) - Method in class swiss.trustbroker.federation.xmlconfig.AttributesSelection.AttributesSelectionBuilder
-
List of attribute definitions.
- DefinitionSerializer - Class in swiss.trustbroker.saml.dto
-
Because jackson cannot properly deal with complex map keys, custom serialization support on maps are necessary.
- DefinitionSerializer() - Constructor for class swiss.trustbroker.saml.dto.DefinitionSerializer
- DefinitionUtil - Class in swiss.trustbroker.homerealmdiscovery.util
- delegateOrigin(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.SecurityPolicies.SecurityPoliciesBuilder
-
Control CP AuthnRequest scopes and RP Attribute OriginalIssuer.
- delete(String, String) - Method in class swiss.trustbroker.sessioncache.service.ArtifactStorageService
- deleteAllInBatchByDeleteTimestampBefore(Timestamp) - Method in interface swiss.trustbroker.sessioncache.repo.JwkCacheRepository
- deleteAllInBatchByExpirationTimestampBefore(Timestamp) - Method in interface swiss.trustbroker.sessioncache.repo.ArtifactCacheRepository
- deleteAllInBatchByExpirationTimestampBefore(Timestamp) - Method in interface swiss.trustbroker.sessioncache.repo.StateCacheRepository
- deleteContext(String) - Method in class swiss.trustbroker.sessioncache.service.ArtifactStorageService
- deleteExpiredTokens() - Method in class swiss.trustbroker.oidc.CustomOAuth2AuthorizationService
- deleteWithVersion(long, String, String) - Method in class swiss.trustbroker.sessioncache.service.ArtifactStorageService
- description(String) - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsProvider.ClaimsProviderBuilder
-
Text displayed in the CP tile.
- description(String) - Method in class swiss.trustbroker.saml.dto.UiObject.UiObjectBuilder
-
Text displayed in the CP tile.
- deserializeKey(String, DeserializationContext) - Method in class swiss.trustbroker.saml.dto.DefinitionDeserializer
- destination() - Method in record class swiss.trustbroker.oidc.client.dto.AuthorizationCodeFlowRequest
-
Returns the value of the
destinationrecord component. - destination(String) - Method in class swiss.trustbroker.audit.dto.AuditDto.AuditDtoBuilder
- destination(String) - Method in class swiss.trustbroker.oidc.client.dto.AuthorizationCodeFlowRequest.AuthorizationCodeFlowRequestBuilder
- destination(String) - Method in class swiss.trustbroker.saml.dto.CpResponse.CpResponseBuilder
-
AuthnRequest.AssertionConsumerUrl from our AuthnRequest.
- DESTINATION_LABEL - Static variable in class swiss.trustbroker.metrics.service.MetricsService
- DETAIL_NAME - Static variable in class swiss.trustbroker.audit.dto.AuditDto
- DETAILS_LOGGER_POSTFIX - Static variable in class swiss.trustbroker.audit.service.BaseAuditLogger
- DETECT - Enum constant in enum class swiss.trustbroker.federation.xmlconfig.ProvisioningMode
-
Detect and log required provisioning.
- DEVICE_CODE - Enum constant in enum class swiss.trustbroker.federation.xmlconfig.AuthorizationGrantType
- DEVICE_INFO_URL - Static variable in class swiss.trustbroker.util.ApiSupport
- deviceId(String) - Method in class swiss.trustbroker.audit.dto.AuditDto.AuditDtoBuilder
- deviceId(String) - Method in class swiss.trustbroker.sessioncache.dto.StateData.StateDataBuilder
- deviceIdAccepted(String) - Method in class swiss.trustbroker.audit.dto.AuditDto.AuditDtoBuilder
- DeviceInfoReq - Class in swiss.trustbroker.saml.dto
- DeviceInfoReq() - Constructor for class swiss.trustbroker.saml.dto.DeviceInfoReq
- digestMethod(String) - Method in class swiss.trustbroker.config.dto.AccessRequestConfig.AccessRequestConfigBuilder
-
Access requiest digest method.
- digestMethod(String) - Method in class swiss.trustbroker.federation.xmlconfig.Signature.SignatureBuilder
-
Digest algorithm.
- disableACUrl(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsParty.ClaimsPartyBuilder
-
This flag allows to disable setting the AssertionConsumerServiceURL in the AuthnRequest towards the CP as some CPs do fail when it is set (correctly or incorrectly).
- disabled(UiDisableReason) - Method in class swiss.trustbroker.saml.dto.UiObject.UiObjectBuilder
-
disabled signals to the frontend to inactivate the tile.
- discardAllErrorsInRedirect(String) - Static method in class swiss.trustbroker.oidc.tx.FragmentUtil
- discardOidcClientCookie(String, HttpServletResponse, boolean) - Static method in class swiss.trustbroker.oidc.session.OidcSessionSupport
- discardOidcGlobalCookie(HttpServletResponse, boolean) - Static method in class swiss.trustbroker.oidc.session.OidcSessionSupport
- displayClaims(List<String>) - Method in class swiss.trustbroker.federation.xmlconfig.ProfileSelection.ProfileSelectionBuilder
-
Additional information to be displayed for profile selection.
- displayName(String) - Method in class swiss.trustbroker.federation.xmlconfig.ProfileSelection.ProfileSelectionBuilder
-
Attribute used as displayName for profile selection UI.
- doAppContinue() - Method in class swiss.trustbroker.federation.xmlconfig.Flow
- doAppRedirect() - Method in class swiss.trustbroker.federation.xmlconfig.Flow
- doAppRedirect() - Method in class swiss.trustbroker.saml.dto.ResponseStatus
- doFilter(ServletRequest, ServletResponse, FilterChain) - Method in class swiss.trustbroker.gui.ThemeFilter
- doFilter(ServletRequest, ServletResponse, FilterChain) - Method in class swiss.trustbroker.oidc.tx.OidcTxFilter
- doFilter(ServletRequest, ServletResponse, FilterChain) - Method in class swiss.trustbroker.waf.AccessFilter
- doFilter(ServletRequest, ServletResponse, FilterChain) - Method in class swiss.trustbroker.waf.CatchAllAndOpTraceFilter
- doFilter(OidcTxRequestWrapper, HttpServletResponse, FilterChain) - Method in class swiss.trustbroker.oidc.tx.SessionTxWrapper
- doFilterInternal(HttpServletRequest, HttpServletResponse, FilterChain) - Method in class swiss.trustbroker.oidc.LogTokenRequestsFilter
- doFinalProfileSelection(ProfileSelectionData, RelyingPartyConfig, CpResponseData, SessionState) - Method in class swiss.trustbroker.profileselection.service.LdapIdentitySelectionService
- doFinalProfileSelection(ProfileSelectionData, RelyingPartyConfig, CpResponseData, SessionState) - Method in class swiss.trustbroker.profileselection.service.NoOpProfileSelectionService
- doInitialProfileSelection(ProfileSelectionData, RelyingPartyConfig, CpResponseData, SessionState) - Method in class swiss.trustbroker.profileselection.service.LdapIdentitySelectionService
- doInitialProfileSelection(ProfileSelectionData, RelyingPartyConfig, CpResponseData, SessionState) - Method in class swiss.trustbroker.profileselection.service.NoOpProfileSelectionService
- domain(String) - Method in class swiss.trustbroker.config.dto.CookieProperties.CookiePropertiesBuilder
-
Optional cookie domain
- domain(String) - Method in class swiss.trustbroker.homerealmdiscovery.dto.CookieConfig.CookieConfigBuilder
- doSignArtifactResolve(boolean) - Method in class swiss.trustbroker.config.dto.SecurityChecks.SecurityChecksBuilder
-
Sign outgoing ArtifactResolve messages.
- doSignArtifactResolve(boolean) - Method in class swiss.trustbroker.federation.xmlconfig.CounterParty
- doSignArtifactResolve(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.SecurityPolicies.SecurityPoliciesBuilder
-
Flag allows to sign outbound SAML artifact resolve messages for maximum security.
- doSignArtifactResponse(boolean) - Method in class swiss.trustbroker.config.dto.SecurityChecks.SecurityChecksBuilder
-
Sign outgoing ArtifactResponse messages.
- doSignAssertions(boolean) - Method in class swiss.trustbroker.config.dto.SecurityChecks.SecurityChecksBuilder
-
Sign Assertion in outgoing messages.
- doSignFailureResponse(boolean) - Method in class swiss.trustbroker.config.dto.SecurityChecks.SecurityChecksBuilder
-
Sign outgoing Response messages with failure state.
- doSignResponse(boolean) - Method in class swiss.trustbroker.config.dto.WsTrustConfig.WsTrustConfigBuilder
-
Sign SOAP responses.
- doSignSamlMessages(boolean) - Method in class swiss.trustbroker.config.dto.AccessRequestConfig.AccessRequestConfigBuilder
-
Sign outgoing Access Request SAML messages (not re-using SecurityChecks.doSignSuccessResponse) Assertion signature is controlled by SecurityChecks.doSignAssertions for AccessRequest too.
- doSignSuccessResponse(boolean) - Method in class swiss.trustbroker.config.dto.SecurityChecks.SecurityChecksBuilder
-
Sign outgoing Response messages with success state.
- doSsoProfileSelection(ProfileSelectionData, RelyingPartyConfig, CpResponseData, SessionState) - Method in class swiss.trustbroker.profileselection.service.LdapIdentitySelectionService
- doSsoProfileSelection(ProfileSelectionData, RelyingPartyConfig, CpResponseData, SessionState) - Method in class swiss.trustbroker.profileselection.service.NoOpProfileSelectionService
- DOWN - Enum constant in enum class swiss.trustbroker.monitoring.dto.Status
- DOWN - Static variable in class swiss.trustbroker.monitoring.dto.MonitoringResponse
- downgradeToMaximumRequested(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.AcClass.AcClassBuilder
-
If this Qoa is returned by the CP, but was not requested by the RP, downgrade it to the maximum Qoa requested by the RP.
- dropAttrSelectionIfNoFilter(boolean) - Method in class swiss.trustbroker.config.dto.SamlProperties.SamlPropertiesBuilder
-
Drop all CP attributes if there is no AttributeSelection defined
- dropClaimsProvider(String) - Method in class swiss.trustbroker.saml.dto.RpRequest
- dropDuplicatedAttributeFromOriginalIssuer(List<String>) - Method in class swiss.trustbroker.saml.dto.ResponseParameters.ResponseParametersBuilder
- DROPPED_RESPONSE - Enum constant in enum class swiss.trustbroker.audit.dto.AuditDto.AttributeSource
- dropUnmappable(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.Qoa.QoaBuilder
-
Drop unmapped Qoa from the request
Default: false - dropUnmappableQoas() - Method in class swiss.trustbroker.federation.xmlconfig.Qoa
E
- ELEMENT_LOCAL_NAME - Static variable in interface swiss.trustbroker.wstrustclient.xml.ClaimType
- ELEMENT_NAME - Static variable in interface swiss.trustbroker.wstrustclient.xml.ClaimType
- EMAIL - Enum constant in enum class swiss.trustbroker.federation.xmlconfig.ClaimsMapper
- EMAIL - Static variable in class swiss.trustbroker.federation.xmlconfig.Scope
- emailAddress(String) - Method in class swiss.trustbroker.homerealmdiscovery.dto.SupportInfo.SupportInfoBuilder
- enableAppSpecificQuery(boolean) - Method in class swiss.trustbroker.config.dto.AnnouncementConfig.AnnouncementConfigBuilder
-
App specific queries enabled.
- enabled() - Method in class swiss.trustbroker.federation.xmlconfig.AccessRequest
- enabled() - Method in class swiss.trustbroker.federation.xmlconfig.FlowPolicies
- enabled(boolean) - Method in class swiss.trustbroker.config.dto.AccessRequestConfig.AccessRequestConfigBuilder
-
Globally enable the feature.
- enabled(boolean) - Method in class swiss.trustbroker.config.dto.AnnouncementConfig.AnnouncementConfigBuilder
-
Disable the service to discard all announcements.
- enabled(boolean) - Method in class swiss.trustbroker.config.dto.IdmConfig.IdmConfigBuilder
-
IDM enabled.
- enabled(boolean) - Method in class swiss.trustbroker.config.dto.MonitoringConfig.MonitoringConfigBuilder
-
Enable the monitoring API.
- enabled(boolean) - Method in class swiss.trustbroker.config.dto.ProfileSelectionConfig.ProfileSelectionConfigBuilder
-
Globally enable the feature.
- enabled(boolean) - Method in class swiss.trustbroker.config.dto.SamlProperties.SamlPropertiesBuilder
-
SAML protocol enabled.
- enabled(boolean) - Method in class swiss.trustbroker.config.dto.SsoConfig.SsoConfigBuilder
-
Globally enable the feature.
- enabled(boolean) - Method in class swiss.trustbroker.config.dto.Support.SupportBuilder
-
Feature flag
- enabled(boolean) - Method in class swiss.trustbroker.config.dto.WsFedConfig.WsFedConfigBuilder
-
Feature toggle allowing to disable the WS-Fed endpoint.
- enabled(boolean) - Method in class swiss.trustbroker.config.dto.WsTrustConfig.WsTrustConfigBuilder
-
Feature toggle allowing to disable the WSTrust endpoint
Default: false (since 1.13.0) - enabled(boolean) - Method in class swiss.trustbroker.federation.xmlconfig.Sso.SsoBuilder
-
Enable this configuration.
- enabled(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.AccessRequest.AccessRequestBuilder
-
Enable this configuration.
- enabled(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.AnnouncementRpConfig.AnnouncementRpConfigBuilder
-
Enable this configuration.
- enabled(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsProvider.ClaimsProviderBuilder
-
Allow pre-configuration of ClaimsProviderMappings with enabled or disabled ClaimsParty in profiles and only pick them per relying party in setup.
- enabled(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsProviderMappings.ClaimsProviderMappingsBuilder
-
Allow pre-configuration of ClaimsProviderMappings in profiles without considering the RP setup
- enabled(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.FlowPolicies.FlowPoliciesBuilder
-
Enable this configuration.
- enabled(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.Oidc.OidcBuilder
-
SAML protocol enabled.
- enabled(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.ProfileSelection.ProfileSelectionBuilder
-
Enable this feature
- enabled(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.Saml.SamlBuilder
-
SAML protocol enabled.
- enabled(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.WsTrust.WsTrustBuilder
-
WS-Trust protocol enabled.
- enabled(FeatureEnum) - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsParty.ClaimsPartyBuilder
-
Flag to enable/disable this CP.
- enabled(FeatureEnum) - Method in class swiss.trustbroker.federation.xmlconfig.RelyingParty.RelyingPartyBuilder
-
Flag to enable/disable this RP.
- enabled(ProvisioningMode) - Method in class swiss.trustbroker.federation.xmlconfig.Provisioning.ProvisioningBuilder
-
Enable IDM provisioning based on CP response.
- enableTrigger(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.AuthorizedApplication.AuthorizedApplicationBuilder
-
AccessRequest can be triggered by calling application.
- encode(JwtEncoderParameters) - Method in class swiss.trustbroker.oidc.CustomJwtEncoder
- encodeUrlParameter(String) - Static method in class swiss.trustbroker.util.ApiSupport
- encryption(Encryption) - Method in class swiss.trustbroker.federation.xmlconfig.Saml.SamlBuilder
-
SAML encryption configuration.
- Encryption - Class in swiss.trustbroker.federation.xmlconfig
-
This class describes the configuration of the SAML encryption for an RP.
- Encryption() - Constructor for class swiss.trustbroker.federation.xmlconfig.Encryption
- Encryption(String, String, EncryptionKeyPlacement, EncryptionKeyInfo) - Constructor for class swiss.trustbroker.federation.xmlconfig.Encryption
-
Creates a new
Encryptioninstance. - Encryption.EncryptionBuilder - Class in swiss.trustbroker.federation.xmlconfig
- encryptionAlgorithm(String) - Method in class swiss.trustbroker.federation.xmlconfig.OidcSecurityPolicies.OidcSecurityPoliciesBuilder
-
Encryption algorithm
Default: RSA-OAEP-256 - encryptionAlgorithm(String) - Method in class swiss.trustbroker.oidc.OidcEncryptionKeystoreService.EncryptionParams.EncryptionParamsBuilder
- EncryptionKeyInfo - Enum Class in swiss.trustbroker.federation.xmlconfig
-
Configuration for encryption Key Info.
- EncryptionKeyPlacement - Enum Class in swiss.trustbroker.federation.xmlconfig
-
Configuration for encryption key placement.
- encryptionKeystore(SignerKeystore) - Method in class swiss.trustbroker.federation.xmlconfig.Certificates.CertificatesBuilder
-
Keystore for encryption.
- encryptionKid(String) - Method in class swiss.trustbroker.federation.xmlconfig.OidcSecurityPolicies.OidcSecurityPoliciesBuilder
-
Encryption keyID
- encryptionMethod(String) - Method in class swiss.trustbroker.federation.xmlconfig.OidcSecurityPolicies.OidcSecurityPoliciesBuilder
-
Encryption method
Default: A256GCM - encryptionMethod(String) - Method in class swiss.trustbroker.oidc.OidcEncryptionKeystoreService.EncryptionParams.EncryptionParamsBuilder
- encryptionTruststore(SignerTruststore) - Method in class swiss.trustbroker.federation.xmlconfig.Certificates.CertificatesBuilder
-
Truststore for encryption verification.
- end() - Static method in class swiss.trustbroker.oidc.session.HttpExchangeSupport
- endpointReferenceAddress(String) - Method in class swiss.trustbroker.config.dto.AccessRequestConfig.AccessRequestConfigBuilder
-
Global default for ID in requests sent by the AccessRequest.
- endpointReferenceAddress(String) - Method in class swiss.trustbroker.federation.xmlconfig.AuthorizedApplication.AuthorizedApplicationBuilder
-
Overrides the RP ID in requests sent by the AccessRequest.
- endpointUrl(String) - Method in class swiss.trustbroker.config.dto.IdmConfig.IdmConfigBuilder
-
Endpoint URL of the IDM
- enforce() - Method in class swiss.trustbroker.federation.xmlconfig.Qoa
- enforce(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.Qoa.QoaBuilder
-
Enable QoA enforcement.
- enforceArtifactSignatureAlgorithms(boolean) - Method in class swiss.trustbroker.config.dto.SecurityChecks.SecurityChecksBuilder
-
Enforce allowed message signature algorithms for Artifact Resolution.
- enforceAssertionSignatureAlgorithms(boolean) - Method in class swiss.trustbroker.config.dto.SecurityChecks.SecurityChecksBuilder
-
Enforce allowed message signature algorithms for Assertions.
- enforceClientIp(boolean) - Method in class swiss.trustbroker.config.dto.WsTrustConfig.WsTrustConfigBuilder
-
Client IPs enforced if configured (
allowedClientIpRegex). - enforceNetwork(boolean) - Method in class swiss.trustbroker.config.dto.WsTrustConfig.WsTrustConfigBuilder
-
Client networks enforced if configured (
allowedNetworks). - enforceQoa(QoaConfig) - Static method in class swiss.trustbroker.mapping.util.QoaMappingUtil
- enforceQoa(QoaConfig, QoaConfig) - Static method in class swiss.trustbroker.mapping.util.QoaMappingUtil
- enforceQoaIfMissing(boolean) - Method in class swiss.trustbroker.config.dto.SecurityChecks.SecurityChecksBuilder
-
Reject request without getAuthnContextClassRef or Qoa configuration
Default: false - enforceRequestSignatureAlgorithms(boolean) - Method in class swiss.trustbroker.config.dto.SecurityChecks.SecurityChecksBuilder
-
Enforce allowed message signature algorithms for AuthnRequests.
- enforceResponseSignatureAlgorithms(boolean) - Method in class swiss.trustbroker.config.dto.SecurityChecks.SecurityChecksBuilder
-
Enforce allowed message signature algorithms for Responses.
- enrichResponseError(OidcProperties, Response, Collection<Saml2Error>) - Static method in class swiss.trustbroker.oidc.OidcExceptionHelper
- entryId(String) - Method in class swiss.trustbroker.audit.dto.AuditDto.AuditDtoBuilder
- entryPoint(RelyingPartyDefinitions) - Method in class swiss.trustbroker.oidc.OidcServerConfiguration
- equals(Object) - Method in class swiss.trustbroker.audit.dto.AuditDto
- equals(Object) - Method in class swiss.trustbroker.audit.dto.AuditDto.ResponseAttributeValue
- equals(Object) - Method in class swiss.trustbroker.audit.dto.AuditDto.ResponseAttributeValues
- equals(Object) - Method in class swiss.trustbroker.audit.dto.OidcAuditData
- equals(Object) - Method in class swiss.trustbroker.config.dto.AccessRequestConfig
- equals(Object) - Method in class swiss.trustbroker.config.dto.AdminAction
- equals(Object) - Method in class swiss.trustbroker.config.dto.AnnouncementConfig
- equals(Object) - Method in class swiss.trustbroker.config.dto.ArtifactResolution
- equals(Object) - Method in class swiss.trustbroker.config.dto.AttributeConfig
- equals(Object) - Method in class swiss.trustbroker.config.dto.AttributeProperties
- equals(Object) - Method in class swiss.trustbroker.config.dto.AuditConfig
- equals(Object) - Method in class swiss.trustbroker.config.dto.Banner
- equals(Object) - Method in class swiss.trustbroker.config.dto.ContentSecurityPolicies
- equals(Object) - Method in class swiss.trustbroker.config.dto.CookieProperties
- equals(Object) - Method in class swiss.trustbroker.config.dto.CorsPolicies
- equals(Object) - Method in class swiss.trustbroker.config.dto.FrameOptionsPolicies
- equals(Object) - Method in class swiss.trustbroker.config.dto.GuiProperties
- equals(Object) - Method in class swiss.trustbroker.config.dto.IdmConfig
- equals(Object) - Method in class swiss.trustbroker.config.dto.LdapStoreConfig
- equals(Object) - Method in class swiss.trustbroker.config.dto.MonitoringConfig
- equals(Object) - Method in class swiss.trustbroker.config.dto.NetworkConfig
- equals(Object) - Method in class swiss.trustbroker.config.dto.OidcIdentityProvider
- equals(Object) - Method in class swiss.trustbroker.config.dto.OidcIdpCredential
- equals(Object) - Method in class swiss.trustbroker.config.dto.OidcProperties
- equals(Object) - Method in class swiss.trustbroker.config.dto.OpsAuditConfig
- equals(Object) - Method in class swiss.trustbroker.config.dto.ProfileSelectionConfig
- equals(Object) - Method in class swiss.trustbroker.config.dto.QualityOfAuthenticationConfig
- equals(Object) - Method in class swiss.trustbroker.config.dto.RelyingPartyDefinitions
- equals(Object) - Method in class swiss.trustbroker.config.dto.SamlNamespace
- equals(Object) - Method in class swiss.trustbroker.config.dto.SamlProperties
- equals(Object) - Method in class swiss.trustbroker.config.dto.SecToken
- equals(Object) - Method in class swiss.trustbroker.config.dto.SecurityChecks
- equals(Object) - Method in class swiss.trustbroker.config.dto.SsoConfig
- equals(Object) - Method in class swiss.trustbroker.config.dto.StateCacheProperties
- equals(Object) - Method in class swiss.trustbroker.config.dto.Support
- equals(Object) - Method in class swiss.trustbroker.config.dto.TechUserProperties
- equals(Object) - Method in class swiss.trustbroker.config.dto.VersionInfo
- equals(Object) - Method in class swiss.trustbroker.config.dto.WsFedConfig
- equals(Object) - Method in class swiss.trustbroker.config.dto.WsTrustConfig
- equals(Object) - Method in class swiss.trustbroker.config.TrustBrokerProperties
- equals(Object) - Method in class swiss.trustbroker.federation.dto.ConfigElementStatus
- equals(Object) - Method in class swiss.trustbroker.federation.dto.ConfigStatusData
- equals(Object) - Method in class swiss.trustbroker.federation.xmlconfig.AccessRequest
- equals(Object) - Method in class swiss.trustbroker.federation.xmlconfig.AcClass
- equals(Object) - Method in class swiss.trustbroker.federation.xmlconfig.AccountSource
- equals(Object) - Method in class swiss.trustbroker.federation.xmlconfig.AcWhitelist
- equals(Object) - Method in class swiss.trustbroker.federation.xmlconfig.AnnouncementRpConfig
- equals(Object) - Method in class swiss.trustbroker.federation.xmlconfig.ArtifactBinding
- equals(Object) - Method in class swiss.trustbroker.federation.xmlconfig.AttributesSelection
- equals(Object) - Method in class swiss.trustbroker.federation.xmlconfig.Audiences
- equals(Object) - Method in class swiss.trustbroker.federation.xmlconfig.AuthorizationGrantTypes
- equals(Object) - Method in class swiss.trustbroker.federation.xmlconfig.AuthorizedApplication
- equals(Object) - Method in class swiss.trustbroker.federation.xmlconfig.AuthorizedApplications
- equals(Object) - Method in class swiss.trustbroker.federation.xmlconfig.Certificates
- equals(Object) - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsParty
- equals(Object) - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsProvider
- equals(Object) - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsProviderDefinitions
- equals(Object) - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsProviderMappings
- equals(Object) - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsProviderSetup
- equals(Object) - Method in class swiss.trustbroker.federation.xmlconfig.ClientAuthenticationMethods
- equals(Object) - Method in class swiss.trustbroker.federation.xmlconfig.ConstAttributes
- equals(Object) - Method in class swiss.trustbroker.federation.xmlconfig.CounterParty
- equals(Object) - Method in class swiss.trustbroker.federation.xmlconfig.Definition
- equals(Object) - Method in class swiss.trustbroker.federation.xmlconfig.Encryption
- equals(Object) - Method in class swiss.trustbroker.federation.xmlconfig.Flow
- equals(Object) - Method in class swiss.trustbroker.federation.xmlconfig.FlowPolicies
- equals(Object) - Method in class swiss.trustbroker.federation.xmlconfig.HomeName
- equals(Object) - Method in class swiss.trustbroker.federation.xmlconfig.IdmLookup
- equals(Object) - Method in class swiss.trustbroker.federation.xmlconfig.IdmQuery
- equals(Object) - Method in class swiss.trustbroker.federation.xmlconfig.Oidc
- equals(Object) - Method in class swiss.trustbroker.federation.xmlconfig.OidcClaimsSources
- equals(Object) - Method in class swiss.trustbroker.federation.xmlconfig.OidcClient
- equals(Object) - Method in class swiss.trustbroker.federation.xmlconfig.OidcSecurityPolicies
- equals(Object) - Method in class swiss.trustbroker.federation.xmlconfig.ProfileSelection
- equals(Object) - Method in class swiss.trustbroker.federation.xmlconfig.ProtocolEndpoints
- equals(Object) - Method in class swiss.trustbroker.federation.xmlconfig.Provisioning
- equals(Object) - Method in class swiss.trustbroker.federation.xmlconfig.Qoa
- equals(Object) - Method in class swiss.trustbroker.federation.xmlconfig.RelyingParty
- equals(Object) - Method in class swiss.trustbroker.federation.xmlconfig.RelyingPartySetup
- equals(Object) - Method in class swiss.trustbroker.federation.xmlconfig.Resources
- equals(Object) - Method in class swiss.trustbroker.federation.xmlconfig.Saml
- equals(Object) - Method in class swiss.trustbroker.federation.xmlconfig.Scopes
- equals(Object) - Method in class swiss.trustbroker.federation.xmlconfig.Script
- equals(Object) - Method in class swiss.trustbroker.federation.xmlconfig.Scripts
- equals(Object) - Method in class swiss.trustbroker.federation.xmlconfig.SecurityPolicies
- equals(Object) - Method in class swiss.trustbroker.federation.xmlconfig.Signature
- equals(Object) - Method in class swiss.trustbroker.federation.xmlconfig.SignerKeystore
- equals(Object) - Method in class swiss.trustbroker.federation.xmlconfig.SignerStore
- equals(Object) - Method in class swiss.trustbroker.federation.xmlconfig.SignerTruststore
- equals(Object) - Method in class swiss.trustbroker.federation.xmlconfig.SloResponse
- equals(Object) - Method in class swiss.trustbroker.federation.xmlconfig.Sso
- equals(Object) - Method in class swiss.trustbroker.federation.xmlconfig.SsoGroup
- equals(Object) - Method in class swiss.trustbroker.federation.xmlconfig.SsoGroupSetup
- equals(Object) - Method in class swiss.trustbroker.federation.xmlconfig.SubjectName
- equals(Object) - Method in class swiss.trustbroker.federation.xmlconfig.SubjectNameMappings
- equals(Object) - Method in class swiss.trustbroker.federation.xmlconfig.ValidationStatus
- equals(Object) - Method in class swiss.trustbroker.federation.xmlconfig.WsTrust
- equals(Object) - Method in class swiss.trustbroker.homerealmdiscovery.dto.CookieConfig
- equals(Object) - Method in class swiss.trustbroker.homerealmdiscovery.dto.GuiConfig
- equals(Object) - Method in class swiss.trustbroker.homerealmdiscovery.dto.ProfileRequest
- equals(Object) - Method in class swiss.trustbroker.homerealmdiscovery.dto.SessionRequest
- equals(Object) - Method in class swiss.trustbroker.homerealmdiscovery.dto.SupportInfo
- equals(Object) - Method in class swiss.trustbroker.mapping.dto.CustomQoa
- equals(Object) - Method in record class swiss.trustbroker.mapping.dto.QoaConfig
-
Indicates whether some other object is "equal to" this one.
- equals(Object) - Method in record class swiss.trustbroker.mapping.dto.QoaSpec
-
Indicates whether some other object is "equal to" this one.
- equals(Object) - Method in class swiss.trustbroker.monitoring.dto.MonitoringResponse
- equals(Object) - Method in record class swiss.trustbroker.oidc.client.dto.AuthorizationCodeFlowRequest
-
Indicates whether some other object is "equal to" this one.
- equals(Object) - Method in class swiss.trustbroker.oidc.client.dto.OpenIdProviderConfiguration
- equals(Object) - Method in class swiss.trustbroker.oidc.session.HttpExchangeSupport
- equals(Object) - Method in class swiss.trustbroker.oidc.session.SessionPrincipal
- equals(Object) - Method in class swiss.trustbroker.saml.dto.CpResponse
- equals(Object) - Method in class swiss.trustbroker.saml.dto.DeviceInfoReq
- equals(Object) - Method in class swiss.trustbroker.saml.dto.ResponseData
- equals(Object) - Method in class swiss.trustbroker.saml.dto.ResponseParameters
- equals(Object) - Method in class swiss.trustbroker.saml.dto.ResponseStatus
- equals(Object) - Method in class swiss.trustbroker.saml.dto.RpRequest
- equals(Object) - Method in class swiss.trustbroker.saml.dto.SsoParticipant
- equals(Object) - Method in class swiss.trustbroker.saml.dto.SsoParticipants
- equals(Object) - Method in class swiss.trustbroker.saml.dto.UiBanner
- equals(Object) - Method in class swiss.trustbroker.saml.dto.UiObject
- equals(Object) - Method in class swiss.trustbroker.saml.dto.UiObjects
- equals(Object) - Method in class swiss.trustbroker.saml.util.AssertionValidator.ExpectedAssertionValues
- equals(Object) - Method in class swiss.trustbroker.saml.util.AssertionValidator.MessageValidationResult
- equals(Object) - Method in class swiss.trustbroker.sessioncache.dto.AccessRequestSessionState
- equals(Object) - Method in class swiss.trustbroker.sessioncache.dto.ArtifactCacheEntity
- equals(Object) - Method in class swiss.trustbroker.sessioncache.dto.JwkCacheEntity
- equals(Object) - Method in class swiss.trustbroker.sessioncache.dto.Lifecycle
- equals(Object) - Method in class swiss.trustbroker.sessioncache.dto.SsoSessionParticipant
- equals(Object) - Method in class swiss.trustbroker.sessioncache.dto.SsoState
- equals(Object) - Method in class swiss.trustbroker.sessioncache.dto.StateData
- equals(Object) - Method in class swiss.trustbroker.sessioncache.dto.StateEntity
- equals(Object) - Method in class swiss.trustbroker.sso.dto.SloNotification
- equals(Object) - Method in record class swiss.trustbroker.sso.dto.SloResponseParameters
-
Indicates whether some other object is "equal to" this one.
- equals(Object) - Method in class swiss.trustbroker.sso.service.SsoService.SloState
- equals(Object) - Method in class swiss.trustbroker.sso.service.SsoService.SsoCookieNameParams
- equals(Object) - Method in class swiss.trustbroker.sso.service.SsoService.StateWithCookies
- equals(Object) - Method in class swiss.trustbroker.wstrustclient.dto.WsTrustRstRequest
- equals(Object) - Method in class swiss.trustbroker.wstrustclient.service.WsTrustSoapClientBase.MarshallingInfo
- equalsByNameOrNamespace(AttributeName, String) - Method in class swiss.trustbroker.federation.xmlconfig.Definition
- ERROR - Enum constant in enum class swiss.trustbroker.federation.dto.ConfigStatus
- ERROR - Enum constant in enum class swiss.trustbroker.federation.xmlconfig.Multivalued
-
Fail if multi-valued.
- ERROR_DESCRIPTION_PARAM - Static variable in class swiss.trustbroker.oidc.OidcExceptionHelper
- ERROR_PAGE - Static variable in class swiss.trustbroker.util.ApiSupport
- ERROR_PAGE_URL - Static variable in class swiss.trustbroker.util.ApiSupport
- ERROR_URI - Static variable in class swiss.trustbroker.oidc.OidcExceptionHelper
- ERROR_URI_PARAM - Static variable in class swiss.trustbroker.oidc.OidcExceptionHelper
- errors(Collection<String>) - Method in class swiss.trustbroker.federation.dto.ConfigElementStatus.ConfigElementStatusBuilder
- ESTABLISHED - Enum constant in enum class swiss.trustbroker.sessioncache.dto.LifecycleState
- establishImplicitSso(RelyingParty, ClaimsParty, StateData) - Method in class swiss.trustbroker.sso.service.SsoService
- establishSso(RelyingParty, ClaimsParty, StateData, SsoGroup) - Method in class swiss.trustbroker.sso.service.SsoService
- evaluatePositiveNumberProperty(C, Function<C, T>, Supplier<T>) - Static method in class swiss.trustbroker.util.PropertyUtil
- evaluateProperty(C, Function<C, T>, Supplier<T>) - Static method in class swiss.trustbroker.util.PropertyUtil
- EVENT_NAME - Static variable in class swiss.trustbroker.audit.dto.AuditDto
- eventType(EventType) - Method in class swiss.trustbroker.audit.dto.AuditDto.AuditDtoBuilder
- EventType - Enum Class in swiss.trustbroker.audit.dto
- EXACT - Enum constant in enum class swiss.trustbroker.federation.xmlconfig.QoaComparison
- executorService() - Method in class swiss.trustbroker.config.TrustBrokerConfiguration
- expectedAssertionId(String) - Method in class swiss.trustbroker.saml.util.AssertionValidator.ExpectedAssertionValues.ExpectedAssertionValuesBuilder
- expectedAudience(String) - Method in class swiss.trustbroker.saml.util.AssertionValidator.ExpectedAssertionValues.ExpectedAssertionValuesBuilder
- expectedCpComparison(QoaComparison) - Method in class swiss.trustbroker.saml.util.AssertionValidator.ExpectedAssertionValues.ExpectedAssertionValuesBuilder
- expectedCpContextClasses(List<String>) - Method in class swiss.trustbroker.saml.util.AssertionValidator.ExpectedAssertionValues.ExpectedAssertionValuesBuilder
- expectedIssuer(String) - Method in class swiss.trustbroker.saml.util.AssertionValidator.ExpectedAssertionValues.ExpectedAssertionValuesBuilder
- expectedRecipient(String) - Method in class swiss.trustbroker.saml.util.AssertionValidator.ExpectedAssertionValues.ExpectedAssertionValuesBuilder
- expectedRelayState(String) - Method in class swiss.trustbroker.saml.util.AssertionValidator.ExpectedAssertionValues.ExpectedAssertionValuesBuilder
- expectedRequestId(String) - Method in class swiss.trustbroker.saml.util.AssertionValidator.ExpectedAssertionValues.ExpectedAssertionValuesBuilder
- expectedRpId(String) - Method in class swiss.trustbroker.saml.util.AssertionValidator.ExpectedAssertionValues.ExpectedAssertionValuesBuilder
- expectedSessionIndex(String) - Method in class swiss.trustbroker.saml.util.AssertionValidator.ExpectedAssertionValues.ExpectedAssertionValuesBuilder
- expectSuccess(boolean) - Method in class swiss.trustbroker.saml.util.AssertionValidator.ExpectedAssertionValues.ExpectedAssertionValuesBuilder
- expirationTime(Timestamp) - Method in class swiss.trustbroker.audit.dto.AuditDto.AuditDtoBuilder
- expirationTime(Timestamp) - Method in class swiss.trustbroker.saml.dto.SsoParticipants.SsoParticipantsBuilder
- expirationTime(Timestamp) - Method in class swiss.trustbroker.sessioncache.dto.Lifecycle.LifecycleBuilder
- expirationTimestamp(Timestamp) - Method in class swiss.trustbroker.sessioncache.dto.StateData.StateDataBuilder
- expire(boolean) - Method in class swiss.trustbroker.oidc.session.TomcatSession
- EXPIRED - Enum constant in enum class swiss.trustbroker.sessioncache.dto.LifecycleState
- expiredTime(Timestamp) - Method in class swiss.trustbroker.sessioncache.dto.Lifecycle.LifecycleBuilder
- expireSession(String) - Method in class swiss.trustbroker.oidc.session.TomcatSessionManager
- extractAndValidateCpAttrs(JWTClaimsSet, Map<String, Set<String>>, ClaimsParty) - Method in class swiss.trustbroker.saml.service.RelyingPartyService
- extractPepQoaFromAuthLevel(String, QoaConfig) - Method in class swiss.trustbroker.mapping.service.QoaMappingService
- extractPepQoaFromAuthLevel(String, QoaConfig, String) - Method in class swiss.trustbroker.mapping.service.QoaMappingService
- extractQoaLevel(String, QoaConfig) - Method in class swiss.trustbroker.mapping.service.QoaMappingService
- extractQoaLevelFromAuthLevel(String, QoaConfig) - Method in class swiss.trustbroker.mapping.service.QoaMappingService
- extractQoaLevels(List<String>, QoaConfig) - Method in class swiss.trustbroker.mapping.service.QoaMappingService
F
- FAILED - Enum constant in enum class swiss.trustbroker.sessioncache.dto.AccessRequestState
- fallback(String) - Method in class swiss.trustbroker.config.dto.ContentSecurityPolicies.ContentSecurityPoliciesBuilder
-
Default CSP configuration.
- fallback(String) - Method in class swiss.trustbroker.config.dto.FrameOptionsPolicies.FrameOptionsPoliciesBuilder
-
No further differentiation here as the FE, API, and SAML URLs are used together.
- FALSE - Enum constant in enum class swiss.trustbroker.federation.xmlconfig.FeatureEnum
-
Disabled.
- FALSE - Enum constant in enum class swiss.trustbroker.federation.xmlconfig.ProvisioningMode
-
No provisioning.
- featureCondition(String) - Method in class swiss.trustbroker.saml.dto.ResponseStatus
-
Script hook: Get single feature condition parameter.
- featureConditions() - Method in class swiss.trustbroker.saml.dto.ResponseStatus
-
Get all feature conditions.
- featureConditions(Map<String, String>) - Method in class swiss.trustbroker.saml.dto.ResponseStatus
-
Script hook: Toggle features via conditions.
- featureConditions(Map<String, String>) - Method in class swiss.trustbroker.saml.dto.ResponseStatus.ResponseStatusBuilder
-
Set by scripts to toggle features, to be consumed by the respective implementations.
- featureConditions(Set<String>) - Method in class swiss.trustbroker.saml.dto.ResponseStatus
-
Script hook: Toggle features via conditions.
- featureConditionSet() - Method in class swiss.trustbroker.saml.dto.ResponseStatus
-
Get all feature conditions without parameters.
- FeatureEnum - Enum Class in swiss.trustbroker.federation.xmlconfig
-
Configuration enabling toggle.
- features(List<GuiFeatures>) - Method in class swiss.trustbroker.config.dto.GuiProperties.GuiPropertiesBuilder
-
Feature enabled for the theme.
- features(List<GuiFeatures>) - Method in class swiss.trustbroker.homerealmdiscovery.dto.GuiConfig.GuiConfigBuilder
- federationId(String) - Method in class swiss.trustbroker.federation.xmlconfig.OidcClient.OidcClientBuilder
-
Federation ID override.
- FederationMetadataService - Class in swiss.trustbroker.federation.service
- federationServiceIssuerId(String) - Method in class swiss.trustbroker.saml.dto.ResponseParameters.ResponseParametersBuilder
- FETCH_ACTIVE_ONLY - Enum constant in enum class swiss.trustbroker.federation.xmlconfig.StatusPolicy
-
Only fetch active users from the IDM.
- fetchIdmData(CpResponse, StateData, String, boolean) - Method in class swiss.trustbroker.saml.service.RelyingPartyService
- fetchProviderMetadata(OidcClient, Certificates) - Method in class swiss.trustbroker.oidc.cache.service.OidcMetadataCacheService
- fetchSupportInfo(String, String) - Method in class swiss.trustbroker.homerealmdiscovery.controller.HrdController
- filter(String) - Method in class swiss.trustbroker.federation.xmlconfig.ProfileSelection.ProfileSelectionBuilder
-
Apply filtering on roles.
- filterAndCreateCpDefinitions(Map<Definition, List<String>>, Collection<Definition>, AttributesSelection, String) - Static method in class swiss.trustbroker.mapping.service.ClaimsMapperService
- filterCpAttributes(CpResponse, List<Definition>, SamlProperties) - Static method in class swiss.trustbroker.saml.util.ResponseFactory
- filteredUserDetails(Map<Definition, List<String>>, IdmLookup, AttributesSelection) - Static method in class swiss.trustbroker.mapping.util.AttributeFilterUtil
- filterInvalidClaimsParties(ClaimsProviderSetup) - Method in class swiss.trustbroker.config.AppConfigService
- filterInvalidRelyingParties(RelyingPartySetup) - Method in class swiss.trustbroker.config.AppConfigService
- filterOutbound(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.ProfileSelection.ProfileSelectionBuilder
-
Apply filtering on roles to claims output as well reducing data to what has been selected by the user in INTERACTIVE mode.
- filterProperties(Map<Definition, List<String>>, AttributesSelection, AttributesSelection) - Static method in class swiss.trustbroker.mapping.util.AttributeFilterUtil
- filterPropertiesSelection(CpResponse, String, String) - Method in class swiss.trustbroker.saml.service.RelyingPartyService
- filterPropertiesSelection(CpResponse, AttributesSelection, AttributesSelection) - Method in class swiss.trustbroker.saml.service.RelyingPartyService
- filterUnits(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.ProfileSelection.ProfileSelectionBuilder
-
Filter unit properties by selected/default profile ID if n2k=true.
- find(String, String) - Method in class swiss.trustbroker.sessioncache.service.StateCacheService
- findAllByNameOrNamespace(String, String, Map<? extends AttributeName, List<String>>) - Static method in class swiss.trustbroker.homerealmdiscovery.util.DefinitionUtil
- findAllByNameOrNamespace(AttributeName, String, Map<? extends AttributeName, List<String>>) - Static method in class swiss.trustbroker.homerealmdiscovery.util.DefinitionUtil
- findAllByOrderByExpirationTimestampAsc() - Method in interface swiss.trustbroker.sessioncache.repo.JwkCacheRepository
- findAttributeName() - Method in class swiss.trustbroker.federation.xmlconfig.Definition
- findAttributesByNameStartsWith(Map<? extends AttributeName, List<String>>, String) - Static method in class swiss.trustbroker.homerealmdiscovery.util.DefinitionUtil
- findByClientId(String) - Method in class swiss.trustbroker.oidc.ClientConfigInMemoryRepository
- findById(String) - Method in class swiss.trustbroker.oidc.ClientConfigInMemoryRepository
- findById(String) - Method in class swiss.trustbroker.oidc.CustomOAuth2AuthorizationService
- findByIdAsList(String) - Method in interface swiss.trustbroker.sessioncache.repo.StateCacheRepository
- findByNameAndNamespace(String, String, String, Map<K, T>) - Static method in class swiss.trustbroker.homerealmdiscovery.util.DefinitionUtil
- findByNameOrNamespace(String, String, Map<K, T>) - Static method in class swiss.trustbroker.homerealmdiscovery.util.DefinitionUtil
- findByNameOrNamespace(AttributeName, String, Map<K, T>) - Static method in class swiss.trustbroker.homerealmdiscovery.util.DefinitionUtil
- findByOidcSessionId(String) - Method in interface swiss.trustbroker.sessioncache.repo.StateCacheRepository
- findByRegistrationId(String) - Method in class swiss.trustbroker.oidc.CustomRelyingPartyRegistrationRepository
- findBySpId(String, String) - Method in class swiss.trustbroker.sessioncache.service.StateCacheService
- findBySpIdResilient(String, String) - Method in class swiss.trustbroker.sessioncache.service.StateCacheService
- findBySpSessionId(String) - Method in interface swiss.trustbroker.sessioncache.repo.StateCacheRepository
- findBySsoSessionId(String) - Method in interface swiss.trustbroker.sessioncache.repo.StateCacheRepository
- findBySsoSessionId(String, String) - Method in class swiss.trustbroker.sessioncache.service.StateCacheService
- findBySsoSessionIdResilient(String, String) - Method in class swiss.trustbroker.sessioncache.service.StateCacheService
- findByToken(String, OAuth2TokenType) - Method in class swiss.trustbroker.oidc.CustomOAuth2AuthorizationService
- findCpAttributeListByNameOrNamespace(String, Map<AttributeName, List<T>>) - Static method in class swiss.trustbroker.homerealmdiscovery.util.DefinitionUtil
- findEqualWithDefault(String) - Method in class swiss.trustbroker.federation.xmlconfig.AcWhitelist
- findFirst(BiPredicate<String, String>, String) - Method in class swiss.trustbroker.federation.xmlconfig.AcWhitelist
- findListByNameOrNamespace(String, String, Map<K, List<T>>) - Static method in class swiss.trustbroker.homerealmdiscovery.util.DefinitionUtil
- findListByNameOrNamespace(AttributeName, String, Map<K, List<T>>) - Static method in class swiss.trustbroker.homerealmdiscovery.util.DefinitionUtil
- findMandatoryValidState(String, String) - Method in class swiss.trustbroker.sessioncache.service.StateCacheService
- findOptional(String, String) - Method in class swiss.trustbroker.sessioncache.service.StateCacheService
- findOptionalResilient(String, String) - Method in class swiss.trustbroker.sessioncache.service.StateCacheService
- findRelyingPartyIdForTrustbrokerSamlObject(SAMLObject) - Method in class swiss.trustbroker.saml.service.RelyingPartyService
- findRequiredBySpId(String, String) - Method in class swiss.trustbroker.sessioncache.service.StateCacheService
- findSession(String) - Method in class swiss.trustbroker.oidc.session.TomcatSessionManager
- findSingleValueByNameOrNamespace(String, String, List<K>) - Static method in class swiss.trustbroker.homerealmdiscovery.util.DefinitionUtil
- findSingleValueByNameOrNamespace(String, String, Map<? extends AttributeName, List<T>>) - Static method in class swiss.trustbroker.homerealmdiscovery.util.DefinitionUtil
- findSingleValueByNameOrNamespace(AttributeName, String, List<K>) - Static method in class swiss.trustbroker.homerealmdiscovery.util.DefinitionUtil
- findSingleValueByNameOrNamespace(AttributeName, String, Map<? extends AttributeName, List<T>>) - Static method in class swiss.trustbroker.homerealmdiscovery.util.DefinitionUtil
- findValidSsoSessionForSessionIndexes(List<String>) - Method in class swiss.trustbroker.sso.service.SsoService
- findValidState(String, String) - Method in class swiss.trustbroker.sessioncache.service.StateCacheService
- findValidStateAndCookiesToExpire(SsoService.SsoCookieNameParams, Cookie[], RelyingParty) - Method in class swiss.trustbroker.sso.service.SsoService
- findValidStateFromCookies(RelyingParty, ClaimsParty, Cookie[]) - Method in class swiss.trustbroker.sso.service.SsoService
- findValidStateFromCookies(RelyingParty, ClaimsParty, String, Cookie[]) - Method in class swiss.trustbroker.sso.service.SsoService
- findValidStateFromCookiesAndRelyingParty(RelyingParty, Cookie[]) - Method in class swiss.trustbroker.sso.service.SsoService
- findValidStatesFromCookies(RelyingParty, Cookie[]) - Method in class swiss.trustbroker.sso.service.SsoService
- findValueByName(Map<? extends AttributeName, List<String>>, String) - Static method in class swiss.trustbroker.homerealmdiscovery.util.DefinitionUtil
-
First value matching attribute's name by definition's name.
- findValueByNamespaceUriOrName(Map<? extends AttributeName, List<String>>, AttributeName) - Static method in class swiss.trustbroker.homerealmdiscovery.util.DefinitionUtil
-
First value matching namespace or as fallback, matching name and has a namespace (i.e.
- fingerprintCheck(FingerprintCheck) - Method in class swiss.trustbroker.federation.xmlconfig.Sso.SsoBuilder
-
Device fingerprint check mode.
- FingerprintCheck - Enum Class in swiss.trustbroker.federation.xmlconfig
-
SSO device fingerprint check.
- FirstJwkSource - Class in swiss.trustbroker.oidc
- FirstJwkSource(JWKSource<SecurityContext>) - Constructor for class swiss.trustbroker.oidc.FirstJwkSource
- Flow - Class in swiss.trustbroker.federation.xmlconfig
-
Configuration for an individual error code.
- Flow() - Constructor for class swiss.trustbroker.federation.xmlconfig.Flow
- Flow(String, String, Boolean, Boolean, Boolean, Boolean, String, String, String, String) - Constructor for class swiss.trustbroker.federation.xmlconfig.Flow
-
Creates a new
Flowinstance. - Flow.FlowBuilder - Class in swiss.trustbroker.federation.xmlconfig
- flowPolicies(FlowPolicies) - Method in class swiss.trustbroker.federation.xmlconfig.RelyingParty.RelyingPartyBuilder
-
Error flow policies for this RP.
- FlowPolicies - Class in swiss.trustbroker.federation.xmlconfig
-
Error flow control configuration.
- FlowPolicies() - Constructor for class swiss.trustbroker.federation.xmlconfig.FlowPolicies
- FlowPolicies(Boolean, List<Flow>) - Constructor for class swiss.trustbroker.federation.xmlconfig.FlowPolicies
-
Creates a new
FlowPoliciesinstance. - FlowPolicies.FlowPoliciesBuilder - Class in swiss.trustbroker.federation.xmlconfig
- flowPolicy - Variable in class swiss.trustbroker.saml.dto.ResponseStatus
-
Optional flow policy to control the abort flow.
- flowPolicy(Flow) - Method in class swiss.trustbroker.saml.dto.ResponseStatus.ResponseStatusBuilder
-
Optional flow policy to control the abort flow.
- flowPolicyNamespaces(List<SamlNamespace>) - Method in class swiss.trustbroker.config.dto.SamlProperties.SamlPropertiesBuilder
-
Flow control namespace mappings.
- flows(List<Flow>) - Method in class swiss.trustbroker.federation.xmlconfig.FlowPolicies.FlowPoliciesBuilder
-
List of flow configurations.
- flushBuffer() - Method in class swiss.trustbroker.oidc.tx.OidcTxResponseWrapper
- flushCache() - Method in class swiss.trustbroker.homerealmdiscovery.service.WebResourceProvider
- flushCapturedOutputStream() - Method in class swiss.trustbroker.oidc.tx.OidcTxResponseWrapper
- FOOTER - Enum constant in enum class swiss.trustbroker.config.dto.GuiFeatures
-
Enable footer.
- forceAuthn() - Method in record class swiss.trustbroker.oidc.client.dto.AuthorizationCodeFlowRequest
-
Returns the value of the
forceAuthnrecord component. - forceAuthn() - Method in class swiss.trustbroker.sessioncache.dto.StateData
- forceAuthn(boolean) - Method in class swiss.trustbroker.federation.xmlconfig.CounterParty
- forceAuthn(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.SecurityPolicies.SecurityPoliciesBuilder
-
Always enforce re-authentication on this CP/on all CPs configured for this RP.
- forceAuthn(Boolean) - Method in class swiss.trustbroker.oidc.client.dto.AuthorizationCodeFlowRequest.AuthorizationCodeFlowRequestBuilder
- forceAuthn(Boolean) - Method in class swiss.trustbroker.sessioncache.dto.StateData.StateDataBuilder
- forceCpAuthentication(boolean) - Method in class swiss.trustbroker.config.dto.SecurityChecks.SecurityChecksBuilder
-
Enforce CP authentication via corresponding OIDC/SAML flags.
- forceIdmRefresh(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.Sso.SsoBuilder
-
Refresh IDM data for SSO - enable e.g.
- FORM_POST - Enum constant in enum class swiss.trustbroker.federation.xmlconfig.ResponseMode
- format(String) - Method in class swiss.trustbroker.config.dto.SecToken.SecTokenBuilder
-
Security token format.
- format(String) - Method in class swiss.trustbroker.federation.xmlconfig.SubjectName.SubjectNameBuilder
-
Subject Name ID format.
- forwardRpProtocolBinding() - Method in class swiss.trustbroker.federation.xmlconfig.CounterParty
- forwardRpProtocolBinding(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.Saml.SamlBuilder
-
Forward
ProtocolBindingfrom RP tp CP. - FragmentUtil - Class in swiss.trustbroker.oidc.tx
- FRAME_OPTIONS - Static variable in class swiss.trustbroker.util.HeaderBuilder
- FrameAncestorHandler - Interface in swiss.trustbroker.util
- frameAncestors(List<String>) - Method in class swiss.trustbroker.federation.xmlconfig.AcWhitelist.AcWhitelistBuilder
-
Allowed frame ancestors for iframes.
- FrameOptionsPolicies - Class in swiss.trustbroker.config.dto
-
HTTP Frame Options configuration.
- FrameOptionsPolicies() - Constructor for class swiss.trustbroker.config.dto.FrameOptionsPolicies
- FrameOptionsPolicies(String, String) - Constructor for class swiss.trustbroker.config.dto.FrameOptionsPolicies
-
Creates a new
FrameOptionsPoliciesinstance. - FrameOptionsPolicies.FrameOptionsPoliciesBuilder - Class in swiss.trustbroker.config.dto
- frontend(String) - Method in class swiss.trustbroker.config.dto.ContentSecurityPolicies.ContentSecurityPoliciesBuilder
-
CSP configuration for frontend URLs.
- FRONTEND_CONTEXT - Static variable in class swiss.trustbroker.util.ApiSupport
-
Base URL of Angular application, prefix for the following page paths.
- frontendCsp() - Method in class swiss.trustbroker.util.HeaderBuilder
G
- gatewayIP(String) - Method in class swiss.trustbroker.audit.dto.AuditDto.AuditDtoBuilder
- gauge(String, long) - Method in class swiss.trustbroker.metrics.service.MetricsService
- generate(OAuth2TokenContext) - Method in class swiss.trustbroker.oidc.CustomRefreshTokenGenerator
- generate(OAuth2TokenContext) - Method in class swiss.trustbroker.oidc.Saml2TokenGenerator
- generateCookie(StateData) - Method in class swiss.trustbroker.sso.service.SsoService
- generateExpiredCookie(StateData) - Method in class swiss.trustbroker.sso.service.SsoService
- generateMetadata(boolean, boolean) - Method in class swiss.trustbroker.federation.service.FederationMetadataService
- generateSsoId(boolean, String) - Static method in enum class swiss.trustbroker.config.dto.SsoSessionIdPolicy
- generateTempSsoId() - Static method in enum class swiss.trustbroker.config.dto.SsoSessionIdPolicy
- generateTokenContextForTokenExchange(OAuth2TokenType, OAuth2AuthorizationGrantAuthenticationToken, RegisteredClient, Authentication, Set<String>, Jwt) - Static method in class swiss.trustbroker.oidc.CustomOAuth2AuthenticationProviderUtils
- get(JWKSelector, C) - Method in class swiss.trustbroker.oidc.RotateJwkSource
- get(JWKSelector, SecurityContext) - Method in class swiss.trustbroker.oidc.FirstJwkSource
- getAcceptSubjectConfirmationMethods() - Method in class swiss.trustbroker.config.dto.SecurityChecks
-
Acceptable subject confirmation methods.
- getAccessCount() - Method in class swiss.trustbroker.sessioncache.dto.Lifecycle
- getAccessRequest() - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
Access request configuration.
- getAccessRequest() - Method in class swiss.trustbroker.federation.xmlconfig.RelyingParty
-
AccessRequest configuration for this RP.
- getAccessRequest() - Method in class swiss.trustbroker.sessioncache.dto.StateData
- getAccessRequestAbortApi(String) - Method in class swiss.trustbroker.util.ApiSupport
- getAccessRequestAbortUrl(String) - Method in class swiss.trustbroker.util.ApiSupport
- getAccessRequestCompleteApi(String) - Method in class swiss.trustbroker.util.ApiSupport
- getAccessRequestConfigurations() - Method in class swiss.trustbroker.config.dto.RelyingPartyDefinitions
- getAccessRequestConfirmationUrl(String) - Method in class swiss.trustbroker.util.ApiSupport
- getAccessRequestInitiateApi(String) - Method in class swiss.trustbroker.util.ApiSupport
- getAccessRequestInitiateUrl(String) - Method in class swiss.trustbroker.util.ApiSupport
- getAccessRequestInProgressUrl(String) - Method in class swiss.trustbroker.util.ApiSupport
- getAccessRequestOnboardingUrl(String) - Method in class swiss.trustbroker.util.ApiSupport
- getAccessRequestTriggerApi(String, String) - Method in class swiss.trustbroker.util.ApiSupport
- getAccessTokenTimeToLiveMin() - Method in class swiss.trustbroker.federation.xmlconfig.OidcSecurityPolicies
- getAccountSource() - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsParty
-
The Account Source consumed by the
IdmProvisioningService - getAcNetUrls() - Method in class swiss.trustbroker.federation.xmlconfig.AcWhitelist
- getAction() - Method in class swiss.trustbroker.config.dto.AdminAction
- getAction() - Method in enum class swiss.trustbroker.federation.xmlconfig.WsTrustBinding
- getAcUrls() - Method in class swiss.trustbroker.federation.xmlconfig.AcWhitelist
-
List of allowed URLs.
- getAcWhitelist() - Method in class swiss.trustbroker.federation.xmlconfig.RelyingParty
-
Assertion consumer service URL authorized to access XTB federation services for this RP.
- getAdditionalIdmData() - Method in class swiss.trustbroker.saml.dto.CpResponse
-
Additional exchanged between related API implementations.
- getAddTokenClaims() - Method in class swiss.trustbroker.config.dto.OidcProperties
-
Globally customize /token and /userinfo output dropping technical claims (typ=JWT and iss=issuer we keep for now).
- getAddTokenHeader() - Method in class swiss.trustbroker.config.dto.OidcProperties
-
Globally customize OIDC header (e.g.
- getAdminSecret() - Method in class swiss.trustbroker.config.dto.AdminAction
- getAdminSecret() - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
Secret for administrative APIs.
- getAlgorithm() - Method in class swiss.trustbroker.config.dto.SecToken
-
Security token algorithm.
- getAlias() - Method in class swiss.trustbroker.config.dto.WsTrustConfig
-
Keystore alias.
- getAlias() - Method in class swiss.trustbroker.federation.xmlconfig.SignerKeystore
-
If the store contains multiple objects and a specific one shall be used.
- getAlias() - Method in class swiss.trustbroker.federation.xmlconfig.SignerStore
-
If the store contains multiple objects and a specific one shall be used.
- getAlias() - Method in class swiss.trustbroker.federation.xmlconfig.SignerTruststore
-
If the store contains multiple objects and a specific one shall be used.
- getAllCpDecryptionCredentials() - Method in class swiss.trustbroker.homerealmdiscovery.service.RelyingPartySetupService
- getAllDefinitions() - Method in class swiss.trustbroker.federation.xmlconfig.RelyingParty
- getAllOidcDefinitions(RelyingParty, OidcClient, Set<String>) - Static method in class swiss.trustbroker.oidc.OidcConfigurationUtil
- getAllowClaimsOverride() - Method in class swiss.trustbroker.federation.xmlconfig.OidcClaimsSources
-
Allow overriding claims by sources in the given order.
- getAllowedClientIpRegex() - Method in class swiss.trustbroker.config.dto.WsTrustConfig
-
Regex of client IPs allowed (using
X-Forwarded-ForHTTP header). - getAllowedClientIps() - Method in class swiss.trustbroker.config.dto.Support
-
List of IP regexp rules matched against the IP address received from perimeter or socket e.g.
- getAllowedHeaders() - Method in class swiss.trustbroker.config.dto.CorsPolicies
-
Headers permitted.
- getAllowedMethods() - Method in class swiss.trustbroker.config.dto.CorsPolicies
-
HTTP methods permitted.
- getAllowedNetworks() - Method in class swiss.trustbroker.config.dto.Support
-
Network header if present checked against the configured regexp e.g.
- getAllowedNetworks() - Method in class swiss.trustbroker.config.dto.WsTrustConfig
-
List of client networks allowed (using
trustbroker.config.network.networkHeaderHTTP header). - getAllowedOrigin(HttpServletRequest, Set<String>) - Static method in class swiss.trustbroker.util.CorsSupport
- getAllowedOrigins() - Method in class swiss.trustbroker.config.dto.CorsPolicies
-
Origins permitted.
- getAllowedSignatureAlgorithms() - Method in class swiss.trustbroker.config.dto.SecurityChecks
-
List of allowed message signature algorithms.
- getAllowedSignatureAlgorithms() - Method in class swiss.trustbroker.federation.xmlconfig.SecurityPolicies
-
List of allowed message signature algorithms.
- getAllowedSignatureAlgorithms(List<String>) - Method in class swiss.trustbroker.federation.xmlconfig.CounterParty
- getAllowFormBearerToken() - Method in class swiss.trustbroker.federation.xmlconfig.OidcSecurityPolicies
-
Allow access_token in form body
Default: false - getAllowPrivateNetworkAccess() - Method in class swiss.trustbroker.config.dto.CorsPolicies
-
Private network access permitted.
- getAllowPublicClientTokenExchange() - Method in class swiss.trustbroker.federation.xmlconfig.OidcSecurityPolicies
-
Allow Token Exchange with Public Client
Default: false - getAllowSubjectOverride() - Method in class swiss.trustbroker.federation.xmlconfig.OidcClaimsSources
-
Allow overriding subject by sources in the given order.
- getAllPrincipals() - Method in class swiss.trustbroker.oidc.CustomSessionRegistry
- getAllSessions(Object, boolean) - Method in class swiss.trustbroker.oidc.CustomSessionRegistry
- getAllSsoParticipants(Cookie[], String) - Method in class swiss.trustbroker.sso.service.SsoService
- getAllTriggerRoles() - Method in class swiss.trustbroker.federation.xmlconfig.AccessRequest
- getAltName() - Method in class swiss.trustbroker.config.dto.AttributeProperties
-
Known external attributes we just document here - used when we cannot use namespaceUri due to semantics.
- getAltName() - Method in class swiss.trustbroker.federation.xmlconfig.Definition
-
Known external attributes we just document here - used when we cannot use namespaceUri due to semantics.
- getAnnouncement() - Method in class swiss.trustbroker.federation.xmlconfig.RelyingParty
-
Announcement configuration for this RP.
- getAnnouncementCookie() - Method in class swiss.trustbroker.config.dto.GuiProperties
-
XTB can (via a plugin) support announcements to communicate with the federating user.
- getAnnouncementCookie() - Method in class swiss.trustbroker.homerealmdiscovery.dto.GuiConfig
- getAnnouncements() - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
Announcement configuration.
- getAnnouncements(HttpServletRequest, String, String) - Method in class swiss.trustbroker.announcement.controller.AnnouncementController
- getAnnouncementsApi(String, String) - Method in class swiss.trustbroker.util.ApiSupport
- getAnnouncementsForApplication(RelyingPartyConfig, AnnouncementsRpData, String, Set<String>) - Method in class swiss.trustbroker.announcement.service.NoOpAnnouncementService
- getAnnouncementsUrl(String, String, String) - Method in class swiss.trustbroker.util.ApiSupport
- getAnnouncementUrls() - Method in class swiss.trustbroker.federation.xmlconfig.AnnouncementRpConfig
-
URLs for the announcement.
- getAppContinue() - Method in class swiss.trustbroker.federation.xmlconfig.Flow
-
Show error page including continue to application button (send SAML error on to application).
- getAppFilter() - Method in class swiss.trustbroker.federation.xmlconfig.IdmQuery
-
Application as filtering parameter for the IDM.
- getApplicationFromProfiledRole(String) - Static method in class swiss.trustbroker.homerealmdiscovery.util.RelyingPartyUtil
- getApplicationName() - Method in class swiss.trustbroker.audit.dto.AuditDto
- getApplicationName() - Method in class swiss.trustbroker.federation.xmlconfig.RelyingParty
-
If the SAML ProviderName or OIDC client_id are wrong or missing, a relying party can be configured with a global ApplicationName used for AccessRequest ProfileSelection or AnnouncementService to select the matching data items.
- getApplicationName() - Method in class swiss.trustbroker.saml.dto.CpResponse
-
RP/OIDC context sending 'SAML clientId' in ProviderName.
- getApplicationName() - Method in class swiss.trustbroker.saml.dto.RpRequest
-
Application name e.g.
- getApplicationName() - Method in class swiss.trustbroker.sessioncache.dto.StateData
- getApplicationNames() - Method in class swiss.trustbroker.config.dto.AnnouncementConfig
- getApplUrl() - Method in class swiss.trustbroker.federation.xmlconfig.AuthorizedApplication
-
If configured the value is sent as appUrl instead of sending app=name in the INTERACTIVE AccessRequest.
- getAppRedirectUrl() - Method in class swiss.trustbroker.federation.xmlconfig.Flow
-
Redirect to (application-specific) URL instead of showing an error page.
- getAppUrl() - Method in class swiss.trustbroker.federation.xmlconfig.Flow
-
Show a link to further information on the error page (general error information on the application or specific to this error code).
- getAppUrl() - Method in class swiss.trustbroker.homerealmdiscovery.dto.SupportInfo
- getArDurationSecs() - Method in class swiss.trustbroker.audit.dto.AuditDto
- getArMode() - Method in class swiss.trustbroker.audit.dto.AuditDto
- getArResponseId() - Method in class swiss.trustbroker.audit.dto.AuditDto
- getArReturnUrl() - Method in class swiss.trustbroker.audit.dto.AuditDto
- getArState() - Method in class swiss.trustbroker.audit.dto.AuditDto
- getArtifactBinding() - Method in class swiss.trustbroker.federation.xmlconfig.Saml
-
SAML Artifact Binding configuration
- getArtifactId() - Method in class swiss.trustbroker.sessioncache.dto.ArtifactCacheEntity
- getArtifactLifetimeSecs() - Method in class swiss.trustbroker.config.dto.ArtifactResolution
-
Lifetime of artifacts in cache in seconds.
- getArtifactReapIntervalSecs() - Method in class swiss.trustbroker.config.dto.ArtifactResolution
-
Artifact cache reap interval in seconds.
- getArtifactResolution() - Method in class swiss.trustbroker.config.dto.SamlProperties
-
SAML Artifact Resolution configuration.
- getArtifactResolutionIndex() - Method in class swiss.trustbroker.federation.xmlconfig.ProtocolEndpoints
-
SAML Artifact Resolution Protocol index.
- getArtifactResolutionKeystore() - Method in class swiss.trustbroker.federation.xmlconfig.Certificates
-
Deprecated.Use backendKeystore
- getArtifactResolutionProxyUrl() - Method in class swiss.trustbroker.federation.xmlconfig.ProtocolEndpoints
-
Deprecated, for removal: This API element is subject to removal in a future version.Use proxyUrl.
- getArtifactResolutionTruststore() - Method in class swiss.trustbroker.federation.xmlconfig.Certificates
-
Deprecated.Use backendTruststore
- getArtifactResolutionUrl() - Method in class swiss.trustbroker.federation.xmlconfig.ProtocolEndpoints
-
SAML Artifact Resolution Protocol URL.
- getArtifactValue() - Method in class swiss.trustbroker.sessioncache.dto.ArtifactCacheEntity
- getAssertion() - Method in class swiss.trustbroker.oidc.opensaml5.OpenSaml5AuthenticationProvider.AssertionToken
- getAssertion() - Method in class swiss.trustbroker.wstrustclient.dto.WsTrustRstRequest
- getAssertionConsumerService() - Method in class swiss.trustbroker.config.dto.OidcIdentityProvider
-
Assertion consumer service URL.
- getAssertionConsumerServiceUrl() - Method in class swiss.trustbroker.sessioncache.dto.SsoSessionParticipant
- getAssertionConsumerServiceUrl() - Method in class swiss.trustbroker.sessioncache.dto.StateData
- getAssertionConsumerUrl() - Method in class swiss.trustbroker.audit.dto.AuditDto
- getAttribute(String) - Method in class swiss.trustbroker.oidc.session.TomcatSession
- getAttribute(String) - Method in class swiss.trustbroker.saml.dto.CpResponse
-
Script hook: Get single-valued CP/IDP claim
- getAttribute(String, String) - Method in class swiss.trustbroker.saml.dto.CpResponse
-
Script hook: Get single-valued CP/IDP claim including source selector.
- getAttributeCount() - Method in class swiss.trustbroker.oidc.session.TomcatSession
- getAttributeDefinitions() - Method in class swiss.trustbroker.federation.xmlconfig.ConstAttributes
-
List of attributes.
- getAttributeInternal(String) - Method in class swiss.trustbroker.oidc.session.TomcatSession
- getAttributeMap() - Method in class swiss.trustbroker.saml.dto.CpResponse
- getAttributeNamesInternal() - Method in class swiss.trustbroker.oidc.session.TomcatSession
- getAttributes() - Method in class swiss.trustbroker.config.dto.AccessRequestConfig
-
Custom attributes that might be needed by the implementation.
- getAttributes() - Method in class swiss.trustbroker.config.dto.AnnouncementConfig
-
Custom attributes that might be needed by the implementation.
- getAttributes() - Method in class swiss.trustbroker.config.dto.IdmConfig
-
Custom attributes that might be needed by the implementation.
- getAttributes() - Method in class swiss.trustbroker.config.dto.ProfileSelectionConfig
-
Custom attributes that might be needed by the implementation.
- getAttributes() - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
Configuration for attributes
- getAttributes() - Method in class swiss.trustbroker.saml.dto.CpResponse
-
The attributes map contains these attributes: CP SAML Response attributes extracted from the message Derived attributes computed in ScriptService BeforeIdm hooks The names in this map are usually fully qualified as represented in the SAML response from the CP.
- getAttributes(String) - Method in class swiss.trustbroker.saml.dto.CpResponse
-
Script hook: Get multi-valued CP/IDP claim
- getAttributes(String, String) - Method in class swiss.trustbroker.saml.dto.CpResponse
-
Script hook: Get multi-valued CP/IDP claim including source selector.
- getAttributesDefinitions() - Method in class swiss.trustbroker.federation.xmlconfig.CounterParty
- getAttributeSelection() - Method in class swiss.trustbroker.federation.xmlconfig.IdmQuery
- getAttributesForQueryResponse(Map<String, List<String>>, String, List<AttributeName>) - Static method in class swiss.trustbroker.util.IdmAttributeUtil
- getAttributesFromUserDetails(Map<Definition, List<String>>) - Static method in class swiss.trustbroker.util.IdmAttributeUtil
- getAttributesSelection() - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsParty
-
The filtering is done when the SAML response is received from the CP.
- getAttributesSelection() - Method in class swiss.trustbroker.federation.xmlconfig.CounterParty
- getAttributesSelection() - Method in class swiss.trustbroker.federation.xmlconfig.RelyingParty
- getAttrValue() - Method in class swiss.trustbroker.federation.xmlconfig.HomeName
-
Overridden by value.
- getAudienceNotOnOrAfterSeconds() - Method in class swiss.trustbroker.federation.xmlconfig.SecurityPolicies
-
Overrides the global
notOnOrAfterSecondsfor conditionsnotOnOrAfterif greater than zero. - getAudienceRestrictionLifetime(RelyingParty) - Method in class swiss.trustbroker.homerealmdiscovery.service.RelyingPartySetupService
- getAudiences() - Method in class swiss.trustbroker.federation.xmlconfig.OidcClient
-
OIDC allowed audience in TokenExchange.
- getAudiencesList() - Method in class swiss.trustbroker.federation.xmlconfig.Audiences
-
List of audiences.
- getAudienceValiditySeconds() - Method in class swiss.trustbroker.saml.dto.ResponseParameters
- getAudit() - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
Audit configuration.
- getAuditDetail(XMLObject) - Method in interface swiss.trustbroker.audit.service.AuditLogger
-
Convert OpenSAML object to details for logging.
- getAuditDetail(XMLObject) - Method in class swiss.trustbroker.audit.service.BaseAuditLogger
- getAuthenticatedPrincipal(TomcatSession) - Static method in class swiss.trustbroker.oidc.session.OidcSessionSupport
- getAuthenticationMethods() - Method in class swiss.trustbroker.oidc.client.dto.OpenIdProviderConfiguration
- getAuthLevel() - Method in class swiss.trustbroker.audit.dto.AuditDto
- getAuthLevel() - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsParty
-
Configure what QoA the CP can deliver per default, e.g.
- getAuthLevel() - Method in class swiss.trustbroker.saml.dto.CpResponse
-
Declared QoA CP side.
- getAuthnRequest() - Method in class swiss.trustbroker.oidc.opensaml5.OpenSaml5AuthenticationRequestResolver.AuthnRequestContext
- getAuthnRequestIssuerId() - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsParty
-
Override of the global issuer for this CP.
- getAuthnRequestIssuerId(String) - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsParty
- getAuthnStatementInstant() - Method in class swiss.trustbroker.saml.dto.ResponseParameters
- getAuthorizationCodeTimeToLiveMin() - Method in class swiss.trustbroker.federation.xmlconfig.OidcSecurityPolicies
-
Overrides tokenTimeToLiveMin for the authorization code.
- getAuthorizationEndpoint() - Method in class swiss.trustbroker.oidc.client.dto.OpenIdProviderConfiguration
- getAuthorizationGrantTypes() - Method in class swiss.trustbroker.federation.xmlconfig.OidcClient
-
Authorization grant types to be allowed.
- getAuthorizedApplicationList() - Method in class swiss.trustbroker.federation.xmlconfig.AuthorizedApplications
-
List of Authorized Applications.
- getAuthorizedApplications() - Method in class swiss.trustbroker.federation.xmlconfig.AccessRequest
-
Authorized applications for the AccessRequest.
- getAuthStateInstant() - Method in class swiss.trustbroker.saml.dto.CpResponse
-
Issuing instant of authentication statement.
- getBackendConnectTimeoutSec() - Method in class swiss.trustbroker.config.dto.NetworkConfig
-
Backend service connect timeout in seconds.
- getBackendKeystore() - Method in class swiss.trustbroker.federation.xmlconfig.Certificates
- getBackendName() - Method in class swiss.trustbroker.monitoring.service.StateCacheHealthIndicator
- getBackendName() - Method in class swiss.trustbroker.monitoring.service.TrustbrokerHealthIndicator
- getBackendTruststore() - Method in class swiss.trustbroker.federation.xmlconfig.Certificates
- getBanner() - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsProvider
-
Show this banner above the HRD selection area if tile is enabled.
- getBanner(String) - Method in class swiss.trustbroker.config.dto.GuiProperties
- getBanners() - Method in class swiss.trustbroker.config.dto.GuiProperties
-
Banners.
- getBanners() - Method in class swiss.trustbroker.saml.dto.UiObjects
-
Banners.
- getBase() - Method in class swiss.trustbroker.federation.xmlconfig.RelyingParty
-
Base profile.
- getBillingId() - Method in class swiss.trustbroker.audit.dto.AuditDto
- getBillingId() - Method in class swiss.trustbroker.federation.xmlconfig.RelyingParty
-
We introduce the billing field, so we can start make some trials adding it to the config.
- getBinding() - Method in class swiss.trustbroker.federation.xmlconfig.SloResponse
-
The protocol binding for which this entry applies.
- getBinding() - Method in class swiss.trustbroker.saml.dto.ResponseData
- getBindings() - Method in class swiss.trustbroker.config.dto.SamlProperties
-
List of exposed SAML protocols.
- getBindings() - Method in class swiss.trustbroker.config.dto.WsTrustConfig
-
List of exposed WS-Trust bindings.
- getBlockedHeaderNames() - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
Header block list.
- getBlockedRequestParameterNames() - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
Request parameter block list.
- getBody() - Method in class swiss.trustbroker.oidc.tx.OidcTxResponseWrapper
- getBrokerIdpId() - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
Deprecated.Replaced by the 'first' marker on the network, e.g. INTERNET-first.
- getButton() - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsProvider
-
Deprecated.remove
- getButtons() - Method in class swiss.trustbroker.config.dto.GuiProperties
-
Buttons enabled for the theme.
- getButtons() - Method in class swiss.trustbroker.homerealmdiscovery.dto.GuiConfig
- getCachePath() - Method in class swiss.trustbroker.config.dto.AnnouncementConfig
-
Path for the local announcements cache.
- getCanaryEnabledValue() - Method in class swiss.trustbroker.config.dto.NetworkConfig
-
Value for
canaryMarkerName. - getCanaryMarkerName() - Method in class swiss.trustbroker.config.dto.NetworkConfig
-
Running on K8S supporting canary routing using cookies, a test instance.
- getCanonicalizationAlgorithm() - Method in class swiss.trustbroker.config.dto.AccessRequestConfig
-
Access Request canonicalization algorithm.
- getCanonicalizationAlgorithm() - Method in class swiss.trustbroker.federation.xmlconfig.Signature
-
Canonicalization algorithm.
- getCentralCICD() - Method in class swiss.trustbroker.config.dto.AccessRequestConfig
-
Global default for optional request parameter added to URLs.
- getCentralCICD() - Method in class swiss.trustbroker.federation.xmlconfig.AuthorizedApplication
-
Optional request parameter added to URLs.
- getCert() - Method in class swiss.trustbroker.config.dto.WsTrustConfig
-
Keystore path.
- getCertificates() - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsParty
-
You only need to declare SignerTruststore for SAML response verification.
- getCertificates() - Method in class swiss.trustbroker.federation.xmlconfig.CounterParty
- getCertificates() - Method in class swiss.trustbroker.federation.xmlconfig.OidcClient
-
Required for JWT encryption
- getCertificates() - Method in class swiss.trustbroker.federation.xmlconfig.RelyingParty
- getCertPath() - Method in class swiss.trustbroker.federation.xmlconfig.SignerKeystore
-
Path of the certificate.
- getCertPath() - Method in class swiss.trustbroker.federation.xmlconfig.SignerStore
-
Path of the certificate.
- getCertPath() - Method in class swiss.trustbroker.federation.xmlconfig.SignerTruststore
-
Path of the certificate.
- getCertType() - Method in class swiss.trustbroker.federation.xmlconfig.SignerKeystore
-
If the store format cannot be derived from the file extension.
- getCertType() - Method in class swiss.trustbroker.federation.xmlconfig.SignerStore
-
If the store format cannot be derived from the file extension.
- getCertType() - Method in class swiss.trustbroker.federation.xmlconfig.SignerTruststore
-
If the store format cannot be derived from the file extension.
- getCid() - Method in class swiss.trustbroker.audit.dto.AuditDto.ResponseAttributeValue
- getCid() - Method in class swiss.trustbroker.federation.xmlconfig.Definition
-
Indicates whether this field is considered CID (client identifying data).
- getCidFields() - Method in class swiss.trustbroker.config.dto.OpsAuditConfig
-
Fields to be considered CID by property names of swiss.trustbroker.audit.dto.AuditDto.
- getClaim() - Method in class swiss.trustbroker.federation.xmlconfig.Qoa
-
Qoa Claim name
- getClaim() - Method in class swiss.trustbroker.federation.xmlconfig.SubjectName
-
Subject Name ID claim name.
- getClaim(String) - Method in class swiss.trustbroker.saml.dto.CpResponse
-
Get single value of by name.
- getClaimList(String) - Method in class swiss.trustbroker.saml.dto.CpResponse
-
Converts values to (possibly immutable) list if needed, empty list for null.
- getClaims() - Method in class swiss.trustbroker.saml.dto.CpResponse
-
The claims map contains these OIDC claims: Everything that was annotated with an oidcName in the configuration. All well known OIDC claims of the openid scope declared in AttributeName (StandardClaims). Everything added or removed in a OIDC OnToken groovy script hook. We use Object values because of nested collection support.
- getClaims(String) - Method in class swiss.trustbroker.saml.dto.CpResponse
-
Get claims by name.
- getClaimsDefinitionMapping() - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
Relative path of the ClaimsProviderDefinitions configuration.
- getClaimsForSource(AttributesSelection, String) - Static method in class swiss.trustbroker.mapping.util.AttributeFilterUtil
- getClaimsMappers() - Method in class swiss.trustbroker.federation.xmlconfig.Definition
- getClaimsParties() - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsProviderSetup
-
List of CPs.
- getClaimsProvider(String) - Method in class swiss.trustbroker.saml.dto.RpRequest
- getClaimsProviderByArtifactSourceId(String) - Method in class swiss.trustbroker.homerealmdiscovery.service.RelyingPartySetupService
- getClaimsProviderByArtifactSourceIdOrReferrer(String, String) - Method in class swiss.trustbroker.homerealmdiscovery.service.RelyingPartySetupService
- getClaimsProviderById(RelyingParty, String) - Method in class swiss.trustbroker.homerealmdiscovery.service.RelyingPartySetupService
- getClaimsProviderDefinitions() - Method in class swiss.trustbroker.config.dto.RelyingPartyDefinitions
- getClaimsProviderHint(HttpServletRequest, TrustBrokerProperties) - Static method in class swiss.trustbroker.util.HrdSupport
- getClaimsProviderHint(TrustBrokerProperties) - Static method in class swiss.trustbroker.util.HrdSupport
- getClaimsProviderList() - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsProviderMappings
-
List of CP mappings.
- getClaimsProviderMappings() - Method in class swiss.trustbroker.federation.xmlconfig.RelyingParty
-
List of CPs mapped to this RP.
- getClaimsProviderNoticeCookie() - Method in class swiss.trustbroker.config.dto.GuiProperties
-
XTB can (via a plugin) support a notice screen that can be configured, where an end user can set a cookie to not show the screen next time.
- getClaimsProviderNoticeCookie() - Method in class swiss.trustbroker.homerealmdiscovery.dto.GuiConfig
- getClaimsProviders() - Method in class swiss.trustbroker.federation.dto.ConfigStatusData
- getClaimsProviders() - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsProviderDefinitions
-
List of CPs
- getClaimsProviders() - Method in class swiss.trustbroker.saml.dto.RpRequest
-
ClaimsProvider mappings for RelyingParty.
- getClaimsProvidersCount() - Method in class swiss.trustbroker.saml.dto.RpRequest
- getClaimsProviderSetup() - Method in class swiss.trustbroker.config.dto.RelyingPartyDefinitions
- getClaimsProviderSetup() - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
Relative path of the SetupCP file.
- getClaimsProviderSetupByIssuerId(String) - Method in class swiss.trustbroker.homerealmdiscovery.service.RelyingPartySetupService
- getClaimsProviderSetupByIssuerId(String, String) - Method in class swiss.trustbroker.homerealmdiscovery.service.RelyingPartySetupService
- getClaimsProviderSetupByIssuerId(String, String, boolean) - Method in class swiss.trustbroker.homerealmdiscovery.service.RelyingPartySetupService
- getClaimsProviderSetupByResponseIssuerId(String) - Method in class swiss.trustbroker.homerealmdiscovery.service.RelyingPartySetupService
- getClaimsSelection() - Method in class swiss.trustbroker.federation.xmlconfig.OidcClient
-
Attribute selection applied to the claims.
- getClaimsSelection() - Method in class swiss.trustbroker.federation.xmlconfig.RelyingParty
-
RP side claims selection.
- getClaimsSourceList() - Method in class swiss.trustbroker.federation.xmlconfig.OidcClaimsSources
-
List of claims sources.
Claims from sources are combined in the given order. - getClaimsSources() - Method in class swiss.trustbroker.federation.xmlconfig.OidcClient
-
Sources of claims for OIDC CPs.
- getClaimTypes() - Method in class swiss.trustbroker.wstrustclient.dto.WsTrustRstRequest
- getClasses() - Method in class swiss.trustbroker.federation.xmlconfig.Qoa
-
List of SAML AuthnContextClassRef entries.
- getCleanupTask() - Method in class swiss.trustbroker.sessioncache.service.ArtifactStorageService
- getClientAssertionExpirationLifeTimeSec() - Method in class swiss.trustbroker.federation.xmlconfig.OidcSecurityPolicies
-
Restrict client_assertion expiration maxLifeTime
Default: 3600 (1h) - getClientAssertionMaxAgeSec() - Method in class swiss.trustbroker.federation.xmlconfig.OidcSecurityPolicies
-
Restrict client_assertion age
Default: 60 - getClientAssertionNotBeforeToleranceSec() - Method in class swiss.trustbroker.federation.xmlconfig.OidcSecurityPolicies
-
client_assertion tolerance NTP drift tolerance.
- getClientAssertionNotOnOrAfterToleranceSec() - Method in class swiss.trustbroker.federation.xmlconfig.OidcSecurityPolicies
-
client_assertion timestamp clock/transfer tolerance.
- getClientAuthenticationMethods() - Method in class swiss.trustbroker.federation.xmlconfig.OidcClient
-
Client authentication methods to be allowed.
- getClientEncryptionCredential() - Method in class swiss.trustbroker.federation.xmlconfig.OidcClient
- getClientExtId() - Method in class swiss.trustbroker.federation.xmlconfig.IdmQuery
-
Client External ID (tenant) as filtering parameter for the IDM.
- getClientExtId() - Method in class swiss.trustbroker.federation.xmlconfig.RelyingParty
-
Primary key of the IDM client identifying an access tenant.
- getClientExtId() - Method in class swiss.trustbroker.saml.dto.CpResponse
-
Retrieved IDM primary reference for internal reference.
- getClientExtId(IdmRequests) - Method in class swiss.trustbroker.homerealmdiscovery.service.RelyingPartySetupService
- getClientHint(HttpServletRequest, NetworkConfig) - Static method in class swiss.trustbroker.util.WebSupport
- getClientId() - Method in class swiss.trustbroker.federation.xmlconfig.AuthorizedApplication
-
If an RP contains multiple OIDC clients and AccessRequest configurations and the OIDC client_id or the applicationName (provided viy AuthnRequest.ProviderName) does not match the 'name', this attribute can be used to establish the relation.
- getClientIdFromOidcCookie(HttpServletRequest, RelyingPartyDefinitions, NetworkConfig) - Static method in class swiss.trustbroker.oidc.session.OidcSessionSupport
- getClientIdFromPrincipal(Authentication) - Static method in class swiss.trustbroker.oidc.OidcAuthenticationUtil
- getClientIP() - Method in class swiss.trustbroker.audit.dto.AuditDto
- getClientName() - Method in class swiss.trustbroker.audit.dto.AuditDto
- getClientName() - Method in class swiss.trustbroker.federation.xmlconfig.RelyingParty
-
ClientName is the access tenant identifier (somewhat a short form of the relying party ID) applied to all
- getClientName() - Method in class swiss.trustbroker.saml.dto.CpResponse
-
RelyingParty ClientName as used in the IDM credential SAML federation Issuer NameID.
- getClientNetwork() - Method in class swiss.trustbroker.audit.dto.AuditDto
- getClientNetwork(HttpServletRequest, NetworkConfig) - Static method in class swiss.trustbroker.util.WebSupport
- getClientNetworks() - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsProvider
-
A comma separated list of network identifiers.
- getClients() - Method in class swiss.trustbroker.federation.xmlconfig.Oidc
-
List of OIDC clients handled via the same configuration.
- getClientSecret() - Method in class swiss.trustbroker.federation.xmlconfig.OidcClient
-
You can encode the secret with one of the supported encoders.
- getClientSecret() - Method in class swiss.trustbroker.oidc.client.dto.OpenIdProviderConfiguration
- getClientType() - Method in class swiss.trustbroker.audit.dto.AuditDto
- getCodeChallengeMethods() - Method in class swiss.trustbroker.config.dto.OidcProperties
-
Enabled code challenge methods.
- getCodeLifetimeSec() - Method in class swiss.trustbroker.config.dto.OidcProperties
-
OIDC code lifetime in seconds.
- getCollapseParagraphs() - Method in class swiss.trustbroker.config.dto.Banner
-
Display banner paragraphs collapsed on a small screen.
- getColor() - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsProvider
-
HTML color code identifying the CP on small screens.
- getColor() - Method in class swiss.trustbroker.saml.dto.SsoParticipant
- getColor() - Method in class swiss.trustbroker.saml.dto.UiObject
-
HTML color code identifying the CP on small screens.
- getComparison() - Method in class swiss.trustbroker.federation.xmlconfig.Qoa
-
Comparison type.
- getComparisonType() - Method in class swiss.trustbroker.saml.dto.RpRequest
-
AuthnRequest RequestedAuthnContext.comparisonType.
- getComparisonType() - Method in class swiss.trustbroker.sessioncache.dto.StateData
- getCompletedAuthnRequests() - Method in class swiss.trustbroker.sessioncache.dto.StateData
- getCompletedTime() - Method in class swiss.trustbroker.sessioncache.dto.AccessRequestSessionState
- getConfigAcClassesByOrders(QoaConfig, Set<Integer>, Map<String, Integer>, Boolean) - Static method in class swiss.trustbroker.mapping.util.QoaMappingUtil
- getConfigBranch() - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
Configuration branch.
- getConfigCachePath(String) - Static method in class swiss.trustbroker.config.AppConfigService
- getConfigData(File, Class<T>, ConfigurableEnvironment) - Static method in class swiss.trustbroker.homerealmdiscovery.util.XmlConfigUtil
- getConfigStatus() - Method in class swiss.trustbroker.federation.controller.XmlConfigController
- getConfigStatus() - Method in class swiss.trustbroker.federation.service.XmlConfigStatusService
- getConfigurationPath() - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
Configuration path.
- getConstAttributes() - Method in class swiss.trustbroker.federation.xmlconfig.RelyingParty
-
Deprecated.replaced with ClaimsSelection
- getConsumerUrl() - Method in class swiss.trustbroker.config.dto.SamlProperties
-
XTB SAML consumer URL, included in the metadata.
- getContext() - Method in class swiss.trustbroker.saml.dto.RpRequest
-
Map to store internal processing attributes required during federation.
- getContext(String) - Method in class swiss.trustbroker.saml.dto.RpRequest
-
Query internal federation context setup during federation.
- getContextClass() - Method in class swiss.trustbroker.federation.xmlconfig.AcClass
-
ACClass name
- getContextClasses() - Method in class swiss.trustbroker.saml.dto.CpResponse
-
Authentication context classes.
- getContextClasses() - Method in class swiss.trustbroker.saml.dto.RpRequest
-
AuthnRequest RequestedAuthnContext.ContextClassRefs.
- getContextClasses() - Method in class swiss.trustbroker.sessioncache.dto.StateData
- getContinueToHrdApi(String) - Method in class swiss.trustbroker.util.ApiSupport
- getConversationId() - Method in class swiss.trustbroker.audit.dto.AuditDto
- getConversationId() - Method in class swiss.trustbroker.saml.dto.ResponseParameters
- getCookieSameSite() - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
Global default cookie sameSite flag.
- getCookiesAsString(HttpServletRequest) - Static method in class swiss.trustbroker.oidc.session.HttpExchangeSupport
- getCookiesToExpire() - Method in class swiss.trustbroker.sso.service.SsoService.SloState
- getCookiesToExpire() - Method in class swiss.trustbroker.sso.service.SsoService.StateWithCookies
- getCors() - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
HTTP CORS configuration.
- getCounterPartyDefault() - Method in class swiss.trustbroker.federation.xmlconfig.WsTrust
-
For CPs use this
WsTrustsetting as default for all RPs used in combination with this CP. - getCpAttrOriginIssuer() - Method in class swiss.trustbroker.saml.dto.ResponseParameters
- getCpBackendClientCredential() - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsParty
- getCpBackendTrustCredentials() - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsParty
- getCpDecryptionCredentials() - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsParty
- getCpId() - Method in class swiss.trustbroker.saml.dto.SsoParticipant
- getCpIdsWithoutSpecChars(RelyingParty) - Static method in class swiss.trustbroker.homerealmdiscovery.util.RelyingPartyUtil
- getCpIssuer() - Method in class swiss.trustbroker.audit.dto.AuditDto
- getCpIssuer() - Method in class swiss.trustbroker.sessioncache.dto.StateData
- getCpIssuerId() - Method in class swiss.trustbroker.sessioncache.dto.SsoSessionParticipant
- getCpIssuerId() - Method in class swiss.trustbroker.sso.service.SsoService.SsoCookieNameParams
- getCpJwks() - Method in class swiss.trustbroker.federation.xmlconfig.OidcClient
- getCpMappingForAlias(String) - Method in class swiss.trustbroker.federation.xmlconfig.RelyingParty
- getCpNameId() - Method in class swiss.trustbroker.audit.dto.AuditDto
- getCpResponse() - Method in class swiss.trustbroker.sessioncache.dto.StateData
- getCpTrustCredential() - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsParty
- getCpUrn() - Method in class swiss.trustbroker.saml.dto.DeviceInfoReq
- getCredential() - Method in class swiss.trustbroker.oidc.OidcEncryptionKeystoreService.EncryptionParams
- getCredential() - Method in class swiss.trustbroker.saml.dto.ResponseParameters
- getCredSubjectName(Credential) - Method in class swiss.trustbroker.homerealmdiscovery.service.RelyingPartySetupService
- getCrossProtocol() - Method in class swiss.trustbroker.federation.xmlconfig.SloResponse
-
Use notification cross-protocol (i.e.
- getCsp() - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
HTTP CSP configuration.
- getCtxClasses() - Method in class swiss.trustbroker.audit.dto.AuditDto
- getCtxClasses(JWTClaimsSet, ClaimsParty) - Method in class swiss.trustbroker.oidc.client.service.JwtClaimsService
- getCustomIssuer() - Method in class swiss.trustbroker.saml.dto.CpResponse
-
Override RP response issuer.
- getCustomizeProperties() - Method in class swiss.trustbroker.federation.xmlconfig.ProfileSelection
-
Apply name/value transformation for CustomProperties (if true regardless of n2k).
- getCustomizeUnits() - Method in class swiss.trustbroker.federation.xmlconfig.ProfileSelection
-
Apply name/value transformation for UnitProperties if n2k=true.
- getData() - Method in class swiss.trustbroker.oidc.tx.InMemoryServletOutputStream
- getDataEncryptionAlgorithm() - Method in class swiss.trustbroker.federation.xmlconfig.Encryption
-
Data encryption algorithm.
- getDataEncryptionAlgorithm(Encryption) - Static method in class swiss.trustbroker.saml.service.RelyingPartyService
- getDebugEnabledValue() - Method in class swiss.trustbroker.config.dto.Support
-
Value of the cookie or header signaling debug ON e.g.
- getDebugMarkerName() - Method in class swiss.trustbroker.config.dto.Support
-
HTTP cookie or header name identifying the debug session.
- getDefault() - Method in class swiss.trustbroker.federation.xmlconfig.AcWhitelist
- getDefaultErrorCode() - Method in class swiss.trustbroker.config.dto.OidcProperties
-
Default error code for OIDC.
- getDefaultLanguage() - Method in class swiss.trustbroker.config.dto.GuiProperties
-
Default language for the UI.
- getDefaultLevel() - Method in class swiss.trustbroker.mapping.service.QoaMappingService
- getDefaultQoa() - Method in class swiss.trustbroker.config.dto.OidcProperties
-
Global default QoA.
- getDefaultQoa() - Method in class swiss.trustbroker.config.dto.QualityOfAuthenticationConfig
-
Default Qoa value.
- getDefaultQoa() - Method in class swiss.trustbroker.federation.xmlconfig.Qoa
-
Default Qoa if there is none in the response
- getDefaultUsePepQoaPolicy() - Method in class swiss.trustbroker.config.dto.OidcProperties
-
Global default for legacy Policy Enforcement Point (PEP) QOA mapping policy configured via
- getDefaultValue() - Method in class swiss.trustbroker.config.dto.CookieProperties
-
Optional cookie default value.
- getDefaultValue() - Method in class swiss.trustbroker.homerealmdiscovery.dto.CookieConfig
- getDefinition() - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsProviderMappings
-
Define a CLaimsProviderMappings.xml definition/profile
- getDefinitionFromMap(Map<Definition, List<String>>, Definition) - Static method in class swiss.trustbroker.mapping.util.AttributeFilterUtil
- getDefinitions() - Method in class swiss.trustbroker.config.dto.AttributeConfig
-
List of attributes.
- getDefinitions() - Method in class swiss.trustbroker.federation.xmlconfig.AttributesSelection
-
List of attribute definitions.
- getDelegateOrigin() - Method in class swiss.trustbroker.federation.xmlconfig.SecurityPolicies
-
Control CP AuthnRequest scopes and RP Attribute OriginalIssuer.
- getDeleteTimestamp() - Method in class swiss.trustbroker.sessioncache.dto.JwkCacheEntity
- getDescription() - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsProvider
-
Text displayed in the CP tile.
- getDescription() - Method in class swiss.trustbroker.saml.dto.UiObject
-
Text displayed in the CP tile.
- getDestination() - Method in class swiss.trustbroker.audit.dto.AuditDto
- getDestination() - Method in class swiss.trustbroker.saml.dto.CpResponse
-
AuthnRequest.AssertionConsumerUrl from our AuthnRequest.
- getDetailLogger() - Method in class swiss.trustbroker.audit.service.BaseAuditLogger
- getDetailLogger() - Method in class swiss.trustbroker.audit.service.DefaultAuditLogger
- getDetailLogger() - Method in class swiss.trustbroker.audit.service.OpsAuditLogger
- getDeviceId() - Method in class swiss.trustbroker.audit.dto.AuditDto
- getDeviceId() - Method in class swiss.trustbroker.sessioncache.dto.StateData
- getDeviceId(HttpServletRequest) - Static method in class swiss.trustbroker.util.WebSupport
- getDeviceIdAccepted() - Method in class swiss.trustbroker.audit.dto.AuditDto
- getDeviceInfoApi() - Method in class swiss.trustbroker.util.ApiSupport
- getDeviceInfoUrl(String, String, String) - Method in class swiss.trustbroker.util.ApiSupport
- getDigestMethod() - Method in class swiss.trustbroker.config.dto.AccessRequestConfig
-
Access requiest digest method.
- getDigestMethod() - Method in class swiss.trustbroker.federation.xmlconfig.Signature
-
Digest algorithm.
- getDisableACUrl() - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsParty
-
This flag allows to disable setting the AssertionConsumerServiceURL in the AuthnRequest towards the CP as some CPs do fail when it is set (correctly or incorrectly).
- getDisabled() - Method in class swiss.trustbroker.saml.dto.UiObject
-
disabled signals to the frontend to inactivate the tile.
- getDisplayClaims() - Method in class swiss.trustbroker.federation.xmlconfig.ProfileSelection
- getDisplayName() - Method in class swiss.trustbroker.federation.xmlconfig.ProfileSelection
-
Attribute used as displayName for profile selection UI.
- getDomain() - Method in class swiss.trustbroker.config.dto.CookieProperties
-
Optional cookie domain
- getDomain() - Method in class swiss.trustbroker.homerealmdiscovery.dto.CookieConfig
- getDoSignArtifactResolve() - Method in class swiss.trustbroker.federation.xmlconfig.SecurityPolicies
-
Flag allows to sign outbound SAML artifact resolve messages for maximum security.
- getDowngradedQoas(List<String>, List<String>, QoaConfig, QoaConfig, Map<String, Integer>) - Static method in class swiss.trustbroker.mapping.util.QoaMappingUtil
- getDowngradeToMaximumRequested() - Method in class swiss.trustbroker.federation.xmlconfig.AcClass
-
If this Qoa is returned by the CP, but was not requested by the RP, downgrade it to the maximum Qoa requested by the RP.
- getDPoPSigningAlgValuesSupported() - Method in class swiss.trustbroker.config.dto.OidcProperties
-
Enabled Demonstrating Proof of Possession (DPoP) signing algorithm values.
- getDropDuplicatedAttributeFromOriginalIssuer() - Method in class swiss.trustbroker.config.dto.OidcProperties
-
If we have the same attribute from both original issuer and IDM, drop the original issuer one.
- getDropDuplicatedAttributeFromOriginalIssuer() - Method in class swiss.trustbroker.saml.dto.ResponseParameters
- getDropUnmappable() - Method in class swiss.trustbroker.federation.xmlconfig.Qoa
-
Drop unmapped Qoa from the request
Default: false - getElString(Element) - Static method in class swiss.trustbroker.wstrustclient.service.WsTrustSoapClientBase
- getEmailAddress() - Method in class swiss.trustbroker.homerealmdiscovery.dto.SupportInfo
- getEnabled() - Method in class swiss.trustbroker.federation.xmlconfig.AccessRequest
-
Enable this configuration.
- getEnabled() - Method in class swiss.trustbroker.federation.xmlconfig.AnnouncementRpConfig
-
Enable this configuration.
- getEnabled() - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsParty
-
Flag to enable/disable this CP.
- getEnabled() - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsProvider
-
Allow pre-configuration of ClaimsProviderMappings with enabled or disabled ClaimsParty in profiles and only pick them per relying party in setup.
- getEnabled() - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsProviderMappings
-
Allow pre-configuration of ClaimsProviderMappings in profiles without considering the RP setup
- getEnabled() - Method in class swiss.trustbroker.federation.xmlconfig.CounterParty
- getEnabled() - Method in class swiss.trustbroker.federation.xmlconfig.FlowPolicies
-
Enable this configuration.
- getEnabled() - Method in class swiss.trustbroker.federation.xmlconfig.Oidc
-
SAML protocol enabled.
- getEnabled() - Method in class swiss.trustbroker.federation.xmlconfig.ProfileSelection
-
Enable this feature
- getEnabled() - Method in class swiss.trustbroker.federation.xmlconfig.Provisioning
-
Enable IDM provisioning based on CP response.
- getEnabled() - Method in class swiss.trustbroker.federation.xmlconfig.RelyingParty
- getEnabled() - Method in class swiss.trustbroker.federation.xmlconfig.Saml
-
SAML protocol enabled.
- getEnabled() - Method in class swiss.trustbroker.federation.xmlconfig.WsTrust
-
WS-Trust protocol enabled.
- getEnableTrigger() - Method in class swiss.trustbroker.federation.xmlconfig.AuthorizedApplication
-
AccessRequest can be triggered by calling application.
- getEncodedQueryParameters() - Method in class swiss.trustbroker.sso.dto.SloNotification
- getEncodedUrl() - Method in class swiss.trustbroker.sso.dto.SloNotification
- getEncryption() - Method in class swiss.trustbroker.federation.xmlconfig.CounterParty
- getEncryption() - Method in class swiss.trustbroker.federation.xmlconfig.Saml
-
SAML encryption configuration.
- getEncryptionAlgorithm() - Method in class swiss.trustbroker.federation.xmlconfig.OidcSecurityPolicies
-
Encryption algorithm
Default: RSA-OAEP-256 - getEncryptionAlgorithm() - Method in class swiss.trustbroker.oidc.OidcEncryptionKeystoreService.EncryptionParams
- getEncryptionKeystore() - Method in class swiss.trustbroker.federation.xmlconfig.Certificates
-
Keystore for encryption.
- getEncryptionKid() - Method in class swiss.trustbroker.federation.xmlconfig.OidcSecurityPolicies
-
Encryption keyID
- getEncryptionMethod() - Method in class swiss.trustbroker.federation.xmlconfig.OidcSecurityPolicies
-
Encryption method
Default: A256GCM - getEncryptionMethod() - Method in class swiss.trustbroker.oidc.OidcEncryptionKeystoreService.EncryptionParams
- getEncryptionParams(OidcClient, RelyingParty) - Method in class swiss.trustbroker.oidc.OidcEncryptionKeystoreService
- getEncryptionTruststore() - Method in class swiss.trustbroker.federation.xmlconfig.Certificates
-
Truststore for encryption verification.
- getEndpointReferenceAddress() - Method in class swiss.trustbroker.config.dto.AccessRequestConfig
-
Global default for ID in requests sent by the AccessRequest.
- getEndpointReferenceAddress() - Method in class swiss.trustbroker.federation.xmlconfig.AuthorizedApplication
-
Overrides the RP ID in requests sent by the AccessRequest.
- getEndpointUrl() - Method in class swiss.trustbroker.config.dto.IdmConfig
-
Endpoint URL of the IDM
- getEndSessionEndpoint() - Method in class swiss.trustbroker.config.dto.OidcProperties
-
XTB OIDC session termination endpoint, included in the metadata.
- getEnforce() - Method in class swiss.trustbroker.federation.xmlconfig.Qoa
-
Enable QoA enforcement.
- getEnterpriseIdpId() - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
Deprecated.Replaced by the 'first' marker on the network, e.g. INTRANET-first.
- getEntryId() - Method in class swiss.trustbroker.audit.dto.AuditDto
- getErrorPageUrl() - Method in class swiss.trustbroker.util.ApiSupport
- getErrorPageUrl(String, String) - Method in class swiss.trustbroker.util.ApiSupport
- getErrorPageUrlWithFlags(String, String, String, List<String>) - Method in class swiss.trustbroker.util.ApiSupport
- getErrors() - Method in class swiss.trustbroker.federation.dto.ConfigElementStatus
- getErrors() - Method in class swiss.trustbroker.federation.xmlconfig.ValidationStatus
- getEventType() - Method in class swiss.trustbroker.audit.dto.AuditDto
- getExpectedAssertionId() - Method in class swiss.trustbroker.saml.util.AssertionValidator.ExpectedAssertionValues
- getExpectedAudience() - Method in class swiss.trustbroker.saml.util.AssertionValidator.ExpectedAssertionValues
- getExpectedCpComparison() - Method in class swiss.trustbroker.saml.util.AssertionValidator.ExpectedAssertionValues
- getExpectedCpContextClasses() - Method in class swiss.trustbroker.saml.util.AssertionValidator.ExpectedAssertionValues
- getExpectedIssuer() - Method in class swiss.trustbroker.saml.util.AssertionValidator.ExpectedAssertionValues
- getExpectedRecipient() - Method in class swiss.trustbroker.saml.util.AssertionValidator.ExpectedAssertionValues
- getExpectedRelayState() - Method in class swiss.trustbroker.saml.util.AssertionValidator.ExpectedAssertionValues
- getExpectedRequestId() - Method in class swiss.trustbroker.saml.util.AssertionValidator.ExpectedAssertionValues
- getExpectedRpId() - Method in class swiss.trustbroker.saml.util.AssertionValidator.ExpectedAssertionValues
- getExpectedSessionIndex() - Method in class swiss.trustbroker.saml.util.AssertionValidator.ExpectedAssertionValues
- getExpirationTime() - Method in class swiss.trustbroker.audit.dto.AuditDto
- getExpirationTime() - Method in class swiss.trustbroker.saml.dto.SsoParticipants
- getExpirationTime() - Method in class swiss.trustbroker.sessioncache.dto.Lifecycle
- getExpirationTimestamp() - Method in class swiss.trustbroker.sessioncache.dto.ArtifactCacheEntity
- getExpirationTimestamp() - Method in class swiss.trustbroker.sessioncache.dto.JwkCacheEntity
- getExpirationTimestamp() - Method in class swiss.trustbroker.sessioncache.dto.StateData
- getExpirationTimestamp() - Method in class swiss.trustbroker.sessioncache.dto.StateEntity
-
The scheduled reaper uses this field to clean up the database.
- getExpiredTime() - Method in class swiss.trustbroker.sessioncache.dto.Lifecycle
- getFallback() - Method in class swiss.trustbroker.config.dto.ContentSecurityPolicies
-
Default CSP configuration.
- getFallback() - Method in class swiss.trustbroker.config.dto.FrameOptionsPolicies
-
No further differentiation here as the FE, API, and SAML URLs are used together.
- getFeatureConditions() - Method in class swiss.trustbroker.saml.dto.ResponseStatus
-
Set by scripts to toggle features, to be consumed by the respective implementations.
- getFeatures() - Method in class swiss.trustbroker.config.dto.GuiProperties
-
Feature enabled for the theme.
- getFeatures() - Method in class swiss.trustbroker.homerealmdiscovery.dto.GuiConfig
- getFederationId() - Method in class swiss.trustbroker.federation.xmlconfig.OidcClient
-
Federation ID override.
- getFederationMetadata(boolean, boolean) - Method in class swiss.trustbroker.federation.service.FederationMetadataService
- getFederationServiceIssuerId() - Method in class swiss.trustbroker.saml.dto.ResponseParameters
- getFilter() - Method in class swiss.trustbroker.federation.xmlconfig.ProfileSelection
-
Apply filtering on roles.
- getFilterOutbound() - Method in class swiss.trustbroker.federation.xmlconfig.ProfileSelection
-
Apply filtering on roles to claims output as well reducing data to what has been selected by the user in INTERACTIVE mode.
- getFilterRoleConfiguration() - Method in class swiss.trustbroker.federation.xmlconfig.ProfileSelection
- getFilterUnits() - Method in class swiss.trustbroker.federation.xmlconfig.ProfileSelection
-
Filter unit properties by selected/default profile ID if n2k=true.
- getFingerprintCheck() - Method in class swiss.trustbroker.federation.xmlconfig.Sso
-
Device fingerprint check mode.
- getFlowPolicies() - Method in class swiss.trustbroker.federation.xmlconfig.RelyingParty
-
Error flow policies for this RP.
- getFlowPolicy() - Method in class swiss.trustbroker.saml.dto.ResponseStatus
-
Optional flow policy to control the abort flow.
- getFlowPolicyNamespaces() - Method in class swiss.trustbroker.config.dto.SamlProperties
-
Flow control namespace mappings.
- getFlows() - Method in class swiss.trustbroker.federation.xmlconfig.FlowPolicies
-
List of flow configurations.
- getFlows() - Method in class swiss.trustbroker.federation.xmlconfig.RelyingParty
- getForceAuthn() - Method in class swiss.trustbroker.federation.xmlconfig.SecurityPolicies
-
Always enforce re-authentication on this CP/on all CPs configured for this RP.
- getForceAuthn() - Method in class swiss.trustbroker.sessioncache.dto.StateData
- getForceIdmRefresh() - Method in class swiss.trustbroker.federation.xmlconfig.Sso
-
Refresh IDM data for SSO - enable e.g.
- getFormat() - Method in class swiss.trustbroker.config.dto.SecToken
-
Security token format.
- getFormat() - Method in class swiss.trustbroker.federation.xmlconfig.SubjectName
-
Subject Name ID format.
- getForwardRpProtocolBinding() - Method in class swiss.trustbroker.federation.xmlconfig.Saml
-
Forward
ProtocolBindingfrom RP tp CP. - getFrameAncestors() - Method in class swiss.trustbroker.federation.xmlconfig.AcWhitelist
-
Allowed frame ancestors for iframes.
- getFrameAncestorsWithFallback() - Method in class swiss.trustbroker.federation.xmlconfig.AcWhitelist
- getFrameOptions() - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
HTTP Frame Options configuration.
- getFrontend() - Method in class swiss.trustbroker.config.dto.ContentSecurityPolicies
-
CSP configuration for frontend URLs.
- getFrontendBaseUrl() - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
Unused / empty for normal setup.
- getFrontendUrl(String, String, String...) - Method in class swiss.trustbroker.util.ApiSupport
- getFullSsoGroupName() - Method in class swiss.trustbroker.sso.service.SsoService.SsoCookieNameParams
- getGatewayIP() - Method in class swiss.trustbroker.audit.dto.AuditDto
- getGlobal() - Method in class swiss.trustbroker.config.dto.Banner
-
Banner is globally enabled, regardless tiles on the screen.
- getGlobalAnnouncements() - Method in class swiss.trustbroker.announcement.service.NoOpAnnouncementService
- getGlobalApplicationName() - Method in class swiss.trustbroker.config.dto.AnnouncementConfig
-
Global Announcement application name
- getGlobalBanners() - Method in class swiss.trustbroker.config.dto.GuiProperties
- getGlobalProfilesPath() - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
Relative path to
definitionof the global profiles. - getGlobalRequestTrust() - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
Optional trust anchor for SAML request test automation or monitoring.
- getGlobalScriptPath() - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
Relative path to
scriptPathof the global Groovy scripts. - getGrantType() - Method in class swiss.trustbroker.audit.dto.AuditDto
- getGrantTypes() - Method in class swiss.trustbroker.config.dto.OidcProperties
-
Enabled grant types.
- getGrantTypes() - Method in class swiss.trustbroker.federation.xmlconfig.AuthorizationGrantTypes
-
List of authorization grant types.
- getGroupName() - Method in class swiss.trustbroker.federation.xmlconfig.Sso
-
Configure a reference to an existing SSOGroup name.
- getGui() - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
GUI related configuration.
- getGuiConfig() - Method in class swiss.trustbroker.config.controller.ConfigController
- getHeader(String) - Method in class swiss.trustbroker.oidc.tx.OidcTxRequestWrapper
- getHeaderNames() - Method in class swiss.trustbroker.oidc.tx.OidcTxRequestWrapper
- getHeaders(String) - Method in class swiss.trustbroker.oidc.tx.OidcTxRequestWrapper
- getHeaderSourceString(MarshallerFactory, String, String, XMLObject) - Static method in class swiss.trustbroker.wstrustclient.service.WsTrustSoapClientBase
- getHeaderSourceString(MarshallerFactory, WsTrustSoapClientBase.MarshallingInfo) - Static method in class swiss.trustbroker.wstrustclient.service.WsTrustSoapClientBase
- getHeaderSourceString(MarshallerFactory, WsTrustSoapClientBase.MarshallingInfo, List<WsTrustSoapClientBase.MarshallingInfo>) - Static method in class swiss.trustbroker.wstrustclient.service.WsTrustSoapClientBase
- getHomeName() - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsParty
-
The homeName is usually consumed from the home name attribute and identifies the CP attribute to consume the CP identity from instead of the subject name ID source.
- getHomeName() - Method in class swiss.trustbroker.saml.dto.CpResponse
-
HomeName used by IdmService to query IDM.
- getHomeName(ClaimsParty, CpResponse) - Static method in class swiss.trustbroker.homerealmdiscovery.service.RelyingPartySetupService
- getHomeNameChecked(ClaimsParty, List<Assertion>, CpResponse) - Method in class swiss.trustbroker.homerealmdiscovery.service.RelyingPartySetupService
- getHomeNameIssuerMapping() - Method in class swiss.trustbroker.saml.dto.ResponseParameters
- getHrdCpApi(String, String) - Method in class swiss.trustbroker.util.ApiSupport
- getHrdHint() - Method in class swiss.trustbroker.sessioncache.dto.StateData
- getHrdHintAlias() - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsProvider
-
The HRD hint parameter sent by the RP is matched against the following attributes of the ClaimsProvider element.
- getHrdHintParameter() - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
HTTP GET query parameter (or POST parameter) that can be sent to request selection of an IDP instead of showing the HRD screen.
- getHrdHintParameter(HttpServletRequest, TrustBrokerProperties) - Static method in class swiss.trustbroker.util.HrdSupport
- getHrdHintTestAllowedFromInternet() - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
Allow hrdHintTestParameter without a network header or from INTERNET.
- getHrdHintTestCookie(HttpServletRequest, TrustBrokerProperties) - Static method in class swiss.trustbroker.util.HrdSupport
- getHrdHintTestHeader(HttpServletRequest, TrustBrokerProperties) - Static method in class swiss.trustbroker.util.HrdSupport
- getHrdHintTestParameter() - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
HTTP header / cookie name to allow a testing framework to pass a CP to be selected in HRD.
- getHrdRpApi(String, String) - Method in class swiss.trustbroker.util.ApiSupport
- getHrdRpContinueApi() - Method in class swiss.trustbroker.util.ApiSupport
- getHrdTilesForRpIssuer(HttpServletRequest, String, String) - Method in class swiss.trustbroker.homerealmdiscovery.controller.HrdController
- getHrdUrl(String, String) - Method in class swiss.trustbroker.util.ApiSupport
- getHttpContext(HttpServletRequest, NetworkConfig) - Static method in class swiss.trustbroker.util.WebSupport
- getHttpOnly() - Method in class swiss.trustbroker.config.dto.CookieProperties
-
Optional cookie HTTP only flag.
- getId() - Method in class swiss.trustbroker.federation.dto.ConfigElementStatus
- getId() - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsParty
-
Issuer ID of the claims provider that need to match ClaimsProvider entries in ClaimsProviderDefinitions for HRD display and have to be returned by CPs in SAML responses.
- getId() - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsProvider
-
References the issuer ID of the CP.
- getId() - Method in class swiss.trustbroker.federation.xmlconfig.CounterParty
- getId() - Method in class swiss.trustbroker.federation.xmlconfig.Flow
-
SAML error code with or without namespace, adding
- getId() - Method in class swiss.trustbroker.federation.xmlconfig.IdmQuery
-
A query needs an ID when its name is not unique and its execution needs to be controlled via a custom script based on CP input usually.
- getId() - Method in class swiss.trustbroker.federation.xmlconfig.OidcClient
-
Client ID.
- getId() - Method in class swiss.trustbroker.federation.xmlconfig.RelyingParty
- getId() - Method in class swiss.trustbroker.saml.dto.DeviceInfoReq
- getId() - Method in class swiss.trustbroker.sessioncache.dto.JwkCacheEntity
- getId() - Method in class swiss.trustbroker.sessioncache.dto.StateData
- getId() - Method in class swiss.trustbroker.sessioncache.dto.StateEntity
- getIdentityProvider() - Method in class swiss.trustbroker.config.dto.OidcProperties
-
OIDC identity provider configuration.
- getIdm() - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
Configuration for optional IDM integration.
- getIdmAttributeSelection(RelyingPartyConfig, IdmRequest) - Static method in class swiss.trustbroker.util.IdmAttributeUtil
- getIdmLookup() - Method in class swiss.trustbroker.federation.xmlconfig.RelyingParty
-
IDM lookup configuration for this RP.
- getIdmLookup() - Method in class swiss.trustbroker.saml.dto.CpResponse
-
Contains the
IdmLookupfor the corresponding RP. - getIdpNameFormats() - Method in class swiss.trustbroker.config.dto.SamlProperties
-
CP-side supported name formats
- getIdsFromReferer(String) - Static method in class swiss.trustbroker.homerealmdiscovery.util.RelyingPartyUtil
- getIdTokenEncryptionAlgorithms() - Method in class swiss.trustbroker.config.dto.OidcProperties
-
Enabled ID token encryption algorithms.
- getIdTokenEncryptionMethods() - Method in class swiss.trustbroker.config.dto.OidcProperties
-
Enabled ID token encryption methods.
- getIdTokenSignature() - Method in class swiss.trustbroker.federation.xmlconfig.OidcSecurityPolicies
-
ID token signature algorithm (many adapters only support RS256)
- getIdTokenSigningAlgorithms() - Method in class swiss.trustbroker.config.dto.OidcProperties
-
Enabled ID token signing algorithms methods.
- getIdTokenTimeToLiveMin() - Method in class swiss.trustbroker.federation.xmlconfig.OidcSecurityPolicies
- getImage() - Method in class swiss.trustbroker.saml.dto.SsoParticipant
- getImage() - Method in class swiss.trustbroker.saml.dto.UiObject
-
Image displayed in the HRD large view.
- getImageByNameWithMediaType(HttpServletRequest, HttpServletResponse, String) - Method in class swiss.trustbroker.gui.WebResourceController
- getImageByNameWithMediaType(HttpServletRequest, HttpServletResponse, String) - Method in class swiss.trustbroker.homerealmdiscovery.service.WebResourceProvider
- getImages() - Method in class swiss.trustbroker.config.dto.GuiProperties
-
Resource path where images used in the ClaimsProviderDefinitions are stored.
- getImg() - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsProvider
-
Image displayed in the HRD large view.
- getInboundMode() - Method in class swiss.trustbroker.federation.xmlconfig.ArtifactBinding
-
Mode for inbound Artifact binding.
- getIndex() - Method in class swiss.trustbroker.config.dto.ArtifactResolution
-
XTB Artifact Resolution index.
- getInitialClientState(HttpServletRequest) - Static method in class swiss.trustbroker.oidc.session.OidcSessionSupport
- getInitialRedirectUri(HttpSession) - Static method in class swiss.trustbroker.oidc.session.OidcSessionSupport
- getInitTime() - Method in class swiss.trustbroker.sessioncache.dto.AccessRequestSessionState
- getInitTime() - Method in class swiss.trustbroker.sessioncache.dto.Lifecycle
- getInResponseTo() - Method in class swiss.trustbroker.saml.dto.CpResponse
-
ID of the authentication request that lead to this CP response.
- getInteractiveMultiServiceParameters() - Method in class swiss.trustbroker.config.dto.AccessRequestConfig
-
Global default for interactive Access Request service parameters (multi tenant mode).
- getInteractiveResultParameter() - Method in class swiss.trustbroker.config.dto.AccessRequestConfig
-
Interactive Access Request result parameter name.
- getInteractiveResultUserCancel() - Method in class swiss.trustbroker.config.dto.AccessRequestConfig
-
Value of resultParameter indicating user has cancelled the process.
- getInteractiveServiceParameters() - Method in class swiss.trustbroker.config.dto.AccessRequestConfig
-
Global default for interactive Access Request service parameters.
- getInteractiveServiceUrl() - Method in class swiss.trustbroker.config.dto.AccessRequestConfig
-
Global default for interactive Access Request service URL
- getInternetNetworkName() - Method in class swiss.trustbroker.config.dto.NetworkConfig
-
Name for the Internet network used in configurations (e.g.
- getIntranetNetworkName() - Method in class swiss.trustbroker.config.dto.NetworkConfig
-
Name for the Intranet network used in configurations (e.g.
- getIntrospectionEndpointAuthMethods() - Method in class swiss.trustbroker.config.dto.OidcProperties
-
Enabled introspection endpoint auth methods.
- getIssueInstant() - Method in class swiss.trustbroker.sessioncache.dto.StateData
- getIssuer() - Method in class swiss.trustbroker.audit.dto.AuditDto
- getIssuer() - Method in class swiss.trustbroker.config.dto.OidcProperties
-
XTB OIDC issuer ID.
- getIssuer() - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
Issuer ID used for all SAML2 messages XTB produces.
- getIssuer() - Method in class swiss.trustbroker.federation.xmlconfig.SloResponse
-
Issuer for SAML LogoutResponse.
- getIssuer() - Method in class swiss.trustbroker.saml.dto.CpResponse
-
CP Response issuer also referred to as HomeRealm.
- getIssuer() - Method in class swiss.trustbroker.sessioncache.dto.StateData
- getIssuerId() - Method in class swiss.trustbroker.config.dto.AccessRequestConfig
-
Global default issuer ID.
- getIssuerId() - Method in class swiss.trustbroker.federation.xmlconfig.AuthorizedApplication
-
Overrides the global issuer.
- getIssuerId() - Method in class swiss.trustbroker.federation.xmlconfig.OidcClient
-
CP issuer ID override for
issclaim validation. - getIssuerId() - Method in class swiss.trustbroker.oidc.client.dto.OpenIdProviderConfiguration
- getIssuerId() - Method in class swiss.trustbroker.saml.dto.CpResponse
- getIssuerId() - Method in class swiss.trustbroker.saml.dto.ResponseParameters
- getIssuerInstant() - Method in class swiss.trustbroker.saml.dto.ResponseParameters
- getIssuerNameId() - Method in class swiss.trustbroker.federation.xmlconfig.IdmQuery
-
SAML federation filter to be applied to the user query.
- getIssuerNameIdAttribute() - Method in class swiss.trustbroker.federation.xmlconfig.IdmQuery
- getIssuerNameIdNS() - Method in class swiss.trustbroker.federation.xmlconfig.IdmQuery
-
Instead of an issuerNameId the SAML federation can also be identified via its fully qualified homeName attribute as an input.
- getJsonData() - Method in class swiss.trustbroker.sessioncache.dto.StateEntity
- getJsonErrorPageHeaders() - Method in class swiss.trustbroker.config.dto.OidcProperties
-
List of HTTP header names and regex matching the value.
- getJwk() - Method in class swiss.trustbroker.sessioncache.dto.JwkCacheEntity
- getJwkEndpoint() - Method in class swiss.trustbroker.oidc.client.dto.OpenIdProviderConfiguration
- getJwkSet() - Method in class swiss.trustbroker.oidc.client.dto.OpenIdProviderConfiguration
- getJwkSetUrl() - Method in class swiss.trustbroker.federation.xmlconfig.ProtocolEndpoints
-
Jwk endpoint url
- getJWTEntities() - Method in class swiss.trustbroker.sessioncache.service.JwkCacheService
- getKey(ClaimsParty, String, OidcClient) - Method in class swiss.trustbroker.oidc.cache.service.OidcMetadataCacheService
-
Provide key by token key ID.
- getKeyDeletionMinutes() - Method in class swiss.trustbroker.config.dto.OidcProperties
-
Deletion of expired (rotated) keys in minutes.
- getKeyEncryptionAlgorithm() - Method in class swiss.trustbroker.federation.xmlconfig.Encryption
-
Key encryption algorithm.
- getKeyEncryptionAlgorithm(Encryption) - Static method in class swiss.trustbroker.saml.service.RelyingPartyService
- getKeyExpirationMinutes() - Method in class swiss.trustbroker.config.dto.OidcProperties
-
Expiration of keys in minutes.
- getKeyId() - Method in class swiss.trustbroker.oidc.OidcEncryptionKeystoreService.EncryptionParams
- getKeyInfo() - Method in class swiss.trustbroker.federation.xmlconfig.Encryption
-
Value emitted in Key Info (CERTIFICATE, SKI).
- getKeyPath() - Method in class swiss.trustbroker.federation.xmlconfig.SignerKeystore
-
Path of the key.
- getKeyPath() - Method in class swiss.trustbroker.federation.xmlconfig.SignerStore
-
Path of the key.
- getKeyPath() - Method in class swiss.trustbroker.federation.xmlconfig.SignerTruststore
-
Path of the key.
- getKeyPlacement() - Method in class swiss.trustbroker.federation.xmlconfig.Encryption
-
Key placement (PEER, INLINE).
- getKeySchedule() - Method in class swiss.trustbroker.config.dto.OidcProperties
-
Key rotation schedule.
- getKeySize() - Method in class swiss.trustbroker.sessioncache.service.ArtifactStorageService
- getKeystore() - Method in class swiss.trustbroker.config.dto.ArtifactResolution
-
Default keystore for artifact resolution.
- getKeystore() - Method in class swiss.trustbroker.config.dto.IdmConfig
-
Keystore for accessing the IDM.
- getKeystore() - Method in class swiss.trustbroker.config.dto.OidcProperties
-
Default keystore for direct connections to OIDC CPs.
- getKeystoreBasePath() - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
Base path of the keystores configured in the XML configurations.
- getKeyType() - Method in class swiss.trustbroker.wstrustclient.dto.WsTrustRstRequest
- getLanguageCookie() - Method in class swiss.trustbroker.config.dto.GuiProperties
-
Attributes for the cookie that stores the user's selected language.
- getLanguageCookie() - Method in class swiss.trustbroker.homerealmdiscovery.dto.GuiConfig
- getLastAccessedTime() - Method in class swiss.trustbroker.oidc.session.TomcatSession
- getLastAuthTimestamp() - Method in class swiss.trustbroker.sessioncache.dto.Lifecycle
- getLastConversationId() - Method in class swiss.trustbroker.sessioncache.dto.StateData
- getLatestSsoSessionEndTime(int) - Method in class swiss.trustbroker.sessioncache.dto.StateData
- getLdap() - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
Configuration for optional LDAP integration.
- getLegacy() - Method in class swiss.trustbroker.config.dto.QualityOfAuthenticationConfig
-
Mapping of legacy QoA values to QoaLevel.
- getLevel() - Method in class swiss.trustbroker.config.dto.Support
-
Logger names handle on a higher level than the default logging.logger level.
- getLifecycle() - Method in class swiss.trustbroker.sessioncache.dto.StateData
- getLifecycleState() - Method in class swiss.trustbroker.sessioncache.dto.Lifecycle
- getLifetimeMin() - Method in class swiss.trustbroker.config.dto.WsTrustConfig
-
Lifetime expiration in minutes.
- getLifeTimeMin() - Method in class swiss.trustbroker.config.dto.AnnouncementConfig
-
After this many minutes of connection loss discard the messages from the cache.
- getLifetimeSec() - Method in class swiss.trustbroker.config.dto.SecToken
-
Security token lifetime in seconds.
- getLink() - Method in class swiss.trustbroker.federation.xmlconfig.Flow
-
Show error page including a link to
appUrl. - getLogger() - Method in class swiss.trustbroker.audit.service.BaseAuditLogger
- getLogger() - Method in class swiss.trustbroker.audit.service.DefaultAuditLogger
- getLogger() - Method in class swiss.trustbroker.audit.service.OpsAuditLogger
- getLoginDurationSecs() - Method in class swiss.trustbroker.audit.dto.AuditDto
- getLoginStatusPage(HttpServletRequest, HttpServletResponse) - Method in class swiss.trustbroker.oidc.sso.controller.OidcSessionController
- getLogoutNotifications() - Method in class swiss.trustbroker.federation.xmlconfig.Sso
-
Notify other SSO participants about the ongoing logout.
- getLogoutSsoGroup() - Method in class swiss.trustbroker.sso.service.SsoService.SloState
- getMainImage() - Method in class swiss.trustbroker.config.dto.Banner
-
Optional main image.
- getMainImage() - Method in class swiss.trustbroker.saml.dto.UiBanner
-
Main image of banner.
- getMapInbound() - Method in class swiss.trustbroker.federation.xmlconfig.AcClass
-
Enable mapping of inbound QoA.
- getMapOutbound() - Method in class swiss.trustbroker.federation.xmlconfig.AcClass
-
Enable mapping of outbound QoA.
- getMapOutbound() - Method in class swiss.trustbroker.federation.xmlconfig.Qoa
-
Enable mapping of outbound QoA.
- getMappedNameId() - Method in class swiss.trustbroker.audit.dto.AuditDto
- getMappedNameId() - Method in class swiss.trustbroker.saml.dto.CpResponse
-
CP Response incoming subject name ID after CP side subject name mapping.
- getMappers() - Method in class swiss.trustbroker.config.dto.AttributeProperties
-
The claim mappers used for mapping the values.
- getMappers() - Method in class swiss.trustbroker.federation.xmlconfig.Definition
-
Comma-separated list of mappers to be used for the value.
- getMapping() - Method in class swiss.trustbroker.config.dto.QualityOfAuthenticationConfig
-
Global mapping of QoA values to QoaLevel.
- getMappings() - Method in class swiss.trustbroker.config.dto.AccessRequestConfig
-
Mappings that might be needed by the implementation.
- getMappings() - Method in class swiss.trustbroker.config.dto.IdmConfig
-
Mappings that might be needed by the implementation.
- getMatchAcUrl() - Method in class swiss.trustbroker.federation.xmlconfig.SloResponse
-
Perform ACUrl matching for absolute url, prefix with ACUrl scheme/host/port for relative URL.
- getMatchFunction() - Method in enum class swiss.trustbroker.federation.xmlconfig.FingerprintCheck
- getMaxAge() - Method in class swiss.trustbroker.config.dto.CookieProperties
-
Optional cookie maxAge
- getMaxAge() - Method in class swiss.trustbroker.homerealmdiscovery.dto.CookieConfig
- getMaxBanners() - Method in class swiss.trustbroker.config.dto.GuiProperties
-
Limit the number of banners shown on HRD.
- getMaxCachingTimeMinutes() - Method in class swiss.trustbroker.federation.xmlconfig.SsoGroup
-
Time in minutes an RP can access XTB reusing the currently active SSO session without the need to interact with the CP again on an established SSO session, except when the SAML
- getMaxCachingTimeSecs() - Method in class swiss.trustbroker.sessioncache.dto.SsoState
- getMaxIdleTimeMinutes() - Method in class swiss.trustbroker.federation.xmlconfig.SsoGroup
-
Time in minutes without any XTB SSO interaction leading to session removal.
- getMaxIdleTimeSecs() - Method in class swiss.trustbroker.sessioncache.dto.SsoState
- getMaxQoaOrder(List<String>, QoaConfig) - Method in class swiss.trustbroker.mapping.service.QoaMappingService
- getMaxQoaOrder(List<String>, QoaConfig, Map<String, Integer>) - Static method in class swiss.trustbroker.mapping.util.QoaMappingUtil
- getMaxSessionTimeMinutes() - Method in class swiss.trustbroker.federation.xmlconfig.SsoGroup
-
Time in minutes an SSO session exists at most (even though there was interaction where the idle timeout did not expire yet).
- getMaxSessionTimeSecs() - Method in class swiss.trustbroker.sessioncache.dto.SsoState
- getMemoryLimitBytes() - Method in class swiss.trustbroker.config.dto.Support
-
Configure in-memory limits so network traffic cannot crash pods.
- getMessageId() - Method in class swiss.trustbroker.audit.dto.AuditDto
- getMessageLifetimeSec() - Method in class swiss.trustbroker.config.dto.SecurityChecks
-
IssueInstant timestamp check should accept Assertion.Condition.NotValidOnOrAfter over WS-Trust.
- getMessageOfExceptionOrCause(Exception, boolean) - Static method in class swiss.trustbroker.exception.GlobalExceptionHandler
- getMetadataUrl() - Method in class swiss.trustbroker.federation.xmlconfig.ProtocolEndpoints
-
SAML/OIDC metadata URL.
- getMethod() - Method in enum class swiss.trustbroker.federation.xmlconfig.ClientAuthenticationMethod
- getMethods() - Method in class swiss.trustbroker.federation.xmlconfig.ClientAuthenticationMethods
-
List of authentication methods.
- getMigrationAlias() - Method in class swiss.trustbroker.federation.xmlconfig.HomeName
-
Used for provisioning during migration from a CP to another.
- getMinimumMetadataCacheTimeSecs() - Method in class swiss.trustbroker.config.dto.OidcProperties
-
Cached CP metadata is only refreshed if cached earlier than this.
- getMinQoa() - Method in class swiss.trustbroker.federation.xmlconfig.AuthorizedApplication
-
Matched against minimum QOA from SAML AuthnContextClassRef.
- getMinQoaLevel(List<String>, QoaConfig) - Method in class swiss.trustbroker.mapping.service.QoaMappingService
- getMinSessionLifetimeSec() - Method in class swiss.trustbroker.config.dto.StateCacheProperties
-
Prevents collecting sessions related to a pending login.
- getMobileGatewayIpRegex() - Method in class swiss.trustbroker.config.dto.NetworkConfig
- getMobileIdpId() - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
Mobile IDP ID that is used for CP filtering in HRD when XTB is accessed via configured IP addresses (mobileGatewayIpRegex).
- getMode() - Method in class swiss.trustbroker.federation.xmlconfig.AuthorizedApplication
-
Mode to be used for the AccessRequest, depending on the implementation.
- getMode() - Method in class swiss.trustbroker.federation.xmlconfig.ProfileSelection
-
Mode for profile selection.
- getMode() - Method in class swiss.trustbroker.federation.xmlconfig.SloResponse
-
The mode of this entry.
- getMode() - Method in class swiss.trustbroker.sessioncache.dto.AccessRequestSessionState
- getModes() - Method in class swiss.trustbroker.federation.xmlconfig.Provisioning
-
Provisioning mode flags passed to the implementations.
- getMonitoring() - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
Montiforing configuration.
- getMonitoringAcsUrl() - Method in class swiss.trustbroker.util.ApiSupport
- getMonitoringAcsUrl(String) - Method in class swiss.trustbroker.util.ApiSupport
- getMonitoringAcsUrl(String, String) - Method in class swiss.trustbroker.util.ApiSupport
- getMonitoringAcsUrlWithQueryParameters(String, String) - Method in class swiss.trustbroker.util.ApiSupport
- getMonitoringHints() - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
HTTP markers identifying monitoring clients that cannot deal with new features.
- getMultiQueryPolicy() - Method in class swiss.trustbroker.federation.xmlconfig.IdmLookup
-
Handling of same attributes across queries.
- getMultiSourcePolicy() - Method in class swiss.trustbroker.federation.xmlconfig.AttributesSelection
-
Policy for merging attributes from multiple sources.
- getMultiValued() - Method in class swiss.trustbroker.federation.xmlconfig.Definition
-
Multi value handling.
- getMultiValues() - Method in class swiss.trustbroker.federation.xmlconfig.Definition
- getN2kSeparator() - Method in class swiss.trustbroker.config.dto.LdapStoreConfig
-
Default value for n2k separator.
- getName() - Method in class swiss.trustbroker.config.dto.AttributeProperties
-
Short name used in auditing and for IDM attribute addressing.
- getName() - Method in class swiss.trustbroker.config.dto.Banner
-
Name of the banner used for referencing resources (texts, css class).
- getName() - Method in class swiss.trustbroker.config.dto.CookieProperties
-
Cookie name
- getName() - Method in enum class swiss.trustbroker.federation.xmlconfig.AuthorizationGrantType
- getName() - Method in class swiss.trustbroker.federation.xmlconfig.AuthorizedApplication
-
Required application name (usually corresponding to IDM).
- getName() - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsProvider
-
Name displayed to the user directly.
- getName() - Method in enum class swiss.trustbroker.federation.xmlconfig.ClientAuthenticationMethod
- getName() - Method in class swiss.trustbroker.federation.xmlconfig.Definition
-
Short name used in auditing and for IDM attribute addressing.
- getName() - Method in class swiss.trustbroker.federation.xmlconfig.HomeName
- getName() - Method in class swiss.trustbroker.federation.xmlconfig.IdmQuery
-
Name of the query, depending on the IdmService implementation.
- getName() - Method in enum class swiss.trustbroker.federation.xmlconfig.ResponseMode
- getName() - Method in class swiss.trustbroker.federation.xmlconfig.Scope
- getName() - Method in class swiss.trustbroker.federation.xmlconfig.Script
-
The value identifies the script stored in the trustbroker-inventories definition/scripts directory.
- getName() - Method in class swiss.trustbroker.federation.xmlconfig.SsoGroup
-
Mandatory group name.
- getName() - Method in class swiss.trustbroker.homerealmdiscovery.dto.CookieConfig
- getName() - Method in class swiss.trustbroker.mapping.dto.CustomQoa
- getName() - Method in class swiss.trustbroker.oidc.session.SessionPrincipal
- getName() - Method in class swiss.trustbroker.saml.dto.UiBanner
-
Name of the banner referencing configuration.
- getName() - Method in class swiss.trustbroker.saml.dto.UiObject
-
name is displayed on the tile given it's not used as a key into the translation service or overridden by tileTitle.
- getNameId() - Method in class swiss.trustbroker.saml.dto.CpResponse
-
Subject name ID.
- getNameId() - Method in class swiss.trustbroker.saml.dto.ResponseParameters
- getNameIdFormat() - Method in class swiss.trustbroker.saml.dto.CpResponse
-
Format of the subject name ID.
- getNameIdFormat() - Method in class swiss.trustbroker.saml.dto.ResponseParameters
- getNameIdQualifier() - Method in class swiss.trustbroker.saml.dto.ResponseParameters
- getNamespace() - Method in class swiss.trustbroker.config.dto.SamlNamespace
-
SAML namespace.
- getNamespacePrefix() - Method in class swiss.trustbroker.federation.xmlconfig.Flow
-
Prefix if there are multiple
- getNamespaceUri() - Method in class swiss.trustbroker.audit.dto.AuditDto.ResponseAttributeValue
- getNamespaceUri() - Method in class swiss.trustbroker.config.dto.AttributeProperties
-
The long name is used in the generated SAML assertion towards the RP.
- getNamespaceUri() - Method in class swiss.trustbroker.federation.xmlconfig.Definition
-
The long name is used in the generated SAML assertion towards the RP.
- getNearestMaxQoaOrder(List<String>, QoaConfig, Integer, Map<String, Integer>) - Static method in class swiss.trustbroker.mapping.util.QoaMappingUtil
- getNeedToKnow() - Method in class swiss.trustbroker.federation.xmlconfig.ProfileSelection
-
Apply name/value transformation.
- getNestedStatus() - Method in class swiss.trustbroker.audit.dto.AuditDto
- getNetwork() - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
Network configuration.
- getNetworkHeader() - Method in class swiss.trustbroker.config.dto.NetworkConfig
-
HTTP header delivering the client network.
- getNotBeforeToleranceSec() - Method in class swiss.trustbroker.config.dto.SecurityChecks
-
Any timestamp tolerance NTP drift tolerance.
- getNoticeClaimsProviders() - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsProvider
-
The list of ClaimsProviders name
- getNoticeClaimsProviders() - Method in class swiss.trustbroker.saml.dto.UiObject
-
The list of ClaimsProviders name
- getNoticeEnabled() - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsProvider
-
Notice enabled
- getNoticeMaxAgeSec() - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsProvider
-
Notice max age
- getNoticeMaxAgeSec() - Method in class swiss.trustbroker.saml.dto.UiObject
-
Notice max age
- getNotOnOrAfterSeconds() - Method in class swiss.trustbroker.federation.xmlconfig.SecurityPolicies
-
Overrides the global
tokenLifetimeSecfor CP response AuthnInstant checks. - getNotOnOrAfterToleranceSec() - Method in class swiss.trustbroker.config.dto.SecurityChecks
-
Any timestamp clock/transfer tolerance.
- getNumCp() - Method in class swiss.trustbroker.monitoring.dto.MonitoringResponse
- getOidc() - Method in class swiss.trustbroker.config.dto.ContentSecurityPolicies
-
CSP configuration for OIDC.
- getOidc() - Method in class swiss.trustbroker.config.dto.FrameOptionsPolicies
-
/app/device and other api services might run in an application iframe so switch from deny to same origin.
- getOidc() - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
OIDC protocol configuration.
- getOidc() - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsParty
-
OIDC client configuration to integrate CP/IDP
- getOidc() - Method in class swiss.trustbroker.federation.xmlconfig.CounterParty
- getOidc() - Method in class swiss.trustbroker.federation.xmlconfig.RelyingParty
- getOidcClaimNames() - Method in class swiss.trustbroker.federation.xmlconfig.Definition
- getOidcClientByPredicate(Predicate<OidcClient>) - Method in class swiss.trustbroker.config.dto.RelyingPartyDefinitions
- getOidcClientConfigById(String, TrustBrokerProperties) - Method in class swiss.trustbroker.config.dto.RelyingPartyDefinitions
- getOidcClientId() - Method in class swiss.trustbroker.audit.dto.AuditDto
- getOidcClientId() - Method in class swiss.trustbroker.audit.dto.OidcAuditData
- getOidcClientId() - Method in class swiss.trustbroker.oidc.session.HttpExchangeSupport
- getOidcClientId() - Static method in class swiss.trustbroker.oidc.session.OidcSessionSupport
- getOidcClientId() - Method in class swiss.trustbroker.oidc.session.TomcatSession
- getOidcClientId() - Method in class swiss.trustbroker.saml.dto.CpResponse
-
Incoming OIDC client_id.
- getOidcClientId() - Method in class swiss.trustbroker.sessioncache.dto.SsoSessionParticipant
- getOidcClientId() - Method in class swiss.trustbroker.sessioncache.dto.StateData
- getOidcClientId(HttpServletRequest, RelyingPartyDefinitions) - Static method in class swiss.trustbroker.oidc.session.OidcSessionSupport
- getOidcClientId(HttpServletRequest, RelyingPartyDefinitions, NetworkConfig) - Static method in class swiss.trustbroker.oidc.session.OidcSessionSupport
- getOidcClientIdFromHttpParams(HttpServletRequest, RelyingPartyDefinitions, NetworkConfig) - Static method in class swiss.trustbroker.oidc.session.OidcSessionSupport
- getOidcClients() - Method in class swiss.trustbroker.federation.xmlconfig.CounterParty
- getOidcClientsByPredicate(Predicate<OidcClient>) - Method in class swiss.trustbroker.config.dto.RelyingPartyDefinitions
- getOidcConfiguration(ClaimsParty) - Method in class swiss.trustbroker.oidc.cache.service.OidcMetadataCacheService
- getOidcConfiguration(RelyingParty, OidcClient) - Method in class swiss.trustbroker.oidc.cache.service.OidcMetadataCacheService
- getOidcConfigurations() - Method in class swiss.trustbroker.config.dto.RelyingPartyDefinitions
- getOidcCookie(HttpServletRequest, String, NetworkConfig) - Static method in class swiss.trustbroker.oidc.session.OidcSessionSupport
- getOidcErrorLocation(String, String, String, String, String, String) - Static method in class swiss.trustbroker.oidc.OidcExceptionHelper
- getOidcIdpCredential() - Method in class swiss.trustbroker.config.dto.RelyingPartyDefinitions
- getOidcLogoutUrl() - Method in class swiss.trustbroker.audit.dto.OidcAuditData
- getOidcMapper() - Method in class swiss.trustbroker.federation.xmlconfig.Definition
-
Deprecated.use mappers
- getOidcNameList() - Method in class swiss.trustbroker.config.dto.AttributeProperties
-
The claim names used when emitting an attribute to an OIDC client.
- getOidcNameList() - Method in class swiss.trustbroker.federation.xmlconfig.Definition
- getOidcNames() - Method in class swiss.trustbroker.federation.xmlconfig.Definition
-
The claim names used when emitting an attribute to an OIDC client (comma-separated - as an attribute, it cannot be a List).
- getOidcNonce() - Method in class swiss.trustbroker.sessioncache.dto.StateData
- getOidcOnly() - Method in class swiss.trustbroker.federation.xmlconfig.ProfileSelection
-
Apply name/value transformation for n2k only for Oidc.
- getOidcRefreshToken() - Method in class swiss.trustbroker.sessioncache.dto.StateData
- getOidcRelayState() - Static method in class swiss.trustbroker.oidc.session.OidcSessionSupport
- getOidcRelayState(HttpServletRequest, String) - Static method in class swiss.trustbroker.oidc.session.OidcSessionSupport
- getOidcResponseApi(String) - Method in class swiss.trustbroker.util.ApiSupport
- getOidcScopes() - Method in class swiss.trustbroker.saml.dto.CpResponse
-
Incoming OIDC scopes.
- getOidcSecurityPolicies() - Method in class swiss.trustbroker.federation.xmlconfig.OidcClient
-
Override security policies.
- getOidcSession() - Method in class swiss.trustbroker.oidc.session.HttpExchangeSupport
- getOidcSessionData() - Method in class swiss.trustbroker.sessioncache.dto.StateData
- getOidcSessionId() - Method in class swiss.trustbroker.audit.dto.OidcAuditData
- getOidcSessionId() - Static method in class swiss.trustbroker.oidc.session.OidcSessionSupport
- getOidcSessionId() - Method in class swiss.trustbroker.sessioncache.dto.SsoSessionParticipant
- getOidcSessionId() - Method in class swiss.trustbroker.sessioncache.dto.StateData
- getOidcSessionId() - Method in class swiss.trustbroker.sessioncache.dto.StateEntity
- getOidcSessionId(HttpServletRequest, RelyingPartyDefinitions, NetworkConfig) - Static method in class swiss.trustbroker.oidc.session.OidcSessionSupport
- getOidcTokenCount() - Method in class swiss.trustbroker.sessioncache.dto.StateData
- getOidcTokenData() - Method in class swiss.trustbroker.sessioncache.dto.StateData
- getOps() - Method in class swiss.trustbroker.config.dto.AuditConfig
- getOptional() - Method in interface swiss.trustbroker.wstrustclient.xml.ClaimType
- getOptional() - Method in class swiss.trustbroker.wstrustclient.xml.ClaimTypeImpl
- getOrCreateDefinition(String, String, String, Map<Definition, List<String>>) - Static method in class swiss.trustbroker.homerealmdiscovery.util.DefinitionUtil
- getOrCreateRunningHttpSession() - Static method in class swiss.trustbroker.oidc.session.HttpExchangeSupport
- getOrCreateSessionId() - Static method in class swiss.trustbroker.oidc.session.HttpExchangeSupport
- getOrder() - Method in class swiss.trustbroker.config.dto.Banner
-
Banner display order for global banners or if no order is defined for the CP.
- getOrder() - Method in class swiss.trustbroker.federation.xmlconfig.AcClass
-
ACClass QoA order.
- getOrder() - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsProvider
-
Indicates the order of display in the UI.
- getOrder() - Method in class swiss.trustbroker.federation.xmlconfig.IdmQuery
-
The order of the execution of the query.
- getOrder() - Method in class swiss.trustbroker.mapping.dto.CustomQoa
- getOrder() - Method in class swiss.trustbroker.saml.dto.UiBanner
-
Order of the banner.
- getOrder() - Method in class swiss.trustbroker.saml.dto.UiObject
-
order allows to compose multiple tiles in a flexible manner.
- getOrderedChildren() - Method in class swiss.trustbroker.wstrustclient.xml.ClaimTypeImpl
- getOrderedRelyingPartiesForSlo(String, String) - Method in class swiss.trustbroker.homerealmdiscovery.service.RelyingPartySetupService
- getOrderWithDefault() - Method in class swiss.trustbroker.saml.dto.UiObject
- getOrganizationSelector() - Method in class swiss.trustbroker.federation.xmlconfig.ProfileSelection
-
Attribute used as selector (kind of unique Secondary Key) for organization selection.
- getOriginalAttributes() - Method in class swiss.trustbroker.config.dto.AccessRequestConfig
-
Special attributes that might be marked as coming from the original issuer i.e.
- getOriginalAttributes() - Method in class swiss.trustbroker.saml.dto.CpResponse
-
Copy of Attributes before filtering.
- getOriginalIssuer() - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsParty
- getOriginalNameId() - Method in class swiss.trustbroker.saml.dto.CpResponse
-
CP Response incoming subject name ID used for internal processing.
- getOriginalPropertiesCount() - Method in class swiss.trustbroker.saml.dto.CpResponse
- getOriginalUserDetailsCount() - Method in class swiss.trustbroker.saml.dto.CpResponse
- getOrigins() - Method in class swiss.trustbroker.federation.xmlconfig.AcWhitelist
- getOriginSet() - Method in class swiss.trustbroker.federation.xmlconfig.AcWhitelist
- getOutboundMode() - Method in class swiss.trustbroker.federation.xmlconfig.ArtifactBinding
-
Mode for outbound Artifact binding.
- getOutputStream() - Method in class swiss.trustbroker.oidc.tx.OidcTxResponseWrapper
- getOwnOrigins(TrustBrokerProperties) - Static method in class swiss.trustbroker.util.WebSupport
- getOwnPerimeterPaths(TrustBrokerProperties) - Static method in class swiss.trustbroker.util.WebSupport
- getParameterMap() - Method in class swiss.trustbroker.oidc.tx.OidcTxRequestWrapper
- getParameterValues(String) - Method in class swiss.trustbroker.oidc.tx.OidcTxRequestWrapper
- getParticipants() - Method in class swiss.trustbroker.saml.dto.SsoParticipants
- getPartySecurityPolicies(SAMLObject) - Method in class swiss.trustbroker.homerealmdiscovery.service.RelyingPartySetupService
- getPassword() - Method in class swiss.trustbroker.config.dto.WsTrustConfig
-
Keystore password.
- getPassword() - Method in class swiss.trustbroker.federation.xmlconfig.SignerKeystore
-
Password for the store.
- getPassword() - Method in class swiss.trustbroker.federation.xmlconfig.SignerStore
-
Password for the store.
- getPassword() - Method in class swiss.trustbroker.federation.xmlconfig.SignerTruststore
-
Password for the store.
- getPath() - Method in class swiss.trustbroker.config.dto.CookieProperties
-
Optional cookie path
- getPath() - Method in class swiss.trustbroker.homerealmdiscovery.dto.CookieConfig
- getPathInfo() - Method in class swiss.trustbroker.oidc.tx.OidcTxRequestWrapper
- getPathTranslated() - Method in class swiss.trustbroker.oidc.tx.OidcTxRequestWrapper
- getPenTestScenario() - Method in class swiss.trustbroker.oidc.session.HttpExchangeSupport
- getPerimeterUrl() - Method in class swiss.trustbroker.config.dto.OidcProperties
-
XTB OIDC perimeter URL.
- getPerimeterUrl() - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
Perimeter URL that is used to access XTB.
- getPersistentCache() - Method in class swiss.trustbroker.config.dto.ArtifactResolution
-
Persist artifact cache.
- getPhoneNumber() - Method in class swiss.trustbroker.homerealmdiscovery.dto.SupportInfo
- getPrefix() - Method in class swiss.trustbroker.config.dto.SamlNamespace
-
Optional prefix added if the namespace is removed.
- getPreserve() - Method in class swiss.trustbroker.federation.xmlconfig.SubjectNameMappings
-
If true, do not overwrite nameId if differing from originalNameId (i.e.
- getPrincipal() - Method in class swiss.trustbroker.audit.dto.AuditDto
- getProfile() - Method in class swiss.trustbroker.config.dto.TechUserProperties
-
User profile in IDM.
- getProfileApi() - Method in class swiss.trustbroker.util.ApiSupport
- getProfileExtId() - Method in class swiss.trustbroker.audit.dto.AuditDto
- getProfileId() - Method in class swiss.trustbroker.homerealmdiscovery.dto.ProfileRequest
- getProfilesApi() - Method in class swiss.trustbroker.util.ApiSupport
- getProfileSelection() - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
Profile selection configuration.
- getProfileSelection() - Method in class swiss.trustbroker.federation.xmlconfig.RelyingParty
-
Profile selection configuration for this RP.
- getProfileSelectionMode() - Method in class swiss.trustbroker.federation.xmlconfig.ProfileSelection
- getProfileSelectionService(String) - Method in class swiss.trustbroker.profileselection.service.ProfileSelectionServiceFactory
- getProfileSelectionService(IdmLookup) - Method in class swiss.trustbroker.profileselection.service.ProfileSelectionServiceFactory
- getProfileSelectionUrl(String) - Method in class swiss.trustbroker.util.ApiSupport
- getProfileSelector() - Method in class swiss.trustbroker.federation.xmlconfig.ProfileSelection
-
Attribute used as selector (kind of unique Primary Key) for profile selection.
- getProperties() - Method in class swiss.trustbroker.saml.dto.CpResponse
-
Properties contain computed values that can be sent as RP attributes based on incoming CP attributes and userdetails.
- getProperties(String) - Method in class swiss.trustbroker.saml.dto.CpResponse
-
Script hook use: Get property values by name or FQ name.
- getProperties(String, String) - Method in class swiss.trustbroker.saml.dto.CpResponse
-
Script hook use: Get property values by name or FQ name with optional source.
- getPropertiesSelection() - Method in class swiss.trustbroker.federation.xmlconfig.RelyingParty
-
Properties selection identifies the computed/derived attributes passed through to the RP.
- getProperty(String) - Method in class swiss.trustbroker.saml.dto.CpResponse
-
Script hook use: Get first property value using name or FQ name.
- getProperty(String, String) - Method in class swiss.trustbroker.saml.dto.CpResponse
-
Script hook use: Get first property value using name or FQ name with optional source.
- getPropertyMap() - Method in class swiss.trustbroker.saml.dto.CpResponse
- getProtocol() - Method in class swiss.trustbroker.federation.xmlconfig.SloResponse
-
The protocol for which this entry applies.
- getProtocolEndpoints() - Method in class swiss.trustbroker.federation.xmlconfig.OidcClient
-
OpenID endpoints a single CP side OIDC client uses for federated login.
- getProtocolEndpoints() - Method in class swiss.trustbroker.federation.xmlconfig.Saml
-
SAML protocol endpoint configuration.
- getProvision() - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsParty
- getProvision() - Method in class swiss.trustbroker.federation.xmlconfig.Definition
-
Provision this attribute to IDM.
- getProvisioning() - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsParty
-
Provisioning configurations for this CP.
- getProvisioning() - Method in class swiss.trustbroker.federation.xmlconfig.Provisioning
- getProvisioningId() - Method in class swiss.trustbroker.federation.xmlconfig.Definition
-
ID attribute for provisioning.
- getProxyUrl() - Method in class swiss.trustbroker.config.dto.ArtifactResolution
-
Deprecated.Use NetworkConfig.proxyUrl
- getProxyUrl() - Method in class swiss.trustbroker.config.dto.NetworkConfig
-
Default proxy URL.
- getProxyUrl() - Method in class swiss.trustbroker.federation.xmlconfig.ProtocolEndpoints
-
Proxy URL for these endpoints that overrides global default.
- getPublicAutoLoginCookie() - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
Autologin cookie that can be used for CP filtering in HRD.
- getPublicIdpId() - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
Deprecated.Replaced by the 'first' marker on the network, e.g. INTERNET-first.
- getPublicPenTestCookie() - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
PEN testing cookie that can be used to implement penetration testing scenarios on the OnMessage hook.
- getPublicTestCookie() - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
Testing cookie us used to signal special handling for test users e.g.
- getQName() - Method in class swiss.trustbroker.wstrustclient.service.WsTrustSoapClientBase.MarshallingInfo
- getQoa() - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
QoA configuration.
- getQoa() - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsParty
-
QoA configurations for this CP.
- getQoa() - Method in class swiss.trustbroker.federation.xmlconfig.CounterParty
- getQoa() - Method in class swiss.trustbroker.federation.xmlconfig.OidcClient
-
QoAs to use.
- getQoa() - Method in class swiss.trustbroker.federation.xmlconfig.RelyingParty
- getQoaConfig() - Method in class swiss.trustbroker.federation.xmlconfig.CounterParty
- getQoaConfig() - Method in class swiss.trustbroker.federation.xmlconfig.OidcClient
- getQoaConfiguration(String, String, RelyingParty) - Method in class swiss.trustbroker.mapping.service.QoaMappingService
- getQoaConfiguration(StateData, RelyingParty) - Method in class swiss.trustbroker.mapping.service.QoaMappingService
- getQoaMap() - Method in class swiss.trustbroker.config.TrustBrokerProperties
- getQoaOrders(String, QoaConfig, Map<String, Integer>, Boolean) - Static method in class swiss.trustbroker.mapping.util.QoaMappingUtil
- getQoaOrders(String, QoaConfig, QoaConfig, Map<String, Integer>) - Static method in class swiss.trustbroker.mapping.util.QoaMappingUtil
- getQoasByLevels(Set<Integer>, Map<String, Integer>) - Static method in class swiss.trustbroker.mapping.util.QoaMappingUtil
- getQueriedStores() - Method in class swiss.trustbroker.saml.dto.CpResponse
-
Contains the stores of IDM lookups actually executed by the available
IdmQueryServiceimplementations - including those that did not find a result. - getQueries() - Method in class swiss.trustbroker.federation.xmlconfig.IdmLookup
-
List of queries to be executed.
- getQueryList() - Method in class swiss.trustbroker.federation.xmlconfig.IdmLookup
- getQuerySource() - Method in class swiss.trustbroker.audit.dto.AuditDto.ResponseAttributeValue
- getRealClientNetwork(HttpServletRequest, NetworkConfig) - Static method in class swiss.trustbroker.util.WebSupport
- getRealm() - Method in class swiss.trustbroker.federation.xmlconfig.OidcClient
-
Optional support to be able to map back /oauth2/authorize
- getReapMaxDelaySec() - Method in class swiss.trustbroker.config.dto.StateCacheProperties
-
Delay at most 25 sec randomly to allow multiple reapers on the same session DB.
- getReapSchedule() - Method in class swiss.trustbroker.config.dto.StateCacheProperties
-
Use by scheduled job checking for expired sessions and delete them from the session DB StateCache.
- getReapWarnThresholdMs() - Method in class swiss.trustbroker.config.dto.StateCacheProperties
-
Expected reap cycle execution in milliseconds before we start to WARN about bad performance.
- getReauthTime() - Method in class swiss.trustbroker.sessioncache.dto.Lifecycle
- getRecipient() - Method in class swiss.trustbroker.federation.xmlconfig.AuthorizedApplication
-
Overrides the global AccessRequest recipientId.
- getRecipientId() - Method in class swiss.trustbroker.config.dto.AccessRequestConfig
-
Global default recipient ID.
- getRecipientId() - Method in class swiss.trustbroker.saml.dto.ResponseParameters
- getRedirectUri(HttpServletRequest) - Static method in class swiss.trustbroker.oidc.session.OidcSessionSupport
- getRedirectUris() - Method in class swiss.trustbroker.federation.xmlconfig.OidcClient
-
Permitted redirect URLs for this client.
- getRedirectUrl() - Method in class swiss.trustbroker.federation.xmlconfig.AuthorizedApplication
-
URL to be redirected to after AccessRequest.
- getRedirectUrls() - Method in class swiss.trustbroker.federation.xmlconfig.AcWhitelist
- getReference() - Method in class swiss.trustbroker.federation.xmlconfig.HomeName
-
The homeName is usually consumed from the home name attribute and identifies the CP attribute to consume the CP identity from.
- getReferer() - Method in class swiss.trustbroker.saml.dto.RpRequest
-
Referer header from the incoming HTTP request.
- getReferer() - Method in class swiss.trustbroker.sessioncache.dto.StateData
- getReferrer() - Method in class swiss.trustbroker.audit.dto.AuditDto
- getRefreshTokenTimeToLiveMin() - Method in class swiss.trustbroker.federation.xmlconfig.OidcSecurityPolicies
-
Overrides tokenTimeToLiveMin for the refresh token.
- getRegisteredClient() - Method in class swiss.trustbroker.federation.xmlconfig.OidcClient
- getRelayState() - Method in class swiss.trustbroker.saml.dto.ResponseData
- getRelayState() - Method in class swiss.trustbroker.sessioncache.dto.StateData
- getReLogin() - Method in class swiss.trustbroker.federation.xmlconfig.Flow
-
Show error page including re-login button (triggers another login).
- getRelyingParties() - Method in class swiss.trustbroker.federation.dto.ConfigStatusData
- getRelyingParties() - Method in class swiss.trustbroker.federation.xmlconfig.RelyingPartySetup
-
List of RPs.
- getRelyingPartiesByAcsUrlMatch(String) - Method in class swiss.trustbroker.homerealmdiscovery.service.RelyingPartySetupService
- getRelyingPartiesForSamlSlo(String, String) - Method in class swiss.trustbroker.sso.service.SsoService
- getRelyingPartyAlias() - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsProvider
-
By providing a relying party ID on the HRD declaration, it's not necessary anymore to copy and paste entire RP definition files just to be able to automatically selecting an RP without showing a HRD selection screen.
- getRelyingPartyByArtifactSourceIdOrReferrer(String, String) - Method in class swiss.trustbroker.homerealmdiscovery.service.RelyingPartySetupService
- getRelyingPartyByAuthorizedApplication(String) - Method in class swiss.trustbroker.config.dto.RelyingPartyDefinitions
- getRelyingPartyByAuthorizedApplication(String) - Method in class swiss.trustbroker.homerealmdiscovery.service.RelyingPartySetupService
- getRelyingPartyByIssuerIdOrReferrer(String, String) - Method in class swiss.trustbroker.homerealmdiscovery.service.RelyingPartySetupService
- getRelyingPartyByIssuerIdOrReferrer(String, String, boolean) - Method in class swiss.trustbroker.homerealmdiscovery.service.RelyingPartySetupService
- getRelyingPartyByOidcClientId(String, String, TrustBrokerProperties, boolean) - Method in class swiss.trustbroker.config.dto.RelyingPartyDefinitions
- getRelyingPartyOidcClientByOidcClientId(String, String, TrustBrokerProperties, boolean) - Method in class swiss.trustbroker.config.dto.RelyingPartyDefinitions
- getRelyingPartyOidcClientByOidcClientId(String, TrustBrokerProperties) - Method in class swiss.trustbroker.config.dto.RelyingPartyDefinitions
- getRelyingPartyRegistration() - Method in class swiss.trustbroker.oidc.opensaml5.OpenSaml5AuthenticationRequestResolver.AuthnRequestContext
- getRelyingPartySetup() - Method in class swiss.trustbroker.config.dto.RelyingPartyDefinitions
- getRelyingPartySetup() - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
Relative path of the SetupRP file.
- getRemoteRepoUri() - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
Git repo.
- getRemoveUserInfoClaims() - Method in class swiss.trustbroker.config.dto.OidcProperties
-
Claims to remove for user info.
- getRenewNotOnOrAfterToleranceRenewSec() - Method in class swiss.trustbroker.config.dto.SecurityChecks
-
Duration after expiration of an assertion for which WS-Trust RENEW request is accepted.
- getReplaceInbound() - Method in class swiss.trustbroker.federation.xmlconfig.AcClass
-
Replace inbound Qoa from RP request.
- getReplaceInbound() - Method in class swiss.trustbroker.federation.xmlconfig.Qoa
-
Replace incoming Qoa from the request Only applied on RP side
Default: false - getReplacementAcClasses(Qoa) - Static method in class swiss.trustbroker.mapping.util.QoaMappingUtil
- getRequest() - Method in class swiss.trustbroker.oidc.opensaml5.OpenSaml5AuthenticationRequestResolver.AuthnRequestContext
- getRequest() - Method in class swiss.trustbroker.oidc.session.HttpExchangeSupport
- getRequestAttribute(String, boolean) - Static method in class swiss.trustbroker.util.WebSupport
- getRequestBinding() - Method in class swiss.trustbroker.sessioncache.dto.StateData
- getRequestedResponseBinding() - Method in class swiss.trustbroker.sessioncache.dto.StateData
- getRequestId() - Method in class swiss.trustbroker.saml.dto.RpRequest
-
ID of the incoming message (e.g.
- getRequestType() - Method in class swiss.trustbroker.wstrustclient.dto.WsTrustRstRequest
- getRequestURI() - Method in class swiss.trustbroker.oidc.tx.OidcTxRequestWrapper
- getRequestURL() - Method in class swiss.trustbroker.oidc.tx.OidcTxRequestWrapper
- getRequireAudienceRestriction() - Method in class swiss.trustbroker.federation.xmlconfig.SecurityPolicies
-
Overrides global SecurityChecks
- getRequireAudienceRestrictionForBearerSubjectConfirmation() - Method in class swiss.trustbroker.federation.xmlconfig.SecurityPolicies
-
Overrides global SecurityChecks
- getRequireAuthorizationConsent() - Method in class swiss.trustbroker.federation.xmlconfig.OidcSecurityPolicies
-
Require authorization consent (currently unsupported).
- getRequired() - Method in class swiss.trustbroker.federation.xmlconfig.Definition
-
Indicates whether this attribute is mandatory.
- getRequireEncryptedAssertion() - Method in class swiss.trustbroker.federation.xmlconfig.SecurityPolicies
-
Allow to disable required encrypted Assertion when the EncryptionKeystore is configured.
- getRequireIdTokenEncryption() - Method in class swiss.trustbroker.federation.xmlconfig.OidcSecurityPolicies
-
Allow to enable Encrypted IdToken JWT Singing for Rp.
- getRequireOpaqueAccessToken() - Method in class swiss.trustbroker.federation.xmlconfig.OidcSecurityPolicies
-
Allow to enable Opaque AccessToken for Rp.
- getRequireOpaqueRefreshToken() - Method in class swiss.trustbroker.federation.xmlconfig.OidcSecurityPolicies
-
Allow to enable Opaque RefreshToken for Rp.
- getRequireOriginalIssuerClaims() - Method in class swiss.trustbroker.saml.dto.ResponseParameters
- getRequireProofKey() - Method in class swiss.trustbroker.federation.xmlconfig.OidcSecurityPolicies
-
Require Proof Key for Code Exchange (PKCE).
- getRequireSignedArtifactResponse() - Method in class swiss.trustbroker.federation.xmlconfig.SecurityPolicies
-
Flag allows to enforce signed SAML artifact responses from CP required for maximum security to assert integrity of the incoming artifact response message.
- getRequireSignedAuthnRequest() - Method in class swiss.trustbroker.federation.xmlconfig.SecurityPolicies
-
Allow to disable signature check for incoming SAML AuthnRequests.
- getRequireSignedAuthnRequestForSsoJoin() - Method in class swiss.trustbroker.federation.xmlconfig.SecurityPolicies
-
Require signed SAML AuthnRequests to join an SSO session.
- getRequireSignedLogoutNotificationRequest() - Method in class swiss.trustbroker.federation.xmlconfig.SecurityPolicies
-
Allow to disable signature check for outgoing SLO notification LogoutRequests.
- getRequireSignedLogoutRequest() - Method in class swiss.trustbroker.federation.xmlconfig.SecurityPolicies
-
Allow to disable signature check for incoming LogoutRequests.
- getRequireSignedResponse() - Method in class swiss.trustbroker.federation.xmlconfig.SecurityPolicies
-
Flag allows to enforce signed SAML responses from CP required for maximum security to assert integrity of the incoming message and assertion.
- getRequireUserInfoResponseEncryption() - Method in class swiss.trustbroker.federation.xmlconfig.OidcSecurityPolicies
-
Allow to enable Encrypted UserInfo response
Default: false - getResolvedCertPath() - Method in class swiss.trustbroker.federation.xmlconfig.SignerStore
- getResolvedKeyPath() - Method in class swiss.trustbroker.federation.xmlconfig.SignerStore
- getResourceList() - Method in class swiss.trustbroker.federation.xmlconfig.Resources
-
List of resources.
- getResources() - Method in class swiss.trustbroker.federation.xmlconfig.OidcClient
-
OIDC allowed resources in TokenExchange.
- getResponse() - Method in class swiss.trustbroker.oidc.opensaml5.OpenSaml5AuthenticationProvider.ResponseToken
- getResponse() - Method in class swiss.trustbroker.oidc.session.HttpExchangeSupport
- getResponse() - Method in class swiss.trustbroker.saml.dto.ResponseData
- getResponseAttributes() - Method in class swiss.trustbroker.audit.dto.AuditDto
- getResponseId() - Method in class swiss.trustbroker.sessioncache.dto.AccessRequestSessionState
- getResponseIssuer() - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsParty
- getResponseIssuerId() - Method in class swiss.trustbroker.config.dto.OidcIdentityProvider
-
Issuer for the response.
- getResponseMode() - Method in class swiss.trustbroker.federation.xmlconfig.OidcClient
-
Response mode to be requested from CP.
- getResponseTypes() - Method in class swiss.trustbroker.config.dto.OidcProperties
-
Enabled response types.
- getResults() - Method in class swiss.trustbroker.saml.dto.CpResponse
-
The results map contains these SAML attributes: CP SAML Response attributes extracted from the message (PassThrough Claims from CP) Derived attributes computed in ScriptService BeforeIdm hooks (Computed CP claims) IDM attributes retrieved from the IDMService Derived attributes computed in ScriptService AfterIdm hooks (Computed IDM claims) The names in this map are usually fully qualified as represented in the SAML response from the CP.
- getReturnUrl() - Method in class swiss.trustbroker.sessioncache.dto.AccessRequestSessionState
- getReuseRefreshTokens() - Method in class swiss.trustbroker.federation.xmlconfig.OidcSecurityPolicies
-
Reuse refresh tokens.
- getRevocationEndpointAuthMethods() - Method in class swiss.trustbroker.config.dto.OidcProperties
-
Enabled revocation endpoint auth methods.
- getRoles() - Method in class swiss.trustbroker.config.dto.TechUserProperties
-
Roles in IDM.
- getRolloverSigner() - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
Signer used during rollover.
- getRpApplicationName() - Method in class swiss.trustbroker.sessioncache.dto.StateData
- getRpAuthnRequestId() - Method in class swiss.trustbroker.saml.dto.ResponseParameters
- getRpClientExtId(RelyingParty) - Method in class swiss.trustbroker.homerealmdiscovery.service.RelyingPartySetupService
- getRpClientName() - Method in class swiss.trustbroker.saml.dto.ResponseParameters
- getRpClientName(RelyingParty) - Method in class swiss.trustbroker.homerealmdiscovery.service.RelyingPartySetupService
- getRpComparison() - Method in class swiss.trustbroker.saml.dto.ResponseParameters
- getRpComparison(StateData) - Static method in class swiss.trustbroker.mapping.util.QoaMappingUtil
- getRpComparison(StateData, Qoa) - Static method in class swiss.trustbroker.mapping.util.QoaMappingUtil
- getRpContext() - Method in class swiss.trustbroker.saml.dto.CpResponse
-
The HttpServletRequest params, some specific ones: username, Client_Network
- getRpContext() - Method in class swiss.trustbroker.sessioncache.dto.StateData
- getRpContextClasses() - Method in class swiss.trustbroker.saml.dto.CpResponse
-
Incoming context class requirements on RP side.
- getRpContextClasses() - Method in class swiss.trustbroker.saml.dto.ResponseParameters
- getRpContextClasses() - Method in class swiss.trustbroker.sessioncache.dto.StateData
- getRpContextClasses(List<String>, Qoa) - Static method in class swiss.trustbroker.mapping.util.QoaMappingUtil
- getRpContextClasses(StateData) - Static method in class swiss.trustbroker.mapping.util.QoaMappingUtil
- getRpContextClasses(StateData, Qoa) - Static method in class swiss.trustbroker.mapping.util.QoaMappingUtil
- getRpDecryptionCredentials() - Method in class swiss.trustbroker.federation.xmlconfig.RelyingParty
- getRpDestination() - Method in class swiss.trustbroker.saml.dto.CpResponse
-
Override SAML Response.Destination on RP side.
- getRpDestination(StateData, CpResponse) - Static method in class swiss.trustbroker.saml.util.ResponseFactory
- getRpEncryptionTrustCredential() - Method in class swiss.trustbroker.federation.xmlconfig.RelyingParty
- getRpHrdHint() - Method in class swiss.trustbroker.sessioncache.dto.StateData
- getRpId() - Method in class swiss.trustbroker.saml.dto.SsoParticipant
- getRpIssuer() - Method in class swiss.trustbroker.audit.dto.AuditDto
- getRpIssuer() - Method in class swiss.trustbroker.saml.dto.CpResponse
-
Incoming issuer on RP side.
- getRpIssuer() - Method in class swiss.trustbroker.saml.dto.RpRequest
-
Issuer of the incoming SAML request
- getRpIssuer() - Method in class swiss.trustbroker.sessioncache.dto.StateData
- getRpIssuerId() - Method in class swiss.trustbroker.saml.dto.ResponseParameters
- getRpIssuerId() - Method in class swiss.trustbroker.sessioncache.dto.AccessRequestSessionState
- getRpIssuerId() - Method in class swiss.trustbroker.sessioncache.dto.SsoSessionParticipant
- getRpOidcClientId() - Method in class swiss.trustbroker.sessioncache.dto.StateData
- getRpRecipient() - Method in class swiss.trustbroker.saml.dto.CpResponse
-
Override SAML SubjectConfirmationData.Recipient on RP side.
- getRpReferer() - Method in class swiss.trustbroker.saml.dto.CpResponse
-
Incoming HTTP referrer on RP side.
- getRpReferer() - Method in class swiss.trustbroker.saml.dto.ResponseParameters
- getRpReferer() - Method in class swiss.trustbroker.sessioncache.dto.StateData
- getRpReferrer() - Method in class swiss.trustbroker.audit.dto.AuditDto
- getRpRelayState() - Method in class swiss.trustbroker.sessioncache.dto.StateData
- getRpSigner() - Method in class swiss.trustbroker.federation.xmlconfig.RelyingParty
- getRpTrustCredentials() - Method in class swiss.trustbroker.federation.xmlconfig.RelyingParty
- getRpUrn() - Method in class swiss.trustbroker.saml.dto.DeviceInfoReq
- getRstAddress() - Method in class swiss.trustbroker.wstrustclient.dto.WsTrustRstRequest
- getRunningHttpExchange() - Static method in class swiss.trustbroker.oidc.session.HttpExchangeSupport
- getRunningHttpRequest() - Static method in class swiss.trustbroker.oidc.session.HttpExchangeSupport
- getRunningHttpResponse() - Static method in class swiss.trustbroker.oidc.session.HttpExchangeSupport
- getRunningHttpSession() - Static method in class swiss.trustbroker.oidc.session.HttpExchangeSupport
- getRunningOidcClientId() - Static method in class swiss.trustbroker.oidc.session.HttpExchangeSupport
- getRunningPenTestScenario() - Static method in class swiss.trustbroker.oidc.session.HttpExchangeSupport
- getRunningSsoState() - Static method in class swiss.trustbroker.oidc.session.HttpExchangeSupport
- getSameSite() - Method in class swiss.trustbroker.config.dto.CookieProperties
-
Optional cookie sameSite flag.
- getSameSite() - Method in class swiss.trustbroker.homerealmdiscovery.dto.CookieConfig
- getSameSiteCookies() - Method in class swiss.trustbroker.config.TrustbrokerCookieProcessor
- getSaml() - Method in class swiss.trustbroker.config.dto.ContentSecurityPolicies
-
CSP configuration for SAML.
- getSaml() - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
SAML protocol configuration.
- getSaml() - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsParty
-
SAML protocol configuration for this CP.
- getSaml() - Method in class swiss.trustbroker.federation.xmlconfig.CounterParty
- getSaml() - Method in class swiss.trustbroker.federation.xmlconfig.RelyingParty
- getSamlArtifactBinding() - Method in class swiss.trustbroker.federation.xmlconfig.CounterParty
- getSamlBindings() - Method in class swiss.trustbroker.config.dto.SamlProperties
- getSamlConsumerUrl() - Method in class swiss.trustbroker.config.TrustBrokerProperties
- getSamlErrorCodeRegexMappings() - Method in class swiss.trustbroker.config.dto.OidcProperties
-
SAML error code mappings.
- getSamlExchangeAcsUrlClientId(String) - Static method in class swiss.trustbroker.oidc.session.OidcSessionSupport
- getSamlExchangeClientId() - Static method in class swiss.trustbroker.oidc.session.OidcSessionSupport
- getSamlExchangeClientId(String) - Static method in class swiss.trustbroker.oidc.session.OidcSessionSupport
- getSamlHttpMethod() - Method in class swiss.trustbroker.sso.dto.SloNotification
- getSamlLogoutRequest() - Method in class swiss.trustbroker.sso.dto.SloNotification
- getSamlMessage() - Method in class swiss.trustbroker.audit.dto.AuditDto
- getSamlNamespacesMappedToOidcFormat() - Method in class swiss.trustbroker.config.dto.OidcProperties
-
SAML namespace to OIDC mappings.
- getSamlPrincipalFromAuthentication(Authentication, HttpServletRequest) - Static method in class swiss.trustbroker.oidc.session.OidcSessionSupport
- getSamlProtocolEndpoints() - Method in class swiss.trustbroker.federation.xmlconfig.CounterParty
- getSamlRedirectSignature() - Method in class swiss.trustbroker.sso.dto.SloNotification
- getSamlRedirectSignatureAlgorithm() - Method in class swiss.trustbroker.sso.dto.SloNotification
- getSamlRelayState() - Method in class swiss.trustbroker.sso.dto.SloNotification
- getSchema(String) - Method in class swiss.trustbroker.federation.service.SchemaDefinitionService
- getSchema(String, HttpServletResponse) - Method in class swiss.trustbroker.federation.controller.XmlConfigController
- getScope() - Method in class swiss.trustbroker.federation.xmlconfig.Definition
-
To restrict emitting an attribute, the scope can be set as follows: saml: Use only in SAML assertions oidc: Use only in OIDC tokens (oidcName must be set) If not set, the attribute is emitted on all protocols and any requested OIDC scope.
- getScope() - Method in class swiss.trustbroker.federation.xmlconfig.SubjectName
-
Scope of the SubjectName
- getScopeList() - Method in class swiss.trustbroker.federation.xmlconfig.Scopes
-
List of scopes.
- getScopes() - Method in class swiss.trustbroker.audit.dto.AuditDto
- getScopes() - Method in class swiss.trustbroker.config.dto.OidcProperties
-
Enabled scopes.
- getScopes() - Method in class swiss.trustbroker.federation.xmlconfig.OidcClient
-
OIDC scopes to be used.
- getScriptPath() - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
Relative path of the Groovy scripts.
- getScripts() - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsParty
-
Script hooks.
- getScripts() - Method in class swiss.trustbroker.federation.xmlconfig.CounterParty
- getScripts() - Method in class swiss.trustbroker.federation.xmlconfig.RelyingParty
- getScripts() - Method in class swiss.trustbroker.federation.xmlconfig.Scripts
-
List of scripts.
- getSecondaryImages() - Method in class swiss.trustbroker.config.dto.Banner
-
Optional list of secondary images.
- getSecondaryImages() - Method in class swiss.trustbroker.saml.dto.UiBanner
-
Secondary images of banner.
- getSecondarySource(String, String) - Static method in class swiss.trustbroker.saml.util.ClaimSourceUtil
- getSecToken() - Method in class swiss.trustbroker.config.dto.IdmConfig
-
Security token for accessing the IDM.
- getSecure() - Method in class swiss.trustbroker.config.dto.CookieProperties
-
Optional cookie secure flag.
- getSecure() - Method in class swiss.trustbroker.homerealmdiscovery.dto.CookieConfig
- getSecurity() - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
Security check configuration.
- getSecurityContext() - Method in class swiss.trustbroker.oidc.session.TomcatSession
- getSecurityPolicies() - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsParty
-
Global security policy overrides for this CP.
- getSecurityPolicies() - Method in class swiss.trustbroker.federation.xmlconfig.CounterParty
- getSecurityPolicies() - Method in class swiss.trustbroker.federation.xmlconfig.RelyingParty
- getSelectableCpIssuerIds() - Method in class swiss.trustbroker.sessioncache.dto.StateData
- getSelectedProfileExtId() - Method in class swiss.trustbroker.sessioncache.dto.StateData
- getSentTime() - Method in class swiss.trustbroker.sessioncache.dto.AccessRequestSessionState
- getSerializeNotifications() - Method in class swiss.trustbroker.federation.xmlconfig.Sso
-
Serialize logout notifications in the order of the
SloResponseelements. - getServiceContext(HttpServletRequest) - Static method in class swiss.trustbroker.util.WebSupport
- getServiceForStore(IdmQuery, String, List<IdmQueryService>) - Static method in class swiss.trustbroker.homerealmdiscovery.util.RelyingPartyUtil
- getServiceUrl() - Method in class swiss.trustbroker.config.dto.AnnouncementConfig
-
REST endpoint to retrieve current announcements from.
- getServiceUrl() - Method in class swiss.trustbroker.config.dto.ArtifactResolution
-
XTB Artifact Resolution service URL, included in the metadata.
- getServiceUrl() - Method in class swiss.trustbroker.federation.xmlconfig.AuthorizedApplication
-
Service URL to be called by AccessRequest.
- getServletPath() - Method in class swiss.trustbroker.oidc.tx.OidcTxRequestWrapper
- getServletRequestAttributes(boolean) - Static method in class swiss.trustbroker.util.WebSupport
- getSessId() - Method in class swiss.trustbroker.audit.dto.AuditDto
- getSession() - Method in class swiss.trustbroker.oidc.tx.OidcTxRequestWrapper
- getSession(boolean) - Method in class swiss.trustbroker.oidc.tx.OidcTxRequestWrapper
- getSession(HttpServletRequest) - Static method in class swiss.trustbroker.oidc.session.HttpExchangeSupport
- getSessionCookieSameSite() - Method in class swiss.trustbroker.federation.xmlconfig.OidcSecurityPolicies
-
Controls the OIDC session cookies sameSite flag None, Strict, Dynamic.
- getSessionCookieSameSite() - Method in class swiss.trustbroker.federation.xmlconfig.SsoGroup
-
Controls the SSO session cookie
- getSessionIdFromOidcCookie(HttpServletRequest, String, NetworkConfig) - Static method in class swiss.trustbroker.oidc.session.OidcSessionSupport
- getSessionIdsFromAuthentication(Authentication) - Static method in class swiss.trustbroker.oidc.session.OidcSessionSupport
- getSessionIFrameEndpoint() - Method in class swiss.trustbroker.config.dto.OidcProperties
-
XTB OIDC session iframe endpoint.
- getSessionIndex() - Method in class swiss.trustbroker.saml.dto.ResponseParameters
- getSessionIndex() - Method in class swiss.trustbroker.sessioncache.dto.StateData
- getSessionInformation(String) - Method in class swiss.trustbroker.oidc.CustomSessionRegistry
- getSessionInitiator() - Static method in class swiss.trustbroker.oidc.session.OidcSessionSupport
- getSessionLifetimeSec() - Method in class swiss.trustbroker.config.dto.OidcProperties
-
OIDC session lifetime in seconds.
- getSessionLifetimeSec() - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
Session lifetime for non-SSO login exchanges.
- getSessionLifetimeSec(boolean) - Method in class swiss.trustbroker.config.TrustBrokerProperties
- getSessionMode() - Method in class swiss.trustbroker.config.dto.OidcProperties
-
Mode for Tomcat sessions.
- getSessionNotOnOrAfter() - Method in class swiss.trustbroker.saml.dto.ResponseParameters
- getSessionRequired() - Method in class swiss.trustbroker.federation.xmlconfig.SloResponse
-
Enables OIDC
- getSessionTimeToLiveMin() - Method in class swiss.trustbroker.federation.xmlconfig.OidcSecurityPolicies
-
Allow to invalidate OIDC sessions before token TTL, keep for 1 minute to allow login sequence termination.
- getShortcut() - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsProvider
-
A usually two-character code identifying the CP on small screens.
- getShortcut() - Method in class swiss.trustbroker.saml.dto.SsoParticipant
- getShortcut() - Method in class swiss.trustbroker.saml.dto.UiObject
-
A usually two-character code identifying the CP on small screens.
- getShortName() - Method in enum class swiss.trustbroker.audit.dto.AuditDto.AttributeSource
- getShortType() - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsParty
- getShortType() - Method in class swiss.trustbroker.federation.xmlconfig.CounterParty
- getShortType() - Method in class swiss.trustbroker.federation.xmlconfig.RelyingParty
- getSid() - Method in class swiss.trustbroker.homerealmdiscovery.dto.SessionRequest
- getSide() - Method in class swiss.trustbroker.audit.dto.AuditDto
- getSignature() - Method in class swiss.trustbroker.federation.xmlconfig.CounterParty
- getSignature() - Method in class swiss.trustbroker.federation.xmlconfig.Saml
-
SAML signature configuration.
- getSignatureAlgorithm() - Method in class swiss.trustbroker.saml.util.RedirectUrlBuilder
- getSignatureContext() - Method in class swiss.trustbroker.saml.dto.ResponseData
- getSignatureContext() - Method in class swiss.trustbroker.saml.util.RedirectUrlBuilder
- getSignatureMethodAlgorithm() - Method in class swiss.trustbroker.config.dto.AccessRequestConfig
-
Access Request signature algorithm.
- getSignatureMethodAlgorithm() - Method in class swiss.trustbroker.federation.xmlconfig.Signature
-
Signature algorithm.
- getSignatureParametersBuilder() - Method in class swiss.trustbroker.federation.xmlconfig.CounterParty
- getSignatureParametersBuilder() - Method in class swiss.trustbroker.federation.xmlconfig.RelyingParty
- getSignatureParametersBuilder() - Method in class swiss.trustbroker.federation.xmlconfig.Signature
- getSignedAuthnRequest() - Method in class swiss.trustbroker.sessioncache.dto.StateData
- getSigner() - Method in class swiss.trustbroker.config.dto.OidcIdentityProvider
-
Signer keystore.
- getSigner() - Method in class swiss.trustbroker.config.dto.OidcIdpCredential
- getSigner() - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
Default signer.
- getSignercert() - Method in class swiss.trustbroker.config.dto.AccessRequestConfig
-
Signer for outbound messages.
- getSignercert() - Method in class swiss.trustbroker.config.dto.IdmConfig
-
Security token signer.
- getSignerKeystore() - Method in class swiss.trustbroker.federation.xmlconfig.Certificates
-
Keystore for signing.
- getSignerKeystore() - Method in class swiss.trustbroker.federation.xmlconfig.SloResponse
-
Override RPs signer for SAML2 LogoutRequest notifications(the LogoutResponse is always signed with RPs signer).
- getSignerTruststore() - Method in class swiss.trustbroker.config.dto.AccessRequestConfig
-
Truststore for validating inbound messages.
- getSignerTruststore() - Method in class swiss.trustbroker.federation.xmlconfig.Certificates
-
Truststore for signature verification.
- getSilentServiceUrl() - Method in class swiss.trustbroker.config.dto.AccessRequestConfig
-
Global default for silent Access Request service URL
- getSingleOidcClient() - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsParty
- getSingleOidcClient() - Method in class swiss.trustbroker.federation.xmlconfig.RelyingParty
- getSingleQoaResponse() - Method in class swiss.trustbroker.federation.xmlconfig.Qoa
-
Send single QoA in response (to RP).
- getSkinnyAssertionNamespaces() - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
Skinny SAML messages reducing the size of the messages (large SAML messages on picky perimeters might block).
- getSkinnyAssertionStyle() - Method in class swiss.trustbroker.saml.dto.ResponseParameters
- getSkinnyHrd(String, String, String) - Method in class swiss.trustbroker.util.ApiSupport
- getSkinnyHrdTriggers() - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
Legacy clients that get the skinny HRD screen (monitor, testing).
- getSkipHrdWithSsoSession() - Method in class swiss.trustbroker.federation.xmlconfig.Sso
-
If an RP already is logged in with the first CP, the HRD screen can be skipped leading to the second participant automatically joining the detected SSO session for that CP.
- getSlo() - Method in class swiss.trustbroker.sso.dto.SloNotification
- getSloDefaultOidcDestinationPath() - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
Global default for OIDC logout responses.
- getSloDefaultSamlDestinationPath() - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
Global default for SAML logout responses.
- getSloIssuer(SloProtocol) - Method in class swiss.trustbroker.federation.xmlconfig.RelyingParty
- getSloIssuerIdDropPatterns() - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
Parts of issuer ID ignored when determining Single Logout (SLO).
- getSloIssuerWithFallback(String) - Method in class swiss.trustbroker.sso.service.SsoService
- getSloNotificationMinWaitMillis() - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
Minimum wait in case of fire-and-forget SLO notifications
Default: 200 - getSloNotifications() - Method in class swiss.trustbroker.sso.service.SsoService.SloState
- getSloNotificationTimeoutMillis() - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
Stop waiting for SLO notifications after that and submit LogoutResponse.
- getSloPepIssuerIdPrefix() - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
Prefix for PEP (Policy Enforcement Point) issuer matching.
- getSloResponse() - Method in class swiss.trustbroker.federation.xmlconfig.Sso
- getSloSigner() - Method in class swiss.trustbroker.federation.xmlconfig.SloResponse
- getSloUrl() - Method in class swiss.trustbroker.federation.xmlconfig.Sso
-
Shortcut for
- getSloUrl(SloProtocol) - Method in class swiss.trustbroker.federation.xmlconfig.RelyingParty
- getSoapHeadersToConsider() - Method in class swiss.trustbroker.config.dto.WsTrustConfig
-
SOAP headers considered by the WS-Trust implementation.
- getSoapVersion() - Method in class swiss.trustbroker.config.dto.WsTrustConfig
-
SOAP version.
- getSort() - Method in class swiss.trustbroker.federation.xmlconfig.ProfileSelection
-
Apply sorting on profiles and roles.
- getSource() - Method in class swiss.trustbroker.audit.dto.AuditDto.ResponseAttributeValue
- getSource() - Method in class swiss.trustbroker.federation.xmlconfig.Definition
-
Source of the definition Compound primary key member in attribute maps using Definition(De)Serializer.
- getSource() - Method in class swiss.trustbroker.federation.xmlconfig.SubjectName
-
Matched against the CP/CP:issuer/IDM/IDM:IDMQuery.name/PROPS
- getSourceId() - Method in class swiss.trustbroker.federation.xmlconfig.ArtifactBinding
-
Default expected sourceId is
- getSourceIdEncoded() - Method in class swiss.trustbroker.federation.xmlconfig.ArtifactBinding
-
Overriding sourceId with encoded value directly in case it is not calculated in the expected way.
- getSpNameFormats() - Method in class swiss.trustbroker.config.dto.SamlProperties
-
RP-side supported name formats
- getSpSessionId() - Method in class swiss.trustbroker.sessioncache.dto.StateEntity
- getSpStateData() - Method in class swiss.trustbroker.sessioncache.dto.StateData
- getSshConfigKeyPath() - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
SSH key path.
- getSso() - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
SSO configuration.
- getSso() - Method in class swiss.trustbroker.federation.xmlconfig.RelyingParty
-
SSO configuration for this RP.
- getSsoEstablishedTime() - Method in class swiss.trustbroker.audit.dto.AuditDto
- getSsoEstablishedTime() - Method in class swiss.trustbroker.saml.dto.SsoParticipants
- getSsoEstablishedTime() - Method in class swiss.trustbroker.sessioncache.dto.Lifecycle
- getSsoGroupApi(String, String, String, String) - Method in class swiss.trustbroker.util.ApiSupport
- getSsoGroupConfig(String) - Method in class swiss.trustbroker.homerealmdiscovery.service.RelyingPartySetupService
- getSsoGroupConfig(String, boolean) - Method in class swiss.trustbroker.homerealmdiscovery.service.RelyingPartySetupService
- getSsoGroupName() - Method in class swiss.trustbroker.audit.dto.AuditDto
- getSsoGroupName() - Method in class swiss.trustbroker.saml.dto.SsoParticipants
- getSsoGroupName() - Method in class swiss.trustbroker.sessioncache.dto.SsoState
- getSsoGroupName() - Method in class swiss.trustbroker.sso.service.SsoService.SsoCookieNameParams
- getSsoGroups() - Method in class swiss.trustbroker.federation.xmlconfig.SsoGroupSetup
-
List of SSO groups.
- getSsoGroupSetup() - Method in class swiss.trustbroker.config.dto.RelyingPartyDefinitions
- getSsoGroupSetup() - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
Relative path of the SsoGroupSetup file
- getSsoMinQoaLevel() - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
Global minimum for QoA level for SSO.
- getSsoMinQoaLevel() - Method in class swiss.trustbroker.federation.xmlconfig.SecurityPolicies
-
If CP returns AuthnContext of value less than that, no SSO session is created.
- getSsoMinQoaLevel(int) - Method in class swiss.trustbroker.federation.xmlconfig.CounterParty
- getSsoParticipantCount() - Method in class swiss.trustbroker.audit.dto.AuditDto
- getSsoParticipants() - Method in class swiss.trustbroker.sessioncache.dto.SsoState
- getSsoParticipants(HttpServletRequest) - Method in class swiss.trustbroker.sso.controller.SsoController
- getSsoParticipants(SsoService.SsoCookieNameParams, Cookie[], String) - Method in class swiss.trustbroker.sso.service.SsoService
- getSsoParticipantsApi() - Method in class swiss.trustbroker.util.ApiSupport
- getSsoParticipantsApi(String) - Method in class swiss.trustbroker.util.ApiSupport
- getSsoParticipantsForGroup(HttpServletRequest, String) - Method in class swiss.trustbroker.sso.controller.SsoController
- getSsoQoa() - Method in class swiss.trustbroker.audit.dto.AuditDto
- getSsoQoa() - Method in class swiss.trustbroker.sessioncache.dto.SsoState
- getSsoRpApi(String) - Method in class swiss.trustbroker.util.ApiSupport
- getSsoSessionId() - Method in class swiss.trustbroker.audit.dto.AuditDto
- getSsoSessionId() - Method in class swiss.trustbroker.audit.dto.OidcAuditData
- getSsoSessionId() - Static method in class swiss.trustbroker.oidc.session.OidcSessionSupport
- getSsoSessionId() - Method in class swiss.trustbroker.sessioncache.dto.StateData
- getSsoSessionId() - Method in class swiss.trustbroker.sessioncache.dto.StateEntity
- getSsoSessionIdPolicy() - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
SSO session ID policy.
- getSsoSessionLifetimeSec() - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
Session lifetime during which SSO is possible on XTB.
- getSsoState() - Method in class swiss.trustbroker.oidc.session.HttpExchangeSupport
- getSsoState() - Method in class swiss.trustbroker.sessioncache.dto.StateData
- getSsoStateDataForClient(SsoService, HttpServletRequest, RelyingParty, String) - Static method in class swiss.trustbroker.oidc.session.OidcSessionSupport
- getSsoSubject() - Method in class swiss.trustbroker.saml.dto.SsoParticipants
- getSsoSubject(StateData, ClaimsParty) - Static method in class swiss.trustbroker.sso.service.SsoService
- getSsoSubjectFromCpResponse(String) - Method in class swiss.trustbroker.saml.dto.CpResponse
- getSsoUrl() - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsParty
-
SAML POST endpoint on the CP.
- getSsoUrl() - Method in class swiss.trustbroker.util.ApiSupport
- getSsoUrl(String) - Method in class swiss.trustbroker.util.ApiSupport
- getState() - Method in class swiss.trustbroker.sessioncache.dto.AccessRequestSessionState
- getStateCache() - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
Configuration for DB state cache.
- getStateData() - Static method in class swiss.trustbroker.oidc.session.OidcSessionSupport
- getStateData() - Method in class swiss.trustbroker.oidc.session.TomcatSession
- getStateData() - Method in class swiss.trustbroker.sso.service.SsoService.StateWithCookies
- getStateId() - Method in class swiss.trustbroker.homerealmdiscovery.dto.ProfileRequest
- getStateParam(HttpServletRequest) - Static method in class swiss.trustbroker.oidc.session.OidcSessionSupport
- getStatus() - Method in class swiss.trustbroker.audit.dto.AuditDto
- getStatus() - Method in class swiss.trustbroker.federation.dto.ConfigStatusData
- getStatus() - Method in class swiss.trustbroker.monitoring.dto.MonitoringResponse
- getStatusCode() - Method in class swiss.trustbroker.saml.dto.ResponseStatus
-
Usually urn:oasis:names:tc:SAML:2.0:status:Responder
- getStatusMessage() - Method in class swiss.trustbroker.audit.dto.AuditDto
- getStatusMessage() - Method in class swiss.trustbroker.saml.dto.ResponseStatus
-
E.g.
- getStatusNestedCode() - Method in class swiss.trustbroker.saml.dto.ResponseStatus
-
E.g.
- getStatusPolicy() - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsParty
-
This status policy determines the handling of users that are not found in the IDM: BLOCK_UNKNOWN_USER, ALLOW_UNKNOWN_USER.
- getStatusPolicy() - Method in class swiss.trustbroker.federation.xmlconfig.IdmQuery
-
Handling of the user status in IDM.
- getStep1Page(HttpServletRequest, HttpServletResponse) - Method in class swiss.trustbroker.oidc.sso.controller.OidcSessionController
- getStore() - Method in class swiss.trustbroker.federation.xmlconfig.IdmLookup
-
Used to select an IdmService implementation
- getStore() - Method in class swiss.trustbroker.federation.xmlconfig.IdmQuery
-
Used to select an IdmService implementation
- getStrongestPossible() - Method in class swiss.trustbroker.config.dto.QualityOfAuthenticationConfig
-
QoA value for strongest possible authentication level.
- getStrongestPossibleAuthLevel() - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsParty
-
This attribute allows to map a QoA of
- getStrongestPossibleAuthLevelWithFallback() - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsParty
- getSubject() - Method in class swiss.trustbroker.sessioncache.dto.SsoState
- getSubjectConfirmationMethod() - Method in class swiss.trustbroker.saml.dto.CpResponse
-
Subject confirmation method.
- getSubjectNameId() - Method in class swiss.trustbroker.federation.xmlconfig.IdmQuery
-
Subject Name ID as filtering parameter for the IDM.
- getSubjectNameId() - Method in class swiss.trustbroker.sessioncache.dto.StateData
- getSubjectNameId() - Method in class swiss.trustbroker.sso.service.SsoService.SsoCookieNameParams
- getSubjectNameIdAttribute() - Method in class swiss.trustbroker.federation.xmlconfig.IdmQuery
- getSubjectNameMappings() - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsParty
-
Subject Name ID mappings for this CP.
- getSubjectNameMappings() - Method in class swiss.trustbroker.federation.xmlconfig.CounterParty
- getSubjectNameMappings() - Method in class swiss.trustbroker.federation.xmlconfig.RelyingParty
- getSubjects() - Method in class swiss.trustbroker.federation.xmlconfig.SubjectNameMappings
-
List of mapping
- getSubjectTokenCount(String) - Method in class swiss.trustbroker.oidc.CustomOAuth2AuthorizationService
- getSubjectTokenMaxAgeSec() - Method in class swiss.trustbroker.federation.xmlconfig.OidcSecurityPolicies
-
Restrict Token Exchange subject_token age
Default: 60 - getSubjectTokenMaxUseCount() - Method in class swiss.trustbroker.federation.xmlconfig.OidcSecurityPolicies
-
Maximum number a subject_token can be used
Default: 1 - getSubjectTokenNotBeforeToleranceSec() - Method in class swiss.trustbroker.federation.xmlconfig.OidcSecurityPolicies
-
subject_token tolerance NTP drift tolerance.
- getSubjectTokenNotOnOrAfterToleranceSec() - Method in class swiss.trustbroker.federation.xmlconfig.OidcSecurityPolicies
-
subject_token timestamp clock/transfer tolerance.
- getSubjectTypes() - Method in class swiss.trustbroker.config.dto.OidcProperties
-
Enabled subject types.
- getSubjectValiditySeconds() - Method in class swiss.trustbroker.saml.dto.ResponseParameters
- getSubPath() - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsProviderSetup
- getSubPath() - Method in class swiss.trustbroker.federation.xmlconfig.CounterParty
- getSubPath() - Method in interface swiss.trustbroker.federation.xmlconfig.PathReference
- getSubPath() - Method in class swiss.trustbroker.federation.xmlconfig.RelyingPartySetup
- getSubResource() - Method in class swiss.trustbroker.federation.xmlconfig.IdmQuery
-
Sub resource parameter for the IDM (baseDN in case of LDAP).
- getSupport() - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
Support features.
- getSupportedBindings() - Method in class swiss.trustbroker.federation.xmlconfig.Saml
-
List of supported inbound SAML bindings.
- getSupportedBindings() - Method in class swiss.trustbroker.federation.xmlconfig.WsTrust
-
List of supported inbound WS-Trust bindings.
- getSupportedSamlBindings() - Method in class swiss.trustbroker.federation.xmlconfig.CounterParty
- getSupportedTlsVersions() - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
Comma-separated list of supported TLS versions.
- getSupportedWsTrustBindings(CounterParty) - Method in class swiss.trustbroker.federation.xmlconfig.CounterParty
- getSupportEmail() - Method in class swiss.trustbroker.federation.xmlconfig.Flow
-
Show (application specific) support e-mail address on the error page.
- getSupportInfo() - Method in class swiss.trustbroker.federation.xmlconfig.Flow
-
Show error page including a support info section.
- getSupportInfoApi(String, String) - Method in class swiss.trustbroker.util.ApiSupport
- getSupportPhone() - Method in class swiss.trustbroker.federation.xmlconfig.Flow
-
Show (application specific) support phone number on the error page.
- getSyncSchedule() - Method in class swiss.trustbroker.config.dto.AnnouncementConfig
-
Schedule for fetching current announcements.
- getSyncSchedule() - Method in class swiss.trustbroker.config.dto.OidcProperties
-
Schedule for fetching current metadata configurations from all CPs.
- getTaggedResourceMaxAgeSec() - Method in class swiss.trustbroker.config.dto.GuiProperties
-
Browser caching max-age in seconds for resources that have are tagged with an ETAG (a hash or version number).
- getTargetMaxEntries() - Method in class swiss.trustbroker.config.dto.StateCacheProperties
-
If the session DB runs full (more than targetMaxEntries), XTB starts garbage collecting sessions, that might expire anyway soon to make room for new sessions and prevent storage issues.
- getTechuser() - Method in class swiss.trustbroker.config.dto.IdmConfig
-
Technical user for accessing the IDM.
- getTestNetworkHeader() - Method in class swiss.trustbroker.config.dto.NetworkConfig
-
HTTP header for simulating the client network.
- getThemeAsset(HttpServletRequest, HttpServletResponse) - Method in class swiss.trustbroker.gui.WebResourceController
- getThemeAsset(HttpServletRequest, HttpServletResponse, String) - Method in class swiss.trustbroker.homerealmdiscovery.service.WebResourceProvider
- getThemeAssets() - Method in class swiss.trustbroker.config.dto.GuiProperties
-
Resource path where theme assets are stored.
- getThemeCookie() - Method in class swiss.trustbroker.config.dto.GuiProperties
-
Attributes for the cookie that stores the user's theme (if there is a theme selector).
- getThemeCookie() - Method in class swiss.trustbroker.homerealmdiscovery.dto.GuiConfig
- getTiles() - Method in class swiss.trustbroker.saml.dto.UiObjects
-
Tiles for CPs.
- getTitle() - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsProvider
-
Title for the CP tile and help item.
- getTitle() - Method in class swiss.trustbroker.saml.dto.UiObject
-
Title for the CP tile and help item.
- getTlsProtocol() - Method in class swiss.trustbroker.config.dto.IdmConfig
-
TLS protocol to use for the connection.
- getToken() - Method in class swiss.trustbroker.oidc.opensaml5.OpenSaml5AuthenticationProvider.AssertionToken
- getToken() - Method in class swiss.trustbroker.oidc.opensaml5.OpenSaml5AuthenticationProvider.ResponseToken
- getTokenCount() - Method in class swiss.trustbroker.oidc.session.TomcatSession
- getTokenEndpoint() - Method in class swiss.trustbroker.oidc.client.dto.OpenIdProviderConfiguration
- getTokenEndpointAuthMethods() - Method in class swiss.trustbroker.config.dto.OidcProperties
-
Enabled token endpoint authentication methods.
- getTokenExchangeUserData(Map<String, Object>, Map<Definition, List<String>>, RelyingParty, ClaimsParty, OidcClient, Set<String>, List<String>) - Method in class swiss.trustbroker.saml.service.RelyingPartyService
- getTokenLifetime(RelyingParty) - Method in class swiss.trustbroker.homerealmdiscovery.service.RelyingPartySetupService
- getTokenLifetimeSec() - Method in class swiss.trustbroker.config.dto.SecurityChecks
-
Used for Condition.notOnOrAfterSeconds and SubjectConfirmationData.notOnOrAfterSeconds.
- getTokenRequestParams() - Method in class swiss.trustbroker.audit.dto.AuditDto
- getTokenTimeToLiveMin() - Method in class swiss.trustbroker.federation.xmlconfig.OidcSecurityPolicies
-
Token validity in minutes.
- getTomcatSessionManager() - Method in class swiss.trustbroker.oidc.session.TomcatSession
- getTraceId() - Method in class swiss.trustbroker.audit.dto.AuditDto
- getTraceIdHeader() - Method in class swiss.trustbroker.config.dto.IdmConfig
-
HTTP trace header supported by service to correlate calls from XTB.
- getTraceIdHeader() - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
HTTP header that supplies a request trace ID.
- getTranslationAttributes() - Method in class swiss.trustbroker.federation.xmlconfig.ProfileSelection
- getTranslationForLanguage(HttpServletRequest, HttpServletResponse, String) - Method in class swiss.trustbroker.gui.WebResourceController
- getTranslationForLanguage(HttpServletRequest, HttpServletResponse, String) - Method in class swiss.trustbroker.homerealmdiscovery.service.WebResourceProvider
- getTranslations() - Method in class swiss.trustbroker.config.dto.GuiProperties
-
Resource path where UI language support files in JSON format are stored.
- getTriggerRole() - Method in class swiss.trustbroker.federation.xmlconfig.AuthorizedApplication
-
When the given role is missing after the IDM lookup phase (and before the profile selection phase) the access-request handling is initiated.
- getTrust() - Method in class swiss.trustbroker.config.dto.OidcIdpCredential
- getTruststore() - Method in class swiss.trustbroker.config.dto.AccessRequestConfig
-
Keystore for outbound requests.
- getTruststore() - Method in class swiss.trustbroker.config.dto.ArtifactResolution
-
Default truststore for artifact resolution.
- getTruststore() - Method in class swiss.trustbroker.config.dto.IdmConfig
-
Truststore for accessing the IDM.
- getTruststore() - Method in class swiss.trustbroker.config.dto.OidcProperties
-
Default truststore for direct connections to OIDC CPs.
- getTruststorePassword() - Method in class swiss.trustbroker.config.dto.AnnouncementConfig
-
Password for the truststore.
- getTruststorePath() - Method in class swiss.trustbroker.config.dto.AnnouncementConfig
-
TLS truststore used to establish HTTPS connection.
- getTtlSec() - Method in class swiss.trustbroker.sessioncache.dto.Lifecycle
- getTxCommitDelay() - Method in class swiss.trustbroker.config.dto.StateCacheProperties
-
Delay before transaction commit in milliseconds.
- getTxRetryCount() - Method in class swiss.trustbroker.config.dto.StateCacheProperties
-
Number of retries doubling the txRetryDelayMs on every try.
- getTxRetryDelayMs() - Method in class swiss.trustbroker.config.dto.StateCacheProperties
-
Delay before transaction retry in milliseconds (negative values indicate no retry).
- getType() - Method in class swiss.trustbroker.config.dto.WsTrustConfig
-
Keystore type.
- getType() - Method in enum class swiss.trustbroker.federation.xmlconfig.AuthorizationGrantType
- getType() - Method in class swiss.trustbroker.federation.xmlconfig.Script
-
Script types as listed above.
- getUiObjects() - Method in class swiss.trustbroker.saml.dto.RpRequest
-
UI objects for the HRD screen.
- getUnaliasedId() - Method in class swiss.trustbroker.federation.xmlconfig.RelyingParty
- getUndefined() - Method in class swiss.trustbroker.config.dto.LdapStoreConfig
-
Default value for undefined IDMQuery.AppFilter value.
- getUnfilteredClaimsParties() - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsProviderSetup
- getUnfilteredRelyingParties() - Method in class swiss.trustbroker.federation.xmlconfig.RelyingPartySetup
- getUniqueQueryParameter(URLBuilder, String) - Static method in class swiss.trustbroker.util.WebSupport
- getUnknownAttributes() - Method in class swiss.trustbroker.wstrustclient.xml.ClaimTypeImpl
- getUnspecifiedAuthLevel() - Method in class swiss.trustbroker.mapping.service.QoaMappingService
- getUnspecifiedLevel() - Method in class swiss.trustbroker.mapping.service.QoaMappingService
- getUri() - Method in interface swiss.trustbroker.wstrustclient.xml.ClaimType
- getUri() - Method in class swiss.trustbroker.wstrustclient.xml.ClaimTypeImpl
- getUrl() - Method in class swiss.trustbroker.audit.dto.AuditDto
- getUrl() - Method in class swiss.trustbroker.federation.xmlconfig.AuthorizedApplication
-
The application can be selected via HTTP Referer matching by configuring the Origin URL in this attribute.
- getUrl() - Method in class swiss.trustbroker.federation.xmlconfig.SloResponse
-
Valid settings are: An absolute URL (used as is) A relative URL (path) that is appended to the HTTP referrer or ACUrl URL
- getUrn() - Method in class swiss.trustbroker.saml.dto.UiObject
-
id uniquely identifies a tile.
- getUseDefault() - Method in class swiss.trustbroker.federation.xmlconfig.AcWhitelist
-
Use the first entry as default if the RP does not send an ACS URL.
- getUsePepQoa() - Method in class swiss.trustbroker.federation.xmlconfig.OidcClient
-
Legacy Policy Enforcement Point (PEP) QOA mapping policy.
- getUser() - Method in class swiss.trustbroker.config.dto.TechUserProperties
-
User ID in IDM.
- getUserAgent(HttpServletRequest) - Static method in class swiss.trustbroker.util.WebSupport
- getUserDetail(String) - Method in class swiss.trustbroker.saml.dto.CpResponse
-
Script hook use: Get first value using name or FQ name.
- getUserDetail(String, String) - Method in class swiss.trustbroker.saml.dto.CpResponse
-
Script hook use: Get first value using name or FQ name with optional source.
- getUserDetailMap() - Method in class swiss.trustbroker.saml.dto.CpResponse
- getUserDetails() - Method in class swiss.trustbroker.saml.dto.CpResponse
-
IDM user data returned from IDM backends, filtered by RP setup.
- getUserDetails(String) - Method in class swiss.trustbroker.saml.dto.CpResponse
-
Script hook use: get all values using name or FQ name.
- getUserDetails(String, String) - Method in class swiss.trustbroker.saml.dto.CpResponse
-
Get values using name or FQ name with optional source.
- getUserDetailsSelection() - Method in class swiss.trustbroker.federation.xmlconfig.IdmQuery
-
User details selection identifies the IDM attributes passed through to the RP side.
- getUserInfoEncryptionAlgorithms() - Method in class swiss.trustbroker.config.dto.OidcProperties
-
Enabled UserInfo encryption algorithms.
- getUserInfoEncryptionMethods() - Method in class swiss.trustbroker.config.dto.OidcProperties
-
Enabled UserInfo encryption methods.
- getUserinfoEndpoint() - Method in class swiss.trustbroker.oidc.client.dto.OpenIdProviderConfiguration
- getUserProfiles(String) - Method in class swiss.trustbroker.profileselection.controller.ProfileSelectionController
- getUserStatusPolicy() - Method in class swiss.trustbroker.federation.xmlconfig.IdmQuery
- getValidateAssertion() - Method in class swiss.trustbroker.federation.xmlconfig.AuthorizedApplication
-
Validate assertions in responses to requests sent by the AccessRequest.
- getValidateHttpHeaders() - Method in class swiss.trustbroker.federation.xmlconfig.SecurityPolicies
-
Validate HTTP request headers.
- getValidateXmlSchema() - Method in class swiss.trustbroker.federation.xmlconfig.SecurityPolicies
-
Some claims providers are not sending well-formed valid XML and therefore are blocked by XTB.
- getValidationStatus() - Method in class swiss.trustbroker.federation.xmlconfig.CounterParty
- getValue() - Method in class swiss.trustbroker.audit.dto.AuditDto.ResponseAttributeValue
- getValue() - Method in class swiss.trustbroker.federation.xmlconfig.AccountSource
- getValue() - Method in class swiss.trustbroker.federation.xmlconfig.Definition
-
Single value from constant configuration (we currently only use single valued in XML via ConstAttributes).
- getValue() - Method in class swiss.trustbroker.federation.xmlconfig.HomeName
-
The configuration is optional and provides a static value, when the e-id based CPs are not sending the attribute in the CP Attributes already or the value is computed from the CP SAML Response mainly for compatibility reasons, see
GeneralDeriveHomeName.groovyfor the special handling of this attribute. - getValue() - Method in enum class swiss.trustbroker.federation.xmlconfig.QoaComparison
- getValues() - Method in class swiss.trustbroker.audit.dto.AuditDto.ResponseAttributeValues
- getValues() - Method in class swiss.trustbroker.config.dto.CookieProperties
-
Optional cookie permitted values.
- getValues() - Method in class swiss.trustbroker.homerealmdiscovery.dto.CookieConfig
- getVelocityTemplatePath() - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
Development feature: Set this to
- getVersion() - Method in class swiss.trustbroker.config.controller.ConfigController
- getVersion() - Method in class swiss.trustbroker.config.dto.VersionInfo
- getVersionedResourceMaxAgeDay() - Method in class swiss.trustbroker.config.dto.GuiProperties
-
Browser caching max-age in days for resources that have resource version in the path (a hash or version number).
- getVersionedResourcePaths() - Method in class swiss.trustbroker.config.dto.GuiProperties
-
Paths of resources that have resource version in the path (a hash or version number).
- getVersionInfo() - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
XTB version information for the GUI
- getViewRedirectResponse(String) - Static method in class swiss.trustbroker.util.WebSupport
- getWebDumpPathRegEx() - Method in class swiss.trustbroker.config.dto.Support
-
Extends debug support with web message dumping on configured servlet path
- getWebRequest() - Static method in class swiss.trustbroker.util.WebSupport
- getWriter() - Method in class swiss.trustbroker.oidc.tx.OidcTxResponseWrapper
- getWsBasePath() - Method in class swiss.trustbroker.config.dto.WsTrustConfig
-
Allow base path differing from SAML API.
- getWsfed() - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
WS-Fed protocol configuration.
- getWss4jChecks() - Method in class swiss.trustbroker.config.dto.SecurityChecks
-
WSS4J checks according to WSS4J actions.
- getWstrust() - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
WS-Trust protocol configuration.
- getWsTrust() - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsParty
-
WS-Trust protocol configuration for this CP.
- getWsTrust() - Method in class swiss.trustbroker.federation.xmlconfig.CounterParty
- getWsTrust() - Method in class swiss.trustbroker.federation.xmlconfig.RelyingParty
- getWsTrustBindings() - Method in class swiss.trustbroker.config.dto.WsTrustConfig
- getWsTrustIssueNotBeforeToleranceSec() - Method in class swiss.trustbroker.federation.xmlconfig.SecurityPolicies
-
WS-Trust ISSUE timestamp not before tolerance override.
- getWsTrustIssueNotBeforeToleranceSec(long) - Method in class swiss.trustbroker.federation.xmlconfig.CounterParty
- getWsTrustIssueNotOnOrAfterToleranceSec() - Method in class swiss.trustbroker.federation.xmlconfig.SecurityPolicies
-
WS-Trust ISSUE timestamp not on or after tolerance override.
- getWsTrustIssueNotOnOrAfterToleranceSec(long) - Method in class swiss.trustbroker.federation.xmlconfig.CounterParty
- getWsTrustIssueRequireSignedAssertion() - Method in class swiss.trustbroker.federation.xmlconfig.SecurityPolicies
-
Deprecated.Transition feature
- getWsTrustIssueRequireSignedRequest() - Method in class swiss.trustbroker.federation.xmlconfig.SecurityPolicies
-
Require signed request in WS-Trust ISSUE.
- getWsTrustIssueRequireTimestamp() - Method in class swiss.trustbroker.federation.xmlconfig.SecurityPolicies
-
WS-Trust ISSUE requires timestamp.
- getWsTrustRequestValiditySeconds() - Method in class swiss.trustbroker.config.dto.AccessRequestConfig
-
Validity in seconds for WS-Trust expires.
- getWsTrustSoapProtocolVersion() - Method in class swiss.trustbroker.config.dto.AccessRequestConfig
-
WS-Trust SOAP protocl.
- getXmlObject() - Method in class swiss.trustbroker.wstrustclient.service.WsTrustSoapClientBase.MarshallingInfo
- getXtbSignerCredentials(TrustBrokerProperties) - Static method in class swiss.trustbroker.util.CertificateUtil
- gitService() - Method in class swiss.trustbroker.config.TrustBrokerConfiguration
- global(Boolean) - Method in class swiss.trustbroker.config.dto.Banner.BannerBuilder
-
Banner is globally enabled, regardless tiles on the screen.
- globalApplicationName(String) - Method in class swiss.trustbroker.config.dto.AnnouncementConfig.AnnouncementConfigBuilder
-
Global Announcement application name
- GlobalExceptionHandler - Class in swiss.trustbroker.exception
-
Spring MVC exception handler towards REST and WEB clients.
- GlobalExceptionHandler(ApiSupport, TrustBrokerProperties) - Constructor for class swiss.trustbroker.exception.GlobalExceptionHandler
- grantType(String) - Method in class swiss.trustbroker.audit.dto.AuditDto.AuditDtoBuilder
- grantTypes(List<AuthorizationGrantType>) - Method in class swiss.trustbroker.federation.xmlconfig.AuthorizationGrantTypes.AuthorizationGrantTypesBuilder
-
List of authorization grant types.
- groupName(String) - Method in class swiss.trustbroker.federation.xmlconfig.Sso.SsoBuilder
-
Configure a reference to an existing SSOGroup name.
- GuiButtons - Enum Class in swiss.trustbroker.config.dto
-
Configurable GUI buttons
- GuiConfig - Class in swiss.trustbroker.homerealmdiscovery.dto
- GuiConfig.GuiConfigBuilder - Class in swiss.trustbroker.homerealmdiscovery.dto
- GuiFeatures - Enum Class in swiss.trustbroker.config.dto
-
GUI feature configuration
- GuiProperties - Class in swiss.trustbroker.config.dto
-
GUI related configurations.
- GuiProperties() - Constructor for class swiss.trustbroker.config.dto.GuiProperties
- GuiProperties(String, String, String, String, List<GuiButtons>, List<GuiFeatures>, List<Banner>, Integer, CookieProperties, CookieProperties, CookieProperties, CookieProperties, int, String[], int) - Constructor for class swiss.trustbroker.config.dto.GuiProperties
-
Creates a new
GuiPropertiesinstance. - GuiProperties.GuiPropertiesBuilder - Class in swiss.trustbroker.config.dto
- GuiSupport - Class in swiss.trustbroker.gui
H
- handleAnyException(Exception, HttpServletResponse) - Method in class swiss.trustbroker.exception.GlobalExceptionHandler
- handleAuthnRequest(List<OutputService>, AuthnRequest, String, HttpServletRequest, HttpServletResponse, SignatureContext) - Method in class swiss.trustbroker.saml.service.AuthenticationService
- handleContinueToRp(SessionRequest, HttpServletRequest, HttpServletResponse) - Method in class swiss.trustbroker.homerealmdiscovery.controller.HrdController
- handleCpResponse(String, String, ClaimsParty, StateData) - Method in class swiss.trustbroker.oidc.client.service.AuthorizationCodeFlowService
-
Process response to Authorization Code Flow request, fetch tokens, and convert to
CpResponse>. - handleDeniedException(RequestDeniedException) - Method in class swiss.trustbroker.exception.GlobalExceptionHandler
- handleFailedCpResponse(HttpServletRequest, HttpServletResponse, String, String, String, String) - Method in class swiss.trustbroker.oidc.client.service.OidcClientService
- handleFailedCpResponse(ResponseData<Response>) - Method in class swiss.trustbroker.saml.service.AssertionConsumerService
- handleFailedCpResponse(ResponseData<Response>, StateData, CpResponse) - Method in class swiss.trustbroker.saml.service.AssertionConsumerService
- handleFederationMetadata(HttpServletRequest, HttpServletResponse) - Method in class swiss.trustbroker.saml.controller.MetadataController
- handleIdpFederationMetadata(HttpServletRequest, HttpServletResponse) - Method in class swiss.trustbroker.saml.controller.MetadataController
- handleIncomingGetMessages(HttpServletRequest, HttpServletResponse) - Method in class swiss.trustbroker.saml.controller.AppController
-
Web traffic dispatcher handling SAML Redirect and UI interaction.
- handleIncomingPostMessages(HttpServletRequest, HttpServletResponse) - Method in class swiss.trustbroker.saml.controller.AppController
-
Web traffic dispatcher handling SAML POST and UI interaction.
- handleIncomingSoapMessages(HttpServletRequest, HttpServletResponse) - Method in class swiss.trustbroker.saml.controller.AppController
-
Web traffic dispatcher handling SAML SOAP without UI interaction.
- handleLogoutRequest(List<OutputService>, LogoutRequest, String, HttpServletRequest, HttpServletResponse, SignatureContext) - Method in class swiss.trustbroker.saml.service.RelyingPartyService
- handleLogoutResponse(LogoutResponse, String, HttpServletRequest) - Method in class swiss.trustbroker.sso.service.SsoService
- handleRedirect(HttpServletRequest, HttpServletResponse, String) - Method in class swiss.trustbroker.homerealmdiscovery.service.RedirectOutputService
-
Absolute redirects are rendered via a page that auto-forwards to the link as they may be 3rd party / CORS without access granted to the calling script.
- handleRpAuthnRequest(AuthnRequest, HttpServletRequest, StateData) - Method in class swiss.trustbroker.saml.service.AssertionConsumerService
- handleSamlResponse(List<OutputService>, ResponseData<Response>, HttpServletRequest, HttpServletResponse) - Method in class swiss.trustbroker.saml.service.AuthenticationService
- handleSpFederationMetadata(HttpServletRequest, HttpServletResponse) - Method in class swiss.trustbroker.saml.controller.MetadataController
- handleSuccessCpResponse(HttpServletRequest, HttpServletResponse, String, String, String) - Method in class swiss.trustbroker.oidc.client.service.OidcClientService
- handleSuccessCpResponse(ClaimsParty, StateData, CpResponse, String, Response) - Method in class swiss.trustbroker.saml.service.AssertionConsumerService
- handleSuccessCpResponse(ResponseData<Response>) - Method in class swiss.trustbroker.saml.service.AssertionConsumerService
- handleTechnicalException(TechnicalException) - Method in class swiss.trustbroker.exception.GlobalExceptionHandler
- handleUnsupportedMessage(SAMLObject) - Method in class swiss.trustbroker.saml.controller.AbstractSamlController
- hasAccessRequest() - Method in class swiss.trustbroker.federation.xmlconfig.RelyingParty
- hasAccessRequest() - Method in class swiss.trustbroker.sessioncache.dto.StateData
- hasAppliedFrameAncestors() - Method in class swiss.trustbroker.oidc.OidcFrameAncestorHandler
- hasAuthenticationException(HttpServletRequest) - Static method in class swiss.trustbroker.oidc.OidcExceptionHelper
- hasConfig() - Method in record class swiss.trustbroker.mapping.dto.QoaConfig
- hasContextClass(String) - Method in class swiss.trustbroker.saml.dto.RpRequest
- hasErrors() - Method in class swiss.trustbroker.federation.xmlconfig.ValidationStatus
- hasFeature(GuiFeatures) - Method in class swiss.trustbroker.config.dto.GuiProperties
- hasFeatureCondition(String) - Method in class swiss.trustbroker.saml.dto.ResponseStatus
-
Script hook: Test single feature condition.
- hashCode() - Method in class swiss.trustbroker.audit.dto.AuditDto
- hashCode() - Method in class swiss.trustbroker.audit.dto.AuditDto.ResponseAttributeValue
- hashCode() - Method in class swiss.trustbroker.audit.dto.AuditDto.ResponseAttributeValues
- hashCode() - Method in class swiss.trustbroker.audit.dto.OidcAuditData
- hashCode() - Method in class swiss.trustbroker.config.dto.AccessRequestConfig
- hashCode() - Method in class swiss.trustbroker.config.dto.AdminAction
- hashCode() - Method in class swiss.trustbroker.config.dto.AnnouncementConfig
- hashCode() - Method in class swiss.trustbroker.config.dto.ArtifactResolution
- hashCode() - Method in class swiss.trustbroker.config.dto.AttributeConfig
- hashCode() - Method in class swiss.trustbroker.config.dto.AttributeProperties
- hashCode() - Method in class swiss.trustbroker.config.dto.AuditConfig
- hashCode() - Method in class swiss.trustbroker.config.dto.Banner
- hashCode() - Method in class swiss.trustbroker.config.dto.ContentSecurityPolicies
- hashCode() - Method in class swiss.trustbroker.config.dto.CookieProperties
- hashCode() - Method in class swiss.trustbroker.config.dto.CorsPolicies
- hashCode() - Method in class swiss.trustbroker.config.dto.FrameOptionsPolicies
- hashCode() - Method in class swiss.trustbroker.config.dto.GuiProperties
- hashCode() - Method in class swiss.trustbroker.config.dto.IdmConfig
- hashCode() - Method in class swiss.trustbroker.config.dto.LdapStoreConfig
- hashCode() - Method in class swiss.trustbroker.config.dto.MonitoringConfig
- hashCode() - Method in class swiss.trustbroker.config.dto.NetworkConfig
- hashCode() - Method in class swiss.trustbroker.config.dto.OidcIdentityProvider
- hashCode() - Method in class swiss.trustbroker.config.dto.OidcIdpCredential
- hashCode() - Method in class swiss.trustbroker.config.dto.OidcProperties
- hashCode() - Method in class swiss.trustbroker.config.dto.OpsAuditConfig
- hashCode() - Method in class swiss.trustbroker.config.dto.ProfileSelectionConfig
- hashCode() - Method in class swiss.trustbroker.config.dto.QualityOfAuthenticationConfig
- hashCode() - Method in class swiss.trustbroker.config.dto.RelyingPartyDefinitions
- hashCode() - Method in class swiss.trustbroker.config.dto.SamlNamespace
- hashCode() - Method in class swiss.trustbroker.config.dto.SamlProperties
- hashCode() - Method in class swiss.trustbroker.config.dto.SecToken
- hashCode() - Method in class swiss.trustbroker.config.dto.SecurityChecks
- hashCode() - Method in class swiss.trustbroker.config.dto.SsoConfig
- hashCode() - Method in class swiss.trustbroker.config.dto.StateCacheProperties
- hashCode() - Method in class swiss.trustbroker.config.dto.Support
- hashCode() - Method in class swiss.trustbroker.config.dto.TechUserProperties
- hashCode() - Method in class swiss.trustbroker.config.dto.VersionInfo
- hashCode() - Method in class swiss.trustbroker.config.dto.WsFedConfig
- hashCode() - Method in class swiss.trustbroker.config.dto.WsTrustConfig
- hashCode() - Method in class swiss.trustbroker.config.TrustBrokerProperties
- hashCode() - Method in class swiss.trustbroker.federation.dto.ConfigElementStatus
- hashCode() - Method in class swiss.trustbroker.federation.dto.ConfigStatusData
- hashCode() - Method in class swiss.trustbroker.federation.xmlconfig.AccessRequest
- hashCode() - Method in class swiss.trustbroker.federation.xmlconfig.AcClass
- hashCode() - Method in class swiss.trustbroker.federation.xmlconfig.AccountSource
- hashCode() - Method in class swiss.trustbroker.federation.xmlconfig.AcWhitelist
- hashCode() - Method in class swiss.trustbroker.federation.xmlconfig.AnnouncementRpConfig
- hashCode() - Method in class swiss.trustbroker.federation.xmlconfig.ArtifactBinding
- hashCode() - Method in class swiss.trustbroker.federation.xmlconfig.AttributesSelection
- hashCode() - Method in class swiss.trustbroker.federation.xmlconfig.Audiences
- hashCode() - Method in class swiss.trustbroker.federation.xmlconfig.AuthorizationGrantTypes
- hashCode() - Method in class swiss.trustbroker.federation.xmlconfig.AuthorizedApplication
- hashCode() - Method in class swiss.trustbroker.federation.xmlconfig.AuthorizedApplications
- hashCode() - Method in class swiss.trustbroker.federation.xmlconfig.Certificates
- hashCode() - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsParty
- hashCode() - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsProvider
- hashCode() - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsProviderDefinitions
- hashCode() - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsProviderMappings
- hashCode() - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsProviderSetup
- hashCode() - Method in class swiss.trustbroker.federation.xmlconfig.ClientAuthenticationMethods
- hashCode() - Method in class swiss.trustbroker.federation.xmlconfig.ConstAttributes
- hashCode() - Method in class swiss.trustbroker.federation.xmlconfig.CounterParty
- hashCode() - Method in class swiss.trustbroker.federation.xmlconfig.Definition
- hashCode() - Method in class swiss.trustbroker.federation.xmlconfig.Encryption
- hashCode() - Method in class swiss.trustbroker.federation.xmlconfig.Flow
- hashCode() - Method in class swiss.trustbroker.federation.xmlconfig.FlowPolicies
- hashCode() - Method in class swiss.trustbroker.federation.xmlconfig.HomeName
- hashCode() - Method in class swiss.trustbroker.federation.xmlconfig.IdmLookup
- hashCode() - Method in class swiss.trustbroker.federation.xmlconfig.IdmQuery
- hashCode() - Method in class swiss.trustbroker.federation.xmlconfig.Oidc
- hashCode() - Method in class swiss.trustbroker.federation.xmlconfig.OidcClaimsSources
- hashCode() - Method in class swiss.trustbroker.federation.xmlconfig.OidcClient
- hashCode() - Method in class swiss.trustbroker.federation.xmlconfig.OidcSecurityPolicies
- hashCode() - Method in class swiss.trustbroker.federation.xmlconfig.ProfileSelection
- hashCode() - Method in class swiss.trustbroker.federation.xmlconfig.ProtocolEndpoints
- hashCode() - Method in class swiss.trustbroker.federation.xmlconfig.Provisioning
- hashCode() - Method in class swiss.trustbroker.federation.xmlconfig.Qoa
- hashCode() - Method in class swiss.trustbroker.federation.xmlconfig.RelyingParty
- hashCode() - Method in class swiss.trustbroker.federation.xmlconfig.RelyingPartySetup
- hashCode() - Method in class swiss.trustbroker.federation.xmlconfig.Resources
- hashCode() - Method in class swiss.trustbroker.federation.xmlconfig.Saml
- hashCode() - Method in class swiss.trustbroker.federation.xmlconfig.Scopes
- hashCode() - Method in class swiss.trustbroker.federation.xmlconfig.Script
- hashCode() - Method in class swiss.trustbroker.federation.xmlconfig.Scripts
- hashCode() - Method in class swiss.trustbroker.federation.xmlconfig.SecurityPolicies
- hashCode() - Method in class swiss.trustbroker.federation.xmlconfig.Signature
- hashCode() - Method in class swiss.trustbroker.federation.xmlconfig.SignerKeystore
- hashCode() - Method in class swiss.trustbroker.federation.xmlconfig.SignerStore
- hashCode() - Method in class swiss.trustbroker.federation.xmlconfig.SignerTruststore
- hashCode() - Method in class swiss.trustbroker.federation.xmlconfig.SloResponse
- hashCode() - Method in class swiss.trustbroker.federation.xmlconfig.Sso
- hashCode() - Method in class swiss.trustbroker.federation.xmlconfig.SsoGroup
- hashCode() - Method in class swiss.trustbroker.federation.xmlconfig.SsoGroupSetup
- hashCode() - Method in class swiss.trustbroker.federation.xmlconfig.SubjectName
- hashCode() - Method in class swiss.trustbroker.federation.xmlconfig.SubjectNameMappings
- hashCode() - Method in class swiss.trustbroker.federation.xmlconfig.ValidationStatus
- hashCode() - Method in class swiss.trustbroker.federation.xmlconfig.WsTrust
- hashCode() - Method in class swiss.trustbroker.homerealmdiscovery.dto.CookieConfig
- hashCode() - Method in class swiss.trustbroker.homerealmdiscovery.dto.GuiConfig
- hashCode() - Method in class swiss.trustbroker.homerealmdiscovery.dto.ProfileRequest
- hashCode() - Method in class swiss.trustbroker.homerealmdiscovery.dto.SessionRequest
- hashCode() - Method in class swiss.trustbroker.homerealmdiscovery.dto.SupportInfo
- hashCode() - Method in class swiss.trustbroker.mapping.dto.CustomQoa
- hashCode() - Method in record class swiss.trustbroker.mapping.dto.QoaConfig
-
Returns a hash code value for this object.
- hashCode() - Method in record class swiss.trustbroker.mapping.dto.QoaSpec
-
Returns a hash code value for this object.
- hashCode() - Method in class swiss.trustbroker.monitoring.dto.MonitoringResponse
- hashCode() - Method in record class swiss.trustbroker.oidc.client.dto.AuthorizationCodeFlowRequest
-
Returns a hash code value for this object.
- hashCode() - Method in class swiss.trustbroker.oidc.client.dto.OpenIdProviderConfiguration
- hashCode() - Method in class swiss.trustbroker.oidc.session.HttpExchangeSupport
- hashCode() - Method in class swiss.trustbroker.oidc.session.SessionPrincipal
- hashCode() - Method in class swiss.trustbroker.saml.dto.CpResponse
- hashCode() - Method in class swiss.trustbroker.saml.dto.DeviceInfoReq
- hashCode() - Method in class swiss.trustbroker.saml.dto.ResponseData
- hashCode() - Method in class swiss.trustbroker.saml.dto.ResponseParameters
- hashCode() - Method in class swiss.trustbroker.saml.dto.ResponseStatus
- hashCode() - Method in class swiss.trustbroker.saml.dto.RpRequest
- hashCode() - Method in class swiss.trustbroker.saml.dto.SsoParticipant
- hashCode() - Method in class swiss.trustbroker.saml.dto.SsoParticipants
- hashCode() - Method in class swiss.trustbroker.saml.dto.UiBanner
- hashCode() - Method in class swiss.trustbroker.saml.dto.UiObject
- hashCode() - Method in class swiss.trustbroker.saml.dto.UiObjects
- hashCode() - Method in class swiss.trustbroker.saml.util.AssertionValidator.ExpectedAssertionValues
- hashCode() - Method in class swiss.trustbroker.saml.util.AssertionValidator.MessageValidationResult
- hashCode() - Method in class swiss.trustbroker.sessioncache.dto.AccessRequestSessionState
- hashCode() - Method in class swiss.trustbroker.sessioncache.dto.ArtifactCacheEntity
- hashCode() - Method in class swiss.trustbroker.sessioncache.dto.JwkCacheEntity
- hashCode() - Method in class swiss.trustbroker.sessioncache.dto.Lifecycle
- hashCode() - Method in class swiss.trustbroker.sessioncache.dto.SsoSessionParticipant
- hashCode() - Method in class swiss.trustbroker.sessioncache.dto.SsoState
- hashCode() - Method in class swiss.trustbroker.sessioncache.dto.StateData
- hashCode() - Method in class swiss.trustbroker.sessioncache.dto.StateEntity
- hashCode() - Method in class swiss.trustbroker.sso.dto.SloNotification
- hashCode() - Method in record class swiss.trustbroker.sso.dto.SloResponseParameters
-
Returns a hash code value for this object.
- hashCode() - Method in class swiss.trustbroker.sso.service.SsoService.SloState
- hashCode() - Method in class swiss.trustbroker.sso.service.SsoService.SsoCookieNameParams
- hashCode() - Method in class swiss.trustbroker.sso.service.SsoService.StateWithCookies
- hashCode() - Method in class swiss.trustbroker.wstrustclient.dto.WsTrustRstRequest
- hashCode() - Method in class swiss.trustbroker.wstrustclient.service.WsTrustSoapClientBase.MarshallingInfo
- hasIssuerForResponse(SloProtocol) - Method in class swiss.trustbroker.federation.xmlconfig.SloResponse
- hasOriginalNameId() - Method in class swiss.trustbroker.saml.dto.CpResponse
- hasScopes() - Method in class swiss.trustbroker.federation.xmlconfig.OidcClient
- hasSingleClaimsProvider() - Method in class swiss.trustbroker.saml.dto.RpRequest
- hasSloUrlForResponse(SloProtocol) - Method in class swiss.trustbroker.federation.xmlconfig.SloResponse
- hasSourceTag() - Method in class swiss.trustbroker.audit.dto.AuditDto.ResponseAttributeValue
- hasSsoState() - Method in class swiss.trustbroker.sessioncache.dto.StateData
- hasTestLoginEnabled(HttpServletRequest, TrustBrokerProperties) - Static method in class swiss.trustbroker.util.HrdSupport
- HEADER - Enum constant in enum class swiss.trustbroker.config.dto.GuiFeatures
-
Enable header.
- headerBuilder() - Method in class swiss.trustbroker.oidc.tx.OidcTxResponseWrapper
- HeaderBuilder - Class in swiss.trustbroker.util
- health() - Method in class swiss.trustbroker.monitoring.service.TrustbrokerHealthIndicator
- HELP_LINK - Enum constant in enum class swiss.trustbroker.config.dto.GuiButtons
-
Help link (mutually exclusive with HELP_PANEL)
- HELP_PANEL - Enum constant in enum class swiss.trustbroker.config.dto.GuiButtons
-
Help side panel (mutually exclusive with HELP_LINK)
- HOLDER_OF_KEY_SUBJECT_CONFIRMATION - Static variable in class swiss.trustbroker.config.dto.SecurityChecks
- homeName(String) - Method in class swiss.trustbroker.saml.dto.CpResponse.CpResponseBuilder
-
HomeName used by IdmService to query IDM.
- homeName(HomeName) - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsParty.ClaimsPartyBuilder
-
The homeName is usually consumed from the home name attribute and identifies the CP attribute to consume the CP identity from instead of the subject name ID source.
- HomeName - Class in swiss.trustbroker.federation.xmlconfig
-
Home Name configuration.
- HomeName() - Constructor for class swiss.trustbroker.federation.xmlconfig.HomeName
- HomeName(String, String, String, String) - Constructor for class swiss.trustbroker.federation.xmlconfig.HomeName
-
Creates a new
HomeNameinstance. - HomeName.HomeNameBuilder - Class in swiss.trustbroker.federation.xmlconfig
- homeNameIssuerMapping(List<RegexNameValue>) - Method in class swiss.trustbroker.saml.dto.ResponseParameters.ResponseParametersBuilder
- HRD_BANNERS - Enum constant in enum class swiss.trustbroker.config.dto.GuiFeatures
-
Enable HRD with ordering and banner support.
- HRD_CP_URL - Static variable in class swiss.trustbroker.util.ApiSupport
- HRD_PAGE - Static variable in class swiss.trustbroker.util.ApiSupport
- HRD_RP_CONTINUE_API - Static variable in class swiss.trustbroker.util.ApiSupport
- HRD_RP_CONTINUE_URL - Static variable in class swiss.trustbroker.util.ApiSupport
- HRD_RP_URL - Static variable in class swiss.trustbroker.util.ApiSupport
- HRD_SID_PARAM - Static variable in class swiss.trustbroker.util.ApiSupport
- HRD_URL - Static variable in class swiss.trustbroker.util.ApiSupport
- HrdController - Class in swiss.trustbroker.homerealmdiscovery.controller
-
HRD services separated from application namespace.
- HrdController(AssertionConsumerService, RelyingPartyService, RelyingPartySetupService, ClaimsProviderService, SsoService, StateCacheService, ApiSupport, List<OutputService>) - Constructor for class swiss.trustbroker.homerealmdiscovery.controller.HrdController
- hrdHint(String) - Method in class swiss.trustbroker.sessioncache.dto.StateData.StateDataBuilder
- hrdHintAlias(String) - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsProvider.ClaimsProviderBuilder
-
The HRD hint parameter sent by the RP is matched against the following attributes of the ClaimsProvider element.
- HrdSupport - Class in swiss.trustbroker.util
-
Log-able web input (where we do not expected any StringUtil.clean modified data) and other helpers.
- hsts() - Method in class swiss.trustbroker.util.HeaderBuilder
- HTTP - Enum constant in enum class swiss.trustbroker.federation.xmlconfig.SloProtocol
-
Notification via HTTP GET request to the URL, which is used as-is regardless of the incoming protocol.
- HTTP_HEADER_DEVICE_ID - Static variable in class swiss.trustbroker.util.WebSupport
- HTTP_HEADER_X_FORWARDED_HOST - Static variable in class swiss.trustbroker.audit.service.AuditMapper
- HTTP_HEADER_X_REAL_IP - Static variable in class swiss.trustbroker.util.WebSupport
- HTTP_HEADER_XTB_PROFILE_ID - Static variable in class swiss.trustbroker.util.WebSupport
- HTTP_REMOTE_USER - Static variable in class swiss.trustbroker.util.WebSupport
- HttpExchangeSupport - Class in swiss.trustbroker.oidc.session
-
Log-able web input (where we do not expected any StringUtil.clean modified data) and other helpers.
- HttpExchangeSupport(HttpServletRequest, HttpServletResponse, boolean, String, TomcatSession, StateData, boolean, String) - Constructor for class swiss.trustbroker.oidc.session.HttpExchangeSupport
- httpOnly(Boolean) - Method in class swiss.trustbroker.config.dto.CookieProperties.CookiePropertiesBuilder
-
Optional cookie HTTP only flag.
I
- id(String) - Method in class swiss.trustbroker.sessioncache.dto.StateData.StateDataBuilder
- id(String) - Method in class swiss.trustbroker.federation.dto.ConfigElementStatus.ConfigElementStatusBuilder
- id(String) - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsParty.ClaimsPartyBuilder
-
Issuer ID of the claims provider that need to match ClaimsProvider entries in ClaimsProviderDefinitions for HRD display and have to be returned by CPs in SAML responses.
- id(String) - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsProvider.ClaimsProviderBuilder
-
References the issuer ID of the CP.
- id(String) - Method in class swiss.trustbroker.federation.xmlconfig.Flow.FlowBuilder
-
SAML error code with or without namespace, adding
- id(String) - Method in class swiss.trustbroker.federation.xmlconfig.IdmQuery.IdmQueryBuilder
-
A query needs an ID when its name is not unique and its execution needs to be controlled via a custom script based on CP input usually.
- id(String) - Method in class swiss.trustbroker.federation.xmlconfig.OidcClient.OidcClientBuilder
-
Client ID.
- id(String) - Method in class swiss.trustbroker.federation.xmlconfig.RelyingParty.RelyingPartyBuilder
-
RP ID.
- ID_TOKEN - Enum constant in enum class swiss.trustbroker.federation.xmlconfig.OidcClaimsSource
-
Use claims from ID token.
- IDENTITY_NS - Static variable in interface swiss.trustbroker.wstrustclient.xml.ClaimType
- IDENTITY_PREFIX - Static variable in interface swiss.trustbroker.wstrustclient.xml.ClaimType
- IDM - Enum constant in enum class swiss.trustbroker.saml.dto.ClaimSource
- IDM_RESPONSE - Enum constant in enum class swiss.trustbroker.audit.dto.AuditDto.AttributeSource
- IdmAttributeUtil - Class in swiss.trustbroker.util
- IdmConfig - Class in swiss.trustbroker.config.dto
-
Configuration for optional IDM integration.
- IdmConfig() - Constructor for class swiss.trustbroker.config.dto.IdmConfig
- IdmConfig(boolean, String, String, KeystoreProperties, KeystoreProperties, TechUserProperties, KeystoreProperties, SecToken, List<RegexNameValue>, Map<String, Object>, String) - Constructor for class swiss.trustbroker.config.dto.IdmConfig
-
Creates a new
IdmConfiginstance. - IdmConfig.IdmConfigBuilder - Class in swiss.trustbroker.config.dto
- idmLookup(IdmLookup) - Method in class swiss.trustbroker.federation.xmlconfig.RelyingParty.RelyingPartyBuilder
-
IDM lookup configuration for this RP.
- idmLookup(IdmLookup) - Method in class swiss.trustbroker.saml.dto.CpResponse.CpResponseBuilder
-
Contains the
IdmLookupfor the corresponding RP. - IdmLookup - Class in swiss.trustbroker.federation.xmlconfig
-
Specify a list of queries that are executed in the specified order.
- IdmLookup() - Constructor for class swiss.trustbroker.federation.xmlconfig.IdmLookup
- IdmLookup(String, MultiResultPolicy, List<IdmQuery>) - Constructor for class swiss.trustbroker.federation.xmlconfig.IdmLookup
-
Creates a new
IdmLookupinstance. - IdmLookup.IdmLookupBuilder - Class in swiss.trustbroker.federation.xmlconfig
- IdmQuery - Class in swiss.trustbroker.federation.xmlconfig
-
Configures an IDM query to be executed.
- IdmQuery() - Constructor for class swiss.trustbroker.federation.xmlconfig.IdmQuery
- IdmQuery(Integer, String, String, String, String, String, StatusPolicy, String, String, String, String, AttributesSelection, boolean) - Constructor for class swiss.trustbroker.federation.xmlconfig.IdmQuery
-
Creates a new
IdmQueryinstance. - IdmQuery.IdmQueryBuilder - Class in swiss.trustbroker.federation.xmlconfig
- idpLogoutMetadataEnabled(boolean) - Method in class swiss.trustbroker.config.dto.SamlProperties.SamlPropertiesBuilder
-
SAML RP-side logout support can be hidden setting this feature flag to false.
- idpMetadataEnabled(boolean) - Method in class swiss.trustbroker.config.dto.SamlProperties.SamlPropertiesBuilder
-
SAML CP-side metadata can be hidden setting this feature flag to false.
- idpNameFormats(List<String>) - Method in class swiss.trustbroker.config.dto.SamlProperties.SamlPropertiesBuilder
-
CP-side supported name formats
- idTokenSignature(String) - Method in class swiss.trustbroker.federation.xmlconfig.OidcSecurityPolicies.OidcSecurityPoliciesBuilder
-
ID token signature algorithm (many adapters only support RS256)
- idTokenTimeToLiveMin(Integer) - Method in class swiss.trustbroker.federation.xmlconfig.OidcSecurityPolicies.OidcSecurityPoliciesBuilder
-
Overrides tokenTimeToLiveMin for the ID token.
- IGNORE - Enum constant in enum class swiss.trustbroker.federation.xmlconfig.ClaimsMapper
- IGNORE - Enum constant in enum class swiss.trustbroker.sso.service.SsoService.SsoSessionOperation
- image(String) - Method in class swiss.trustbroker.saml.dto.SsoParticipant.SsoParticipantBuilder
- image(String) - Method in class swiss.trustbroker.saml.dto.UiObject.UiObjectBuilder
-
Image displayed in the HRD large view.
- images(String) - Method in class swiss.trustbroker.config.dto.GuiProperties.GuiPropertiesBuilder
-
Resource path where images used in the ClaimsProviderDefinitions are stored.
- IMAGES_URL - Static variable in class swiss.trustbroker.util.ApiSupport
- img(String) - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsProvider.ClaimsProviderBuilder
-
Image displayed in the HRD large view.
- implicitSsoGroup(boolean) - Method in class swiss.trustbroker.sessioncache.dto.SsoState.SsoStateBuilder
- IN_DB - Enum constant in enum class swiss.trustbroker.config.dto.TomcatSessionMode
-
Expensive to load session from DB for every getSession call.
- IN_MEMORY - Enum constant in enum class swiss.trustbroker.config.dto.TomcatSessionMode
-
Single pod or sticky routing, tomcat session reaper collects inactive sessions too.
- InboundAuditMapper - Class in swiss.trustbroker.audit.service
- InboundAuditMapper(TrustBrokerProperties) - Constructor for class swiss.trustbroker.audit.service.InboundAuditMapper
- inboundMode(ArtifactBindingMode) - Method in class swiss.trustbroker.federation.xmlconfig.ArtifactBinding.ArtifactBindingBuilder
-
Mode for inbound Artifact binding.
- incAccessCount() - Method in class swiss.trustbroker.sessioncache.dto.Lifecycle
- increment(EventType, String, String...) - Method in class swiss.trustbroker.metrics.service.MetricsService
- index(int) - Method in class swiss.trustbroker.config.dto.ArtifactResolution.ArtifactResolutionBuilder
-
XTB Artifact Resolution index.
- init(String) - Method in class swiss.trustbroker.script.service.ScriptService
- INIT - Enum constant in enum class swiss.trustbroker.sessioncache.dto.LifecycleState
- initializedAccessRequest() - Method in class swiss.trustbroker.sessioncache.dto.StateData
- initializedAcWhitelist(RelyingParty) - Static method in class swiss.trustbroker.federation.xmlconfig.RelyingParty
- initializedArtifactBinding() - Method in class swiss.trustbroker.federation.xmlconfig.Saml
- initializedEncryption() - Method in class swiss.trustbroker.federation.xmlconfig.Saml
- initializedProtocolEndpoints() - Method in class swiss.trustbroker.federation.xmlconfig.Saml
- initializedSaml() - Method in class swiss.trustbroker.federation.xmlconfig.RelyingParty
- initializedSignature() - Method in class swiss.trustbroker.federation.xmlconfig.Saml
- initializedSsoState() - Method in class swiss.trustbroker.sessioncache.dto.StateData
- initializedValidationStatus() - Method in class swiss.trustbroker.federation.xmlconfig.CounterParty
- INITIATED - Enum constant in enum class swiss.trustbroker.sessioncache.dto.AccessRequestState
- initIFramePage(HttpServletRequest, HttpServletResponse) - Method in class swiss.trustbroker.oidc.sso.controller.OidcSessionController
- initTime(Timestamp) - Method in class swiss.trustbroker.sessioncache.dto.AccessRequestSessionState.AccessRequestSessionStateBuilder
- initTime(Timestamp) - Method in class swiss.trustbroker.sessioncache.dto.Lifecycle.LifecycleBuilder
- INLINE - Enum constant in enum class swiss.trustbroker.federation.xmlconfig.EncryptionKeyPlacement
-
EncryptedKeyis withinKeyInfo. - InMemoryServletOutputStream - Class in swiss.trustbroker.oidc.tx
- InMemoryServletOutputStream() - Constructor for class swiss.trustbroker.oidc.tx.InMemoryServletOutputStream
- inResponseTo(String) - Method in class swiss.trustbroker.saml.dto.CpResponse.CpResponseBuilder
-
ID of the authentication request that lead to this CP response.
- INSUFFICIENT - Enum constant in enum class swiss.trustbroker.saml.dto.UiDisableReason
-
CP offers insufficient quality of authentication (QoA) to fulfill the request.
- INTERACTIVE - Enum constant in enum class swiss.trustbroker.federation.xmlconfig.ProfileSelectionMode
-
Profile selection is done interactively by the user.
- interactiveMultiServiceParameters(String) - Method in class swiss.trustbroker.config.dto.AccessRequestConfig.AccessRequestConfigBuilder
-
Global default for interactive Access Request service parameters (multi tenant mode).
- interactiveResultParameter(String) - Method in class swiss.trustbroker.config.dto.AccessRequestConfig.AccessRequestConfigBuilder
-
Interactive Access Request result parameter name.
- interactiveResultUserCancel(String) - Method in class swiss.trustbroker.config.dto.AccessRequestConfig.AccessRequestConfigBuilder
-
Value of resultParameter indicating user has cancelled the process.
- interactiveServiceParameters(String) - Method in class swiss.trustbroker.config.dto.AccessRequestConfig.AccessRequestConfigBuilder
-
Global default for interactive Access Request service parameters.
- interactiveServiceUrl(String) - Method in class swiss.trustbroker.config.dto.AccessRequestConfig.AccessRequestConfigBuilder
-
Global default for interactive Access Request service URL
- internetNetworkName(String) - Method in class swiss.trustbroker.config.dto.NetworkConfig.NetworkConfigBuilder
-
Name for the Internet network used in configurations (e.g.
- INTRANET - Enum constant in enum class swiss.trustbroker.config.dto.AllowPrivateNetworkAccess
-
Allow private network access from Intranet.
- intranetNetworkName(String) - Method in class swiss.trustbroker.config.dto.NetworkConfig.NetworkConfigBuilder
-
Name for the Intranet network used in configurations (e.g.
- INVALID - Enum constant in enum class swiss.trustbroker.federation.xmlconfig.FeatureEnum
-
Configuration invalid or not yet ready for enabling.
- INVALID - Enum constant in enum class swiss.trustbroker.monitoring.dto.Status
- INVALID - Static variable in class swiss.trustbroker.monitoring.dto.MonitoringResponse
- invalidate() - Method in class swiss.trustbroker.oidc.session.TomcatSession
- invalidate(String) - Method in class swiss.trustbroker.federation.xmlconfig.CounterParty
- invalidate(Throwable) - Method in class swiss.trustbroker.federation.xmlconfig.CounterParty
- invalidate(StateData, boolean, String) - Method in class swiss.trustbroker.sessioncache.service.StateCacheService
- invalidate(StateData, String) - Method in class swiss.trustbroker.sessioncache.service.StateCacheService
- invalidateSession(HttpServletRequest, HttpServletResponse, TrustBrokerProperties, String, String) - Static method in class swiss.trustbroker.oidc.session.OidcSessionSupport
- invalidateSession(TrustBrokerProperties, String) - Static method in class swiss.trustbroker.oidc.session.OidcSessionSupport
- invalidateSsoState(HttpServletRequest, StateCacheService, StateData, String) - Static method in class swiss.trustbroker.oidc.session.OidcSessionSupport
- isAborted() - Method in class swiss.trustbroker.saml.dto.ResponseStatus
- isAccessRequest() - Method in class swiss.trustbroker.saml.dto.ResponseParameters
- isAcrValuesChangeRequired(HttpServletRequest, TomcatSession, String) - Static method in class swiss.trustbroker.oidc.session.OidcSessionSupport
- isAddEidStandardClaims() - Method in class swiss.trustbroker.config.dto.OidcProperties
-
Internal fallback to add eID OIDC standard-claims
- isAdditionalAuditingEnabled() - Method in interface swiss.trustbroker.audit.service.AuditLogFilter
- isAdminLogin(HttpServletRequest) - Static method in class swiss.trustbroker.util.WebSupport
- isAllowClaimsOverride() - Method in enum class swiss.trustbroker.federation.xmlconfig.OidcClaimsSource
- isAllowMismatch() - Method in enum class swiss.trustbroker.federation.xmlconfig.FingerprintCheck
- isAllowSubjectOverride() - Method in enum class swiss.trustbroker.federation.xmlconfig.OidcClaimsSource
- isAnnouncementEnabled() - Method in class swiss.trustbroker.federation.xmlconfig.AnnouncementRpConfig
- isApiPath(String) - Static method in class swiss.trustbroker.util.ApiSupport
- isAuthContextHandled() - Method in class swiss.trustbroker.oidc.session.HttpExchangeSupport
- isAuthnRequestSigned() - Method in class swiss.trustbroker.sessioncache.dto.StateData
- isClaimsFromUserinfo() - Method in enum class swiss.trustbroker.federation.xmlconfig.OidcClaimsSource
- isClientOnInternet(HttpServletRequest, NetworkConfig) - Static method in class swiss.trustbroker.util.WebSupport
- isClientOnIntranet(HttpServletRequest, NetworkConfig) - Static method in class swiss.trustbroker.util.WebSupport
- isClustered() - Method in class swiss.trustbroker.sessioncache.service.ArtifactStorageService
- isCollapseParagraphs() - Method in class swiss.trustbroker.saml.dto.UiBanner
-
True if paragraphs of banner are shown collapsed on a small screen.
- isCounterPartyDefault() - Method in class swiss.trustbroker.federation.xmlconfig.WsTrust
- isCpSource(String, String) - Static method in class swiss.trustbroker.saml.util.ClaimSourceUtil
- isCrossProtocol() - Method in enum class swiss.trustbroker.federation.xmlconfig.SloProtocol
- isDefaultApplication() - Method in class swiss.trustbroker.federation.xmlconfig.AuthorizedApplication
- isDefaultValue() - Method in enum class swiss.trustbroker.federation.xmlconfig.AuthorizationGrantType
- isDefaultValue() - Method in enum class swiss.trustbroker.federation.xmlconfig.ClientAuthenticationMethod
- isDefaultValue() - Method in class swiss.trustbroker.federation.xmlconfig.Scope
- isDelegateOrigin() - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsParty
- isDelegateOrigin() - Method in class swiss.trustbroker.federation.xmlconfig.RelyingParty
- isDetailAuditingEnabled() - Method in class swiss.trustbroker.audit.service.BaseAuditLogger
- isDetailAuditingEnabled() - Method in class swiss.trustbroker.audit.service.OpsAuditLogger
- isDetectOnly() - Method in enum class swiss.trustbroker.federation.xmlconfig.ProvisioningMode
- isDeviceAuthorizationEnabled() - Method in class swiss.trustbroker.config.dto.OidcProperties
-
Enable device authorization endpoint.
- isDisplayed() - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsProvider
- isDoSignArtifactResolve() - Method in class swiss.trustbroker.config.dto.SecurityChecks
-
Sign outgoing ArtifactResolve messages.
- isDoSignArtifactResponse() - Method in class swiss.trustbroker.config.dto.SecurityChecks
-
Sign outgoing ArtifactResponse messages.
- isDoSignAssertions() - Method in class swiss.trustbroker.config.dto.SecurityChecks
-
Sign Assertion in outgoing messages.
- isDoSignFailureResponse() - Method in class swiss.trustbroker.config.dto.SecurityChecks
-
Sign outgoing Response messages with failure state.
- isDoSignResponse() - Method in class swiss.trustbroker.config.dto.WsTrustConfig
-
Sign SOAP responses.
- isDoSignSamlMessages() - Method in class swiss.trustbroker.config.dto.AccessRequestConfig
-
Sign outgoing Access Request SAML messages (not re-using SecurityChecks.doSignSuccessResponse) Assertion signature is controlled by SecurityChecks.doSignAssertions for AccessRequest too.
- isDoSignSuccessResponse() - Method in class swiss.trustbroker.config.dto.SecurityChecks
-
Sign outgoing Response messages with success state.
- isDropAttrSelectionIfNoFilter() - Method in class swiss.trustbroker.config.dto.SamlProperties
-
Drop all CP attributes if there is no AttributeSelection defined
- isEnableAppSpecificQuery() - Method in class swiss.trustbroker.config.dto.AnnouncementConfig
-
App specific queries enabled.
- isEnabled() - Method in class swiss.trustbroker.config.dto.AccessRequestConfig
-
Globally enable the feature.
- isEnabled() - Method in class swiss.trustbroker.config.dto.AnnouncementConfig
-
Disable the service to discard all announcements.
- isEnabled() - Method in class swiss.trustbroker.config.dto.IdmConfig
-
IDM enabled.
- isEnabled() - Method in class swiss.trustbroker.config.dto.LdapStoreConfig
-
LDAP store sub-system supporting store="LDAP" IDMQuery.
- isEnabled() - Method in class swiss.trustbroker.config.dto.MonitoringConfig
-
Enable the monitoring API.
- isEnabled() - Method in class swiss.trustbroker.config.dto.OidcProperties
-
OIDC protocol enabled.
- isEnabled() - Method in class swiss.trustbroker.config.dto.OpsAuditConfig
-
Enable CID free logging on the log group swiss.trustbroker.audit.service.OpsAuditLogger.
- isEnabled() - Method in class swiss.trustbroker.config.dto.ProfileSelectionConfig
-
Globally enable the feature.
- isEnabled() - Method in class swiss.trustbroker.config.dto.SamlProperties
-
SAML protocol enabled.
- isEnabled() - Method in class swiss.trustbroker.config.dto.SsoConfig
-
Globally enable the feature.
- isEnabled() - Method in class swiss.trustbroker.config.dto.Support
-
Feature flag
- isEnabled() - Method in class swiss.trustbroker.config.dto.WsFedConfig
-
Feature toggle allowing to disable the WS-Fed endpoint.
- isEnabled() - Method in class swiss.trustbroker.config.dto.WsTrustConfig
-
Feature toggle allowing to disable the WSTrust endpoint
Default: false (since 1.13.0) - isEnabled() - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
Enable XML schema API.
- isEnabled() - Method in class swiss.trustbroker.federation.xmlconfig.CounterParty
- isEnabled() - Method in class swiss.trustbroker.federation.xmlconfig.Oidc
- isEnabled() - Method in enum class swiss.trustbroker.federation.xmlconfig.ProvisioningMode
- isEnabled() - Method in class swiss.trustbroker.federation.xmlconfig.Saml
- isEnabled() - Method in class swiss.trustbroker.federation.xmlconfig.Sso
-
Enable this configuration.
- isEnabled() - Method in class swiss.trustbroker.federation.xmlconfig.WsTrust
- isEnabledAndValid() - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsProvider
- isEnforceArtifactSignatureAlgorithms() - Method in class swiss.trustbroker.config.dto.SecurityChecks
-
Enforce allowed message signature algorithms for Artifact Resolution.
- isEnforceAssertionSignatureAlgorithms() - Method in class swiss.trustbroker.config.dto.SecurityChecks
-
Enforce allowed message signature algorithms for Assertions.
- isEnforceClientIp() - Method in class swiss.trustbroker.config.dto.WsTrustConfig
-
Client IPs enforced if configured (
allowedClientIpRegex). - isEnforceNetwork() - Method in class swiss.trustbroker.config.dto.WsTrustConfig
-
Client networks enforced if configured (
allowedNetworks). - isEnforceQoaIfMissing() - Method in class swiss.trustbroker.config.dto.SecurityChecks
-
Reject request without getAuthnContextClassRef or Qoa configuration
Default: false - isEnforceRequestSignatureAlgorithms() - Method in class swiss.trustbroker.config.dto.SecurityChecks
-
Enforce allowed message signature algorithms for AuthnRequests.
- isEnforceResponseSignatureAlgorithms() - Method in class swiss.trustbroker.config.dto.SecurityChecks
-
Enforce allowed message signature algorithms for Responses.
- isExpectSuccess() - Method in class swiss.trustbroker.saml.util.AssertionValidator.ExpectedAssertionValues
- isExpired() - Method in class swiss.trustbroker.sessioncache.dto.Lifecycle
- isExpired() - Method in class swiss.trustbroker.sessioncache.dto.StateData
- isExternalTokenExchangeEnabled() - Method in class swiss.trustbroker.config.dto.OidcProperties
-
Allow token exchange with external tokens.
- isFetchActiveOnly() - Method in class swiss.trustbroker.federation.xmlconfig.IdmQuery
- isFilterRoleEnabled() - Method in class swiss.trustbroker.federation.xmlconfig.ProfileSelection
- isFilterRoleOutput() - Method in class swiss.trustbroker.federation.xmlconfig.ProfileSelection
- isFilterUnitPropsEnabled() - Method in class swiss.trustbroker.federation.xmlconfig.ProfileSelection
- isForceCpAuthentication() - Method in class swiss.trustbroker.config.dto.SecurityChecks
-
Enforce CP authentication via corresponding OIDC/SAML flags.
- isForOidcOnly() - Method in class swiss.trustbroker.federation.xmlconfig.ProfileSelection
- isForwardRpProtocolBinding() - Method in class swiss.trustbroker.federation.xmlconfig.Saml
- isFragmentResponseMode(String) - Static method in class swiss.trustbroker.oidc.tx.FragmentUtil
- isFrontendPath(String) - Static method in class swiss.trustbroker.util.ApiSupport
- isGlobal() - Method in class swiss.trustbroker.config.dto.Banner
- isHandleEnterpriseSwitch() - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
Deprecated.XTB does not support CP/IDP switching based on CP error responses anymore with v1.10.
- isHandleResponderErrors() - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
SAML responder error handling enabled.
- isHrdHintTest(HttpServletRequest, TrustBrokerProperties) - Static method in class swiss.trustbroker.util.HrdSupport
- isIdpLogoutMetadataEnabled() - Method in class swiss.trustbroker.config.dto.SamlProperties
-
SAML RP-side logout support can be hidden setting this feature flag to false.
- isIdpMetadataEnabled() - Method in class swiss.trustbroker.config.dto.SamlProperties
-
SAML CP-side metadata can be hidden setting this feature flag to false.
- isImplicitSsoGroup() - Method in class swiss.trustbroker.sessioncache.dto.SsoState
- isInternalOidcRequest(TrustBrokerProperties, String) - Static method in class swiss.trustbroker.util.WebSupport
- isInternalUrl(String) - Method in class swiss.trustbroker.util.ApiSupport
- isInternet(String) - Method in class swiss.trustbroker.config.dto.NetworkConfig
- isIntranet(String) - Method in class swiss.trustbroker.config.dto.NetworkConfig
- isIntrospectionEnabled() - Method in class swiss.trustbroker.config.dto.OidcProperties
-
Enable introspection endpoint.
- isIntrospectRequest(String) - Static method in class swiss.trustbroker.util.ApiSupport
- isIssueEnabled() - Method in class swiss.trustbroker.config.dto.WsTrustConfig
-
Deprecated.use bindings
- isIssueRequireSignedAssertions() - Method in class swiss.trustbroker.config.dto.WsTrustConfig
-
Deprecated.
- isIssueRequireSignedRequests() - Method in class swiss.trustbroker.config.dto.WsTrustConfig
-
Require signed SOAP requests for WS-Trust ISSUE.
- isIssueRequireTimestamp() - Method in class swiss.trustbroker.config.dto.WsTrustConfig
-
WS-Trust ISSUE requires timestamp.
- isKeycloakRealmsPath(String) - Static method in class swiss.trustbroker.util.ApiSupport
- isKeycloakTransparencyModeOn() - Method in class swiss.trustbroker.config.dto.OidcProperties
-
NOTE: Transparency mode simulates /realms/X URLs and IDs for all clients on redirects etc.
- isLbHealthCheck(HttpServletRequest, NetworkConfig) - Static method in class swiss.trustbroker.util.WebSupport
- isLogoutEnabled() - Method in class swiss.trustbroker.config.dto.OidcProperties
-
Enable logout endpoint.
- isLogoutRequest(String) - Static method in class swiss.trustbroker.util.ApiSupport
- isMatchingHrdHint(String) - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsProvider
- isMatchingRelyingPartyAlias(String) - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsProvider
- isN2kEnabled() - Method in class swiss.trustbroker.federation.xmlconfig.ProfileSelection
- isNotification() - Method in enum class swiss.trustbroker.federation.xmlconfig.SloMode
- isNotification(SloProtocol) - Method in class swiss.trustbroker.federation.xmlconfig.SloResponse
- isNotifyFail() - Method in enum class swiss.trustbroker.federation.xmlconfig.SloMode
- isNotifyTry() - Method in enum class swiss.trustbroker.federation.xmlconfig.SloMode
- isNotOidcSession() - Method in class swiss.trustbroker.sessioncache.dto.StateData
- isOidcAuthPath(String) - Static method in class swiss.trustbroker.util.ApiSupport
- isOidcCheck3pCookie(String) - Static method in class swiss.trustbroker.util.ApiSupport
- isOidcConfigPath(String) - Static method in class swiss.trustbroker.util.ApiSupport
- isOidcEnabled(boolean) - Method in class swiss.trustbroker.federation.xmlconfig.CounterParty
- isOidcLoginStatus(String) - Static method in class swiss.trustbroker.util.ApiSupport
- isOidcPrincipalAllowedToJoinSsoSession(StateData, String, String, String) - Method in class swiss.trustbroker.sso.service.SsoService
- isOidcRequest() - Method in class swiss.trustbroker.oidc.session.HttpExchangeSupport
- isOidcSessionPath() - Method in class swiss.trustbroker.oidc.tx.OidcTxRequestWrapper
- isOidcSessionPath(String) - Static method in class swiss.trustbroker.util.ApiSupport
- isOidcSessionRequired() - Method in class swiss.trustbroker.federation.xmlconfig.SloResponse
- isOidcSubSystemPath(String) - Static method in class swiss.trustbroker.util.ApiSupport
- isOngoingForRelyingParty(String) - Method in class swiss.trustbroker.sessioncache.dto.AccessRequestSessionState
- isOpaqueRefreshTokenEnabled() - Method in class swiss.trustbroker.config.dto.OidcProperties
-
Deprecated.
- isOverdueAt(Timestamp) - Method in class swiss.trustbroker.sessioncache.dto.Lifecycle
- isOverdueAt(Instant) - Method in class swiss.trustbroker.sessioncache.dto.StateData
- isOwnOrigin(TrustBrokerProperties, URI) - Static method in class swiss.trustbroker.util.WebSupport
- isPartyDisabled(CounterParty, HttpServletRequest, NetworkConfig) - Static method in class swiss.trustbroker.homerealmdiscovery.util.RelyingPartySetupUtil
- isPepIssuerMatchingEnabled(String) - Method in class swiss.trustbroker.config.TrustBrokerProperties
- isPKCETokenExchange(HttpServletRequest) - Static method in class swiss.trustbroker.oidc.pkce.PublicClientRefreshTokenAndTokenExchangeAuthenticationConverter
- isProfileSelectionEnabled() - Method in class swiss.trustbroker.federation.xmlconfig.ProfileSelection
- isProvisioningAttribute() - Method in class swiss.trustbroker.federation.xmlconfig.Definition
- isProvisioningIdAttribute() - Method in class swiss.trustbroker.federation.xmlconfig.Definition
- isPushedAuthorizationRequestsEndpointEnabled() - Method in class swiss.trustbroker.config.dto.OidcProperties
-
Enable pushed authorization requests endpoints.
- isReady() - Method in class swiss.trustbroker.oidc.tx.InMemoryServletOutputStream
- isReadyOnlyAccess(String) - Static method in class swiss.trustbroker.util.ApiSupport
- isRedirectBindingSignatureWarning() - Method in class swiss.trustbroker.config.dto.SecurityChecks
-
Deprecated.
- isRegular() - Method in class swiss.trustbroker.mapping.dto.CustomQoa
- isRelyingPartyOkForSso(RelyingParty, StateData) - Method in class swiss.trustbroker.sso.service.SsoService
- isRenew() - Method in class swiss.trustbroker.saml.util.AssertionValidator.ExpectedAssertionValues
- isRenewEnabled() - Method in class swiss.trustbroker.config.dto.WsTrustConfig
-
Deprecated.use bindings
- isRenewRequireSignedRequests() - Method in class swiss.trustbroker.config.dto.WsTrustConfig
-
Require signed SOAP requests for WS-Trust RENEW.
- isRenewRequiresSecurityToken() - Method in class swiss.trustbroker.config.dto.WsTrustConfig
-
RENEW request requires a valid security token.
- isRenewRequiresSsoSession() - Method in class swiss.trustbroker.config.dto.WsTrustConfig
-
RENEW request requires a valid SSO session.
- isReplaceInbound() - Method in record class swiss.trustbroker.mapping.dto.QoaConfig
- isRequestedSessionIdValid() - Method in class swiss.trustbroker.oidc.tx.OidcTxRequestWrapper
- isRequireAudienceRestriction() - Method in class swiss.trustbroker.config.dto.SecurityChecks
-
Enforce presence and validation of audience restriction for other subject confirmations (e.g.
- isRequireAudienceRestrictionForBearerSubjectConfirmation() - Method in class swiss.trustbroker.config.dto.SecurityChecks
-
Enforce presence and validation of audience restriction for bearer subject confirmations.
- isRequireSignedArtifactResolve() - Method in class swiss.trustbroker.config.dto.SecurityChecks
-
Reject unsigned ArtifactResolve?
Default: true - isRequireSignedArtifactResponse() - Method in class swiss.trustbroker.config.dto.SecurityChecks
-
Reject unsigned ArtifactResponse?
Default: true - isRequireSignedAssertion() - Method in class swiss.trustbroker.config.dto.SecurityChecks
-
Reject unsigned Assertions?
Default: true - isRequireSignedAuthnRequest() - Method in class swiss.trustbroker.config.dto.SecurityChecks
-
Reject unsigned AuthnRequest?
Default: true - isRequireSignedResponse() - Method in class swiss.trustbroker.config.dto.SecurityChecks
-
Reject unsigned Response?
Default: true - isRequireSubjectConfirmation() - Method in class swiss.trustbroker.config.dto.SecurityChecks
-
In WS-Trust RST case we per default require a valid subject confirmation.
- isResponse() - Method in enum class swiss.trustbroker.federation.xmlconfig.SloMode
- isResponse(SloProtocol) - Method in class swiss.trustbroker.federation.xmlconfig.SloResponse
- isResponseSent() - Method in class swiss.trustbroker.sso.service.SsoService.SloState
- isRevocationEnabled() - Method in class swiss.trustbroker.config.dto.OidcProperties
-
Enable revocation endpoint.
- isRpAppAccessible(Announcement) - Method in class swiss.trustbroker.announcement.service.NoOpAnnouncementService
- isRpDisabled(RelyingParty, HttpServletRequest, NetworkConfig) - Method in class swiss.trustbroker.config.dto.RelyingPartyDefinitions
- isRpParticipatingInSession(String) - Method in class swiss.trustbroker.sessioncache.dto.SsoState
- isRunningLogoutRequest(HttpServletRequest) - Static method in class swiss.trustbroker.oidc.session.HttpExchangeSupport
- isRunningOidcExchange() - Static method in class swiss.trustbroker.oidc.session.HttpExchangeSupport
- isRunningPenTestScenario() - Static method in class swiss.trustbroker.oidc.session.HttpExchangeSupport
- isRunningUserInfoExchange() - Static method in class swiss.trustbroker.oidc.session.HttpExchangeSupport
- isSameExceptMode(SloResponse) - Method in class swiss.trustbroker.federation.xmlconfig.SloResponse
- isSameRealm(String) - Method in class swiss.trustbroker.federation.xmlconfig.OidcClient
- isSaml2TokenExchangeEnabled() - Method in class swiss.trustbroker.config.dto.OidcProperties
-
Allow saml2 token exchange.
- isSamlEnabled(boolean) - Method in class swiss.trustbroker.federation.xmlconfig.CounterParty
- isSamlEncrypt() - Method in class swiss.trustbroker.config.dto.OidcProperties
-
Encrypt internal SAML messages to XTB.
- isSamlOrOidcStaticContentPath(String) - Static method in class swiss.trustbroker.util.ApiSupport
- isSamlPath(String) - Static method in class swiss.trustbroker.util.ApiSupport
- isSaveStateOnValidationFailure() - Method in class swiss.trustbroker.config.dto.SecurityChecks
-
Register state in DB even when validation fails.
- isSchemaMigration() - Method in class swiss.trustbroker.config.dto.StateCacheProperties
-
State cache schema migration.
- isSchemaValidationEnabled(SecurityPolicies, TrustBrokerProperties) - Static method in class swiss.trustbroker.saml.util.PolicyDecider
- isScriptValid(String, String, boolean) - Method in class swiss.trustbroker.script.service.ScriptService
- isSecureBrowserHeaders() - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
Default should be secure, disable in DEV only if needed for picky user-agents.
- isServerMultiProcessed() - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
Run session and auth cache in DB
Default: true - isServerSide() - Method in class swiss.trustbroker.sessioncache.service.ArtifactStorageService
- isServerSingleUser() - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
Development feature flag to simulate multi-pod behavior with a single service.
- isSessionCookie() - Method in class swiss.trustbroker.config.dto.OidcProperties
-
Use session cookies - delete cookies on browser close.
- isSetSessionIndex() - Method in class swiss.trustbroker.saml.dto.ResponseParameters
- isSignatureValidated() - Method in class swiss.trustbroker.saml.util.AssertionValidator.MessageValidationResult
- isSortByName() - Method in class swiss.trustbroker.federation.xmlconfig.IdmQuery
- isSortRoleEnabled() - Method in class swiss.trustbroker.federation.xmlconfig.ProfileSelection
- isSpLogoutMetadataEnabled() - Method in class swiss.trustbroker.config.dto.SamlProperties
-
SAML CP-side logout support could be enabled but CPs need to be added as RPs.
- isSpMetadataEnabled() - Method in class swiss.trustbroker.config.dto.SamlProperties
-
SAML SP-side metadata can be hidden setting this feature flag to false.
- isSpringErrorPage(String) - Static method in class swiss.trustbroker.oidc.OidcExceptionHelper
- isSpringFederationPath(String) - Static method in class swiss.trustbroker.util.ApiSupport
- isSsoEnabled(boolean) - Method in class swiss.trustbroker.federation.xmlconfig.RelyingParty
- isSsoEstablished() - Method in class swiss.trustbroker.sessioncache.dto.Lifecycle
- isSsoEstablished() - Method in class swiss.trustbroker.sessioncache.dto.StateData
- isSsoSession(String) - Static method in enum class swiss.trustbroker.config.dto.SsoSessionIdPolicy
- isStrongestPossible(String) - Method in class swiss.trustbroker.mapping.service.QoaMappingService
- ISSUE - Enum constant in enum class swiss.trustbroker.federation.xmlconfig.WsTrustBinding
-
WS-Trust RST ISSUE.
- issueEnabled(boolean) - Method in class swiss.trustbroker.config.dto.WsTrustConfig.WsTrustConfigBuilder
-
Deprecated.use bindings
- issueInstant(String) - Method in class swiss.trustbroker.sessioncache.dto.StateData.StateDataBuilder
- issuer(String) - Method in class swiss.trustbroker.audit.dto.AuditDto.AuditDtoBuilder
- issuer(String) - Method in class swiss.trustbroker.federation.xmlconfig.SloResponse.SloResponseBuilder
-
Issuer for SAML LogoutResponse.
- issuer(String) - Method in class swiss.trustbroker.saml.dto.CpResponse.CpResponseBuilder
-
CP Response issuer also referred to as HomeRealm.
- issuer(String) - Method in class swiss.trustbroker.sessioncache.dto.StateData.StateDataBuilder
- issueRequireSignedAssertions(boolean) - Method in class swiss.trustbroker.config.dto.WsTrustConfig.WsTrustConfigBuilder
-
Deprecated.
- issueRequireSignedRequests(boolean) - Method in class swiss.trustbroker.config.dto.WsTrustConfig.WsTrustConfigBuilder
-
Require signed SOAP requests for WS-Trust ISSUE.
- issueRequireTimestamp(boolean) - Method in class swiss.trustbroker.config.dto.WsTrustConfig.WsTrustConfigBuilder
-
WS-Trust ISSUE requires timestamp.
- issuerId() - Method in record class swiss.trustbroker.mapping.dto.QoaConfig
-
Returns the value of the
issuerIdrecord component. - issuerId(String) - Method in class swiss.trustbroker.config.dto.AccessRequestConfig.AccessRequestConfigBuilder
-
Global default issuer ID.
- issuerId(String) - Method in class swiss.trustbroker.federation.xmlconfig.AuthorizedApplication.AuthorizedApplicationBuilder
-
Overrides the global issuer.
- issuerId(String) - Method in class swiss.trustbroker.federation.xmlconfig.OidcClient.OidcClientBuilder
-
CP issuer ID override for
issclaim validation. - issuerId(String) - Method in class swiss.trustbroker.oidc.client.dto.OpenIdProviderConfiguration.OpenIdProviderConfigurationBuilder
- issuerId(String) - Method in class swiss.trustbroker.saml.dto.ResponseParameters.ResponseParametersBuilder
- issuerInstant(Instant) - Method in class swiss.trustbroker.saml.dto.ResponseParameters.ResponseParametersBuilder
- issuerNameId(String) - Method in class swiss.trustbroker.federation.xmlconfig.IdmQuery.IdmQueryBuilder
-
SAML federation filter to be applied to the user query.
- issuerNameIdNS(String) - Method in class swiss.trustbroker.federation.xmlconfig.IdmQuery.IdmQueryBuilder
-
Instead of an issuerNameId the SAML federation can also be identified via its fully qualified homeName attribute as an input.
- isTlsClientCertificateBoundAccessTokens() - Method in class swiss.trustbroker.config.dto.OidcProperties
-
Enable TLS client certificate bound access tokens.
- isTracingEnabled() - Method in class swiss.trustbroker.config.dto.NetworkConfig
-
Allow disabling OpenTelemetry traceparent propagation to backends that might block use otherwise.
- isTransformCustomPropsEnabled() - Method in class swiss.trustbroker.federation.xmlconfig.ProfileSelection
- isTransformUnitPropsEnabled() - Method in class swiss.trustbroker.federation.xmlconfig.ProfileSelection
- isTrustedOrigin(String) - Method in class swiss.trustbroker.federation.xmlconfig.OidcClient
- isUnspecified() - Method in class swiss.trustbroker.mapping.dto.CustomQoa
- isUseKeycloakIssuerId() - Method in class swiss.trustbroker.config.dto.OidcProperties
-
Use Keycloak issuer ID.
- isUserInfoEnabled() - Method in class swiss.trustbroker.config.dto.OidcProperties
-
Enable user info endpoint.
- isUserInfoRequest(String) - Static method in class swiss.trustbroker.util.ApiSupport
- isUseSessionCookieForSso() - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
Use session cookie for SSO, should always be true.
- isUseSkinnyHrdScreen() - Method in class swiss.trustbroker.saml.dto.RpRequest
-
Allow to use a non-angular version of the HRD screen
Default: false - isValid() - Method in class swiss.trustbroker.federation.xmlconfig.CounterParty
- isValid() - Method in class swiss.trustbroker.oidc.session.TomcatSession
- isValid() - Method in class swiss.trustbroker.sessioncache.dto.Lifecycle
- isValid() - Method in class swiss.trustbroker.sessioncache.dto.StateData
- isValidateAcs() - Method in class swiss.trustbroker.config.dto.SecurityChecks
-
Check assertion consumer URL or HTTP Referer against configured whitelist.
- isValidateAssertionIssueInstant() - Method in class swiss.trustbroker.config.dto.SecurityChecks
-
Check IssueInstant attribute in Assertion
Default: true - isValidateAudience() - Method in class swiss.trustbroker.config.dto.SecurityChecks
-
Check audience restriction against issuer.
- isValidateAuthnRequest() - Method in class swiss.trustbroker.config.dto.SecurityChecks
-
Check incoming AuthnRequest at all.
- isValidateAuthnStatementIssueInstant() - Method in class swiss.trustbroker.config.dto.SecurityChecks
-
Check IssueInstant attribute in AuthnStatement
Default: true - isValidateHttpHeaders() - Method in class swiss.trustbroker.config.dto.SecurityChecks
-
Validate HTTP request headers.
- isValidateInResponseTo() - Method in class swiss.trustbroker.config.dto.SecurityChecks
-
Check response inResponseTo.
- isValidateLogoutRequest() - Method in class swiss.trustbroker.config.dto.SecurityChecks
-
Validate OID Logout request.
- isValidateRelayState() - Method in class swiss.trustbroker.config.dto.SecurityChecks
-
Relay must exist otherwise the SAML processing is stopped, if false response matching is done via SAML message.
- isValidateRequestCondition() - Method in class swiss.trustbroker.config.dto.SecurityChecks
-
Check Condition attribute in AuthnRequest
Default: true - isValidateRequestIssueInstant() - Method in class swiss.trustbroker.config.dto.SecurityChecks
-
Check IssueInstant attribute in AuthnRequest
Default: true - isValidateResponseIssueInstant() - Method in class swiss.trustbroker.config.dto.SecurityChecks
-
Check IssueInstant attribute in Response
Default: true - isValidateResponseIssuer() - Method in class swiss.trustbroker.config.dto.SecurityChecks
-
Check issuer in the CP response to match what the user has selected as a homeRealm in HRD.
- isValidateSecurityTokenRequest() - Method in class swiss.trustbroker.config.dto.SecurityChecks
-
Check incoming WSTrust SecurityTokenRequest on WSS4J level.
- isValidateSecurityTokenRequestAssertion() - Method in class swiss.trustbroker.config.dto.SecurityChecks
-
Check incoming WSTrust SecurityTokenRequest on XTB validator level.
- isValidateSubjectConfirmationInResponseTo() - Method in class swiss.trustbroker.config.dto.SecurityChecks
-
Check subject confirmation inResponseTo.
- isValidateSubjectConfirmationRecipient() - Method in class swiss.trustbroker.config.dto.SecurityChecks
-
Check subject confirmation recipient.
- isValidateSubjectConfirmationTimestamp() - Method in class swiss.trustbroker.config.dto.SecurityChecks
-
Check subject confirmation timestamp.
- isValidateXmlSchema() - Method in class swiss.trustbroker.config.dto.SecurityChecks
-
Check XML schema.
- isValidForNetwork(String) - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsProvider
- isValidInboundBinding(SamlBinding, Collection<SamlBinding>) - Method in class swiss.trustbroker.federation.xmlconfig.CounterParty
- isValidInboundBinding(WsTrustBinding, Collection<WsTrustBinding>, CounterParty) - Method in class swiss.trustbroker.federation.xmlconfig.CounterParty
- isValidRedirectUri(String) - Method in class swiss.trustbroker.federation.xmlconfig.OidcClient
- isValidRedirectUris(List<String>) - Method in class swiss.trustbroker.federation.xmlconfig.OidcClient
- isValidSelectedProfile(ProfileSelectionData, CpResponseData) - Method in class swiss.trustbroker.profileselection.service.LdapIdentitySelectionService
- isValidSelectedProfile(ProfileSelectionData, CpResponseData) - Method in class swiss.trustbroker.profileselection.service.NoOpProfileSelectionService
- isWaitForResponse() - Method in enum class swiss.trustbroker.federation.xmlconfig.SloMode
- isWebResourcePath(String) - Static method in class swiss.trustbroker.util.ApiSupport
- isWsTrustEnabled(boolean, CounterParty) - Method in class swiss.trustbroker.federation.xmlconfig.CounterParty
- isXtbDestination(TrustBrokerProperties, String) - Static method in class swiss.trustbroker.util.HrdSupport
J
- JOIN - Enum constant in enum class swiss.trustbroker.sso.service.SsoService.SsoSessionOperation
- joinConfAttributes(Collection<T>, List<T>) - Static method in class swiss.trustbroker.mapping.util.AttributeFilterUtil
- joinConfAttributes(List<AttributeName>, List<Definition>) - Static method in class swiss.trustbroker.mapping.util.AttributeFilterUtil
- JwkCacheEntity - Class in swiss.trustbroker.sessioncache.dto
- JwkCacheEntity() - Constructor for class swiss.trustbroker.sessioncache.dto.JwkCacheEntity
- JwkCacheRepository - Interface in swiss.trustbroker.sessioncache.repo
- JwkCacheService - Class in swiss.trustbroker.sessioncache.service
- JwkCacheService(JwkCacheRepository, TrustBrokerProperties, GlobalExceptionHandler, Clock) - Constructor for class swiss.trustbroker.sessioncache.service.JwkCacheService
- jwkEndpoint(URI) - Method in class swiss.trustbroker.oidc.client.dto.OpenIdProviderConfiguration.OpenIdProviderConfigurationBuilder
- jwkSet(JWKSet) - Method in class swiss.trustbroker.oidc.client.dto.OpenIdProviderConfiguration.OpenIdProviderConfigurationBuilder
- jwkSetUrl(String) - Method in class swiss.trustbroker.federation.xmlconfig.ProtocolEndpoints.ProtocolEndpointsBuilder
-
Jwk endpoint url
- jwkSource() - Method in class swiss.trustbroker.oidc.OidcSecurityConfiguration
-
Token signer support based on rotating keys periodically using the oldest valid one first.
- JWT_BEARER - Enum constant in enum class swiss.trustbroker.federation.xmlconfig.AuthorizationGrantType
- JwtClaimsService - Class in swiss.trustbroker.oidc.client.service
-
Handles OIDC claims from a CP JWT token.
- JwtClaimsService(ClaimsMapperService) - Constructor for class swiss.trustbroker.oidc.client.service.JwtClaimsService
- jwtDecoder(JWKSource<SecurityContext>) - Method in class swiss.trustbroker.oidc.OidcSecurityConfiguration
- jwtKeySupplier(ClaimsParty) - Method in class swiss.trustbroker.oidc.cache.service.OidcMetadataCacheService
K
- KEYCLOAK_AUTH - Static variable in class swiss.trustbroker.util.ApiSupport
- KEYCLOAK_CERTS - Static variable in class swiss.trustbroker.util.ApiSupport
- KEYCLOAK_REALMS - Static variable in class swiss.trustbroker.util.ApiSupport
- keyEncryptionAlgorithm(String) - Method in class swiss.trustbroker.federation.xmlconfig.Encryption.EncryptionBuilder
-
Key encryption algorithm.
- keyId(String) - Method in class swiss.trustbroker.oidc.OidcEncryptionKeystoreService.EncryptionParams.EncryptionParamsBuilder
- keyInfo(EncryptionKeyInfo) - Method in class swiss.trustbroker.federation.xmlconfig.Encryption.EncryptionBuilder
-
Value emitted in Key Info (CERTIFICATE, SKI).
- keyPath(String) - Method in class swiss.trustbroker.federation.xmlconfig.SignerKeystore.SignerKeystoreBuilder
-
Path of the key.
- keyPath(String) - Method in class swiss.trustbroker.federation.xmlconfig.SignerTruststore.SignerTruststoreBuilder
-
Path of the key.
- keyPlacement(EncryptionKeyPlacement) - Method in class swiss.trustbroker.federation.xmlconfig.Encryption.EncryptionBuilder
-
Key placement (PEER, INLINE).
- keystore(KeystoreProperties) - Method in class swiss.trustbroker.config.dto.ArtifactResolution.ArtifactResolutionBuilder
-
Default keystore for artifact resolution.
- keystore(KeystoreProperties) - Method in class swiss.trustbroker.config.dto.IdmConfig.IdmConfigBuilder
-
Keystore for accessing the IDM.
- keyType(String) - Method in class swiss.trustbroker.wstrustclient.dto.WsTrustRstRequest.WsTrustRstRequestBuilder
L
- LANGUAGE_LONG - Enum constant in enum class swiss.trustbroker.config.dto.GuiButtons
-
Use full language name in language selector (mutually exclusive with LANGUAGE_SHORT)
- LANGUAGE_SHORT - Enum constant in enum class swiss.trustbroker.config.dto.GuiButtons
-
Use abbreviated language name in language selector (mutually exclusive with LANGUAGE_LONG)
- languageCookie(CookieProperties) - Method in class swiss.trustbroker.config.dto.GuiProperties.GuiPropertiesBuilder
-
Attributes for the cookie that stores the user's selected language.
- languageCookie(CookieConfig) - Method in class swiss.trustbroker.homerealmdiscovery.dto.GuiConfig.GuiConfigBuilder
- lastConversationId(String) - Method in class swiss.trustbroker.sessioncache.dto.StateData.StateDataBuilder
- LAX - Enum constant in enum class swiss.trustbroker.federation.xmlconfig.FingerprintCheck
-
A partial match is OK.
- LdapIdentitySelectionService - Class in swiss.trustbroker.profileselection.service
-
LDAP Identity Selection
- LdapIdentitySelectionService(ApiSupport) - Constructor for class swiss.trustbroker.profileselection.service.LdapIdentitySelectionService
- LdapStoreConfig - Class in swiss.trustbroker.config.dto
-
Configuration for LDAP store sub-system.
- LdapStoreConfig() - Constructor for class swiss.trustbroker.config.dto.LdapStoreConfig
- LdapStoreConfig(boolean, String, String) - Constructor for class swiss.trustbroker.config.dto.LdapStoreConfig
-
Creates a new
LdapStoreConfiginstance. - legacy(Map<String, Integer>) - Method in class swiss.trustbroker.config.dto.QualityOfAuthenticationConfig.QualityOfAuthenticationConfigBuilder
-
Mapping of legacy QoA values to QoaLevel.
- level(Map<String, String>) - Method in class swiss.trustbroker.config.dto.Support.SupportBuilder
-
Logger names handle on a higher level than the default logging.logger level.
- lifecycle(Lifecycle) - Method in class swiss.trustbroker.sessioncache.dto.StateData.StateDataBuilder
- Lifecycle - Class in swiss.trustbroker.sessioncache.dto
- Lifecycle() - Constructor for class swiss.trustbroker.sessioncache.dto.Lifecycle
- Lifecycle(LifecycleState, Timestamp, Timestamp, Timestamp, Timestamp, Timestamp, long) - Constructor for class swiss.trustbroker.sessioncache.dto.Lifecycle
- Lifecycle.LifecycleBuilder - Class in swiss.trustbroker.sessioncache.dto
- lifecycleState(LifecycleState) - Method in class swiss.trustbroker.sessioncache.dto.Lifecycle.LifecycleBuilder
- LifecycleState - Enum Class in swiss.trustbroker.sessioncache.dto
- LIFETIME_MESSAGE_SEC - Static variable in class swiss.trustbroker.config.dto.SecurityChecks
- LIFETIME_TOKEN_SEC - Static variable in class swiss.trustbroker.config.dto.SecurityChecks
- lifetimeMin(long) - Method in class swiss.trustbroker.config.dto.WsTrustConfig.WsTrustConfigBuilder
-
Lifetime expiration in minutes.
- lifeTimeMin(int) - Method in class swiss.trustbroker.config.dto.AnnouncementConfig.AnnouncementConfigBuilder
-
After this many minutes of connection loss discard the messages from the cache.
- lifetimeSec(Integer) - Method in class swiss.trustbroker.config.dto.SecToken.SecTokenBuilder
-
Security token lifetime in seconds.
- link(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.Flow.FlowBuilder
-
Show error page including a link to
appUrl. - LINK_FLAG - Static variable in class swiss.trustbroker.federation.xmlconfig.Flow
- LIST - Enum constant in enum class swiss.trustbroker.federation.xmlconfig.Multivalued
-
Always a list.
- load() - Method in class swiss.trustbroker.oidc.session.TomcatSessionManager
- load(OidcTxRequestWrapper) - Method in class swiss.trustbroker.oidc.session.TomcatSessionManager
- loadAccessRequestConfigurations() - Method in class swiss.trustbroker.config.dto.RelyingPartyDefinitions
- loadClaimsProviderDefinitions(String) - Static method in class swiss.trustbroker.homerealmdiscovery.util.ClaimsProviderUtil
- loadClaimsProviderSetup(String, ConfigurableEnvironment) - Static method in class swiss.trustbroker.homerealmdiscovery.util.ClaimsProviderUtil
- loadClientsDecryptionKeystore(String, String, List<OidcClient>) - Method in class swiss.trustbroker.oidc.OidcEncryptionKeystoreService
- loadClientsEncKeystore(String, String, List<OidcClient>) - Method in class swiss.trustbroker.oidc.OidcEncryptionKeystoreService
- loadConfigFromDirectory(File, Class<T>, ConfigurableEnvironment) - Static method in class swiss.trustbroker.homerealmdiscovery.util.XmlConfigUtil
- loadConfigFromFile(File, Class<T>, ConfigurableEnvironment) - Static method in class swiss.trustbroker.homerealmdiscovery.util.XmlConfigUtil
- loadConfiguration() - Method in class swiss.trustbroker.ApplicationInitializer
- loadOidcConfiguration(OidcProperties) - Method in class swiss.trustbroker.config.dto.RelyingPartyDefinitions
- loadRelyingParty(String, ConfigurableEnvironment) - Static method in class swiss.trustbroker.homerealmdiscovery.util.ClaimsProviderUtil
- loadRelyingParty(Collection<RelyingParty>, String, String, TrustBrokerProperties, List<IdmQueryService>, ScriptService, ClaimsProviderSetup, ClaimsProviderDefinitions, ConfigurableEnvironment) - Static method in class swiss.trustbroker.homerealmdiscovery.util.RelyingPartySetupUtil
- loadRelyingPartySetup(File, ConfigurableEnvironment) - Static method in class swiss.trustbroker.homerealmdiscovery.util.ClaimsProviderUtil
- loadRelyingPartySetup(String, ConfigurableEnvironment) - Static method in class swiss.trustbroker.homerealmdiscovery.util.ClaimsProviderUtil
- loadScript(Compilable) - Method in class swiss.trustbroker.script.service.ScriptSource
- loadSsoGroups(String) - Static method in class swiss.trustbroker.homerealmdiscovery.util.ClaimsProviderUtil
- log(EventType, boolean, String) - Method in interface swiss.trustbroker.audit.service.AuditLogger
-
Audit message and context data to analyze login traffic and record what's needed for compliance.
- log(EventType, boolean, String) - Method in class swiss.trustbroker.audit.service.BaseAuditLogger
- logException(Throwable) - Method in class swiss.trustbroker.exception.GlobalExceptionHandler
- logException(Throwable, NetworkConfig) - Static method in class swiss.trustbroker.exception.GlobalExceptionHandler
- logInboundFlow(AuditDto) - Method in class swiss.trustbroker.audit.service.AuditService
- loginDurationSecs(Long) - Method in class swiss.trustbroker.audit.dto.AuditDto.AuditDtoBuilder
- LOGOUT_REQUEST - Enum constant in enum class swiss.trustbroker.audit.dto.EventType
- LOGOUT_RESPONSE - Enum constant in enum class swiss.trustbroker.audit.dto.EventType
- logOutboundFlow(AuditDto) - Method in class swiss.trustbroker.audit.service.AuditService
- logoutNotifications(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.Sso.SsoBuilder
-
Notify other SSO participants about the ongoing logout.
- logoutNotificationsEnabled() - Method in class swiss.trustbroker.federation.xmlconfig.Sso
- logoutRelyingParty(String, List<String>, RelyingParty, Cookie[], SsoService.SloState) - Method in class swiss.trustbroker.sso.service.SsoService
-
Produce logout notifications for RP.
- logoutSsoGroup(String) - Method in class swiss.trustbroker.sso.service.SsoService.SloState.SloStateBuilder
- logoutSsoParticipant(HttpServletRequest, HttpServletResponse, String, String, String, String) - Method in class swiss.trustbroker.sso.controller.SsoController
- logoutSsoParticipantById(SsoService.SsoCookieNameParams, Cookie[], String, String) - Method in class swiss.trustbroker.sso.service.SsoService
- logoutSsoParticipantIfOnlyGroup(HttpServletRequest, HttpServletResponse, String) - Method in class swiss.trustbroker.sso.controller.SsoController
- logoutSuccessHandler() - Method in class swiss.trustbroker.oidc.OidcSecurityConfiguration
- LogTokenRequestsFilter - Class in swiss.trustbroker.oidc
- LogTokenRequestsFilter(OidcAuditService, TrustBrokerProperties) - Constructor for class swiss.trustbroker.oidc.LogTokenRequestsFilter
M
- mainImage(String) - Method in class swiss.trustbroker.config.dto.Banner.BannerBuilder
-
Optional main image.
- mainImage(String) - Method in class swiss.trustbroker.saml.dto.UiBanner.UiBannerBuilder
-
Main image of banner.
- map(Object) - Method in enum class swiss.trustbroker.federation.xmlconfig.ClaimsMapper
- map(List<Object>) - Method in enum class swiss.trustbroker.federation.xmlconfig.ClaimsMapper
- mapAndValidateClaimsToAttributes(Map<String, Object>, ClaimsParty) - Method in class swiss.trustbroker.oidc.client.service.JwtClaimsService
- mapAttributeList(Map<AttributeName, List<String>>, Map<Definition, List<String>>) - Static method in class swiss.trustbroker.homerealmdiscovery.util.DefinitionUtil
- mapAttributeListIgnoringSource(Map<AttributeName, List<String>>, Map<Definition, List<String>>) - Static method in class swiss.trustbroker.homerealmdiscovery.util.DefinitionUtil
- mapAttributes(CpResponse) - Method in class swiss.trustbroker.audit.service.AuditMapper
- mapAttributes(CpResponse) - Method in class swiss.trustbroker.audit.service.InboundAuditMapper
- mapAttributes(CpResponse) - Method in class swiss.trustbroker.audit.service.OutboundAuditMapper
- mapClaims(CpResponse) - Method in class swiss.trustbroker.audit.service.AuditMapper
- mapClaims(CpResponse) - Method in class swiss.trustbroker.audit.service.InboundAuditMapper
- mapClaims(CpResponse) - Method in class swiss.trustbroker.audit.service.OutboundAuditMapper
- mapContainsDefinitionWithValue(Map<Definition, List<String>>, Definition) - Static method in class swiss.trustbroker.homerealmdiscovery.util.DefinitionUtil
- mapContainsDefinitionWithValue(Map<Definition, List<String>>, Definition, List<String>) - Static method in class swiss.trustbroker.homerealmdiscovery.util.DefinitionUtil
- mapFrom(HttpServletRequest) - Method in class swiss.trustbroker.audit.service.AuditMapper
- mapFrom(Assertion) - Method in class swiss.trustbroker.audit.service.AuditMapper
- mapFrom(RequestAbstractType) - Method in class swiss.trustbroker.audit.service.AuditMapper
- mapFrom(StatusResponseType) - Method in class swiss.trustbroker.audit.service.AuditMapper
- mapFrom(OidcAuditData) - Method in class swiss.trustbroker.audit.service.AuditMapper
- mapFrom(ClaimsParty) - Method in class swiss.trustbroker.audit.service.AuditMapper
- mapFrom(RelyingParty) - Method in class swiss.trustbroker.audit.service.AuditMapper
- mapFrom(AuthorizationCodeFlowRequest) - Method in class swiss.trustbroker.audit.service.AuditMapper
- mapFrom(CpResponse) - Method in class swiss.trustbroker.audit.service.AuditMapper
- mapFrom(AccessRequestSessionState) - Method in class swiss.trustbroker.audit.service.AuditMapper
- mapFrom(Lifecycle) - Method in class swiss.trustbroker.audit.service.AuditMapper
- mapFrom(SsoState) - Method in class swiss.trustbroker.audit.service.AuditMapper
- mapFrom(StateData) - Method in class swiss.trustbroker.audit.service.AuditMapper
- mapFromClaims(Map<String, Object>, AuditDto.AttributeSource) - Method in class swiss.trustbroker.audit.service.AuditMapper
- mapFromDefinitions(Map<Definition, T>, AuditDto.AttributeSource) - Method in class swiss.trustbroker.audit.service.AuditMapper
- mapFromRstRequestAssertion(Assertion) - Method in class swiss.trustbroker.audit.service.AuditMapper
- mapFromRstResponseAssertion(Assertion) - Method in class swiss.trustbroker.audit.service.AuditMapper
- mapFromThreadContext() - Method in class swiss.trustbroker.audit.service.AuditMapper
- mapFromTokenRequestParams(Map<String, String[]>) - Method in class swiss.trustbroker.audit.service.AuditMapper
- mapInbound(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.AcClass.AcClassBuilder
-
Enable mapping of inbound QoA.
- mapOutbound() - Method in class swiss.trustbroker.federation.xmlconfig.Qoa
- mapOutbound(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.AcClass.AcClassBuilder
-
Enable mapping of outbound QoA.
- mapOutbound(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.Qoa.QoaBuilder
-
Enable mapping of outbound QoA.
- mappedNameId(String) - Method in class swiss.trustbroker.audit.dto.AuditDto.AuditDtoBuilder
- mappedNameId(String) - Method in class swiss.trustbroker.saml.dto.CpResponse.CpResponseBuilder
-
CP Response incoming subject name ID after CP side subject name mapping.
- mappers(String) - Method in class swiss.trustbroker.config.dto.AttributeProperties.AttributePropertiesBuilder
-
The claim mappers used for mapping the values.
- mappers(String) - Method in class swiss.trustbroker.federation.xmlconfig.Definition.DefinitionBuilder
-
Comma-separated list of mappers to be used for the value.
- mapping(Map<String, Integer>) - Method in class swiss.trustbroker.config.dto.QualityOfAuthenticationConfig.QualityOfAuthenticationConfigBuilder
-
Global mapping of QoA values to QoaLevel.
- mappings(List<RegexNameValue>) - Method in class swiss.trustbroker.config.dto.AccessRequestConfig.AccessRequestConfigBuilder
-
Mappings that might be needed by the implementation.
- mappings(List<RegexNameValue>) - Method in class swiss.trustbroker.config.dto.IdmConfig.IdmConfigBuilder
-
Mappings that might be needed by the implementation.
- mapRequestQoasToOutbound(QoaComparison, List<String>, QoaConfig, QoaConfig) - Method in class swiss.trustbroker.mapping.service.QoaMappingService
-
Map RP request context classes to outbound CP request.
- mapResponseQoasToOutbound(List<String>, QoaConfig, QoaComparison, List<String>, QoaConfig) - Method in class swiss.trustbroker.mapping.service.QoaMappingService
-
Mapping of CP response QoAs to RP outbound.
- marshal(List<String>) - Method in class swiss.trustbroker.federation.xmlconfig.StringListAdapter
- marshallAttributes(XMLObject, Element) - Method in class swiss.trustbroker.wstrustclient.xml.ClaimTypeMarshaller
- match(String, String) - Method in enum class swiss.trustbroker.federation.xmlconfig.FingerprintCheck
- matchAcUrl() - Method in class swiss.trustbroker.federation.xmlconfig.SloResponse
- matchAcUrl(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.SloResponse.SloResponseBuilder
-
Perform ACUrl matching for absolute url, prefix with ACUrl scheme/host/port for relative URL.
- matchClientId(String) - Method in class swiss.trustbroker.federation.xmlconfig.AuthorizedApplication
- matchName(String) - Method in class swiss.trustbroker.federation.xmlconfig.AuthorizedApplication
- matchUrlAndQoa(String, Optional<Integer>) - Method in class swiss.trustbroker.federation.xmlconfig.AuthorizedApplication
- maxAge(Integer) - Method in class swiss.trustbroker.config.dto.CookieProperties.CookiePropertiesBuilder
-
Optional cookie maxAge
- maxAge(Integer) - Method in class swiss.trustbroker.homerealmdiscovery.dto.CookieConfig.CookieConfigBuilder
- maxBanners(Integer) - Method in class swiss.trustbroker.config.dto.GuiProperties.GuiPropertiesBuilder
-
Limit the number of banners shown on HRD.
- maxCachingTimeMinutes(int) - Method in class swiss.trustbroker.federation.xmlconfig.SsoGroup.SsoGroupBuilder
-
Time in minutes an RP can access XTB reusing the currently active SSO session without the need to interact with the CP again on an established SSO session, except when the SAML
- maxCachingTimeSecs(int) - Method in class swiss.trustbroker.sessioncache.dto.SsoState.SsoStateBuilder
- maxIdleTimeMinutes(int) - Method in class swiss.trustbroker.federation.xmlconfig.SsoGroup.SsoGroupBuilder
-
Time in minutes without any XTB SSO interaction leading to session removal.
- maxIdleTimeSecs(int) - Method in class swiss.trustbroker.sessioncache.dto.SsoState.SsoStateBuilder
- MAXIMUM - Enum constant in enum class swiss.trustbroker.federation.xmlconfig.QoaComparison
- maxSessionTimeMinutes(int) - Method in class swiss.trustbroker.federation.xmlconfig.SsoGroup.SsoGroupBuilder
-
Time in minutes an SSO session exists at most (even though there was interaction where the idle timeout did not expire yet).
- maxSessionTimeSecs(int) - Method in class swiss.trustbroker.sessioncache.dto.SsoState.SsoStateBuilder
- memoryLimitBytes(int) - Method in class swiss.trustbroker.config.dto.Support.SupportBuilder
-
Configure in-memory limits so network traffic cannot crash pods.
- MERGE - Enum constant in enum class swiss.trustbroker.federation.xmlconfig.MultiResultPolicy
-
Merge values.
- mergeOidcClient(OidcClient, OidcClient, RelyingParty) - Static method in class swiss.trustbroker.homerealmdiscovery.util.RelyingPartySetupUtil
- mergeQoaLevels(OidcClient, Qoa) - Static method in class swiss.trustbroker.homerealmdiscovery.util.RelyingPartySetupUtil
- messageId(String) - Method in class swiss.trustbroker.audit.dto.AuditDto.AuditDtoBuilder
- messageLifetimeSec(long) - Method in class swiss.trustbroker.config.dto.SecurityChecks.SecurityChecksBuilder
-
IssueInstant timestamp check should accept Assertion.Condition.NotValidOnOrAfter over WS-Trust.
- METADATA_URL - Static variable in class swiss.trustbroker.util.ApiSupport
- MetadataController - Class in swiss.trustbroker.saml.controller
-
This is the controller for metadata related interaction.
- MetadataController(FederationMetadataService) - Constructor for class swiss.trustbroker.saml.controller.MetadataController
- metadataUrl(String) - Method in class swiss.trustbroker.federation.xmlconfig.ProtocolEndpoints.ProtocolEndpointsBuilder
-
SAML/OIDC metadata URL.
- methods(List<ClientAuthenticationMethod>) - Method in class swiss.trustbroker.federation.xmlconfig.ClientAuthenticationMethods.ClientAuthenticationMethodsBuilder
-
List of authentication methods.
- metricsService - Variable in class swiss.trustbroker.oidc.CustomOAuth2AuthorizationService
- metricsService - Variable in class swiss.trustbroker.oidc.OidcSecurityConfiguration
- metricsService - Variable in class swiss.trustbroker.oidc.RotateJwkSource
- metricsService - Variable in class swiss.trustbroker.sessioncache.service.ArtifactStorageService
- metricsService - Variable in class swiss.trustbroker.sessioncache.service.StateCacheService
- MetricsService - Class in swiss.trustbroker.metrics.service
-
Service for Micrometer metrics.
- MetricsService(MeterRegistry) - Constructor for class swiss.trustbroker.metrics.service.MetricsService
- migrationAlias(String) - Method in class swiss.trustbroker.federation.xmlconfig.HomeName.HomeNameBuilder
-
Used for provisioning during migration from a CP to another.
- MINIMUM - Enum constant in enum class swiss.trustbroker.federation.xmlconfig.QoaComparison
- minQoa(Integer) - Method in class swiss.trustbroker.federation.xmlconfig.AuthorizedApplication.AuthorizedApplicationBuilder
-
Matched against minimum QOA from SAML AuthnContextClassRef.
- minSessionLifetimeSec(int) - Method in class swiss.trustbroker.config.dto.StateCacheProperties.StateCachePropertiesBuilder
-
Prevents collecting sessions related to a pending login.
- missingQoaException(QoaComparison, List<String>, QoaConfig) - Static method in class swiss.trustbroker.mapping.util.QoaMappingUtil
- missingQoaException(QoaComparison, List<String>, QoaConfig, QoaConfig) - Static method in class swiss.trustbroker.mapping.util.QoaMappingUtil
- MIXED - Enum constant in enum class swiss.trustbroker.config.dto.TomcatSessionMode
-
IN_MEMORY with IN_DB backing on failover.
- mobileGatewayIpRegex(String) - Method in class swiss.trustbroker.config.dto.NetworkConfig.NetworkConfigBuilder
- mode(String) - Method in class swiss.trustbroker.federation.xmlconfig.AuthorizedApplication.AuthorizedApplicationBuilder
-
Mode to be used for the AccessRequest, depending on the implementation.
- mode(String) - Method in class swiss.trustbroker.sessioncache.dto.AccessRequestSessionState.AccessRequestSessionStateBuilder
- mode(ProfileSelectionMode) - Method in class swiss.trustbroker.federation.xmlconfig.ProfileSelection.ProfileSelectionBuilder
-
Mode for profile selection.
- mode(SloMode) - Method in class swiss.trustbroker.federation.xmlconfig.SloResponse.SloResponseBuilder
-
The mode of this entry.
- modes(List<String>) - Method in class swiss.trustbroker.federation.xmlconfig.Provisioning.ProvisioningBuilder
-
Provisioning mode flags passed to the implementations.
- MONITORING_ACS_URL - Static variable in class swiss.trustbroker.util.ApiSupport
- MonitoringConfig - Class in swiss.trustbroker.config.dto
-
Monitoring configuration.
- MonitoringConfig() - Constructor for class swiss.trustbroker.config.dto.MonitoringConfig
- MonitoringConfig(boolean) - Constructor for class swiss.trustbroker.config.dto.MonitoringConfig
-
Creates a new
MonitoringConfiginstance. - MonitoringConfig.MonitoringConfigBuilder - Class in swiss.trustbroker.config.dto
- MonitoringController - Class in swiss.trustbroker.monitoring.controller
-
Monitoring API
- MonitoringController(TrustBrokerProperties, SamlValidator, RelyingPartySetupService, MonitoringService) - Constructor for class swiss.trustbroker.monitoring.controller.MonitoringController
- MonitoringResponse - Class in swiss.trustbroker.monitoring.dto
- MonitoringResponse.MonitoringResponseBuilder - Class in swiss.trustbroker.monitoring.dto
- MonitoringService - Class in swiss.trustbroker.monitoring.service
- MonitoringService(AssertionConsumerService, ClaimsProviderService) - Constructor for class swiss.trustbroker.monitoring.service.MonitoringService
- monitorRelyingParty(HttpServletRequest, HttpServletResponse, String, String) - Method in class swiss.trustbroker.monitoring.controller.MonitoringController
-
Triggers a SAML login on the provided RP / CP pair.
IDs can be plain text (unless they contain '?' or '/' that would affect the parsing of the path), URL encoded, or Base64 URL encoded - monitorRelyingPartyResponse(HttpServletRequest, String, String) - Method in class swiss.trustbroker.monitoring.controller.MonitoringController
-
Processes the CP response to the request triggered by the monitoring.
Note: No signature check other validation of the SAML response content is performed. - multiQueryPolicy(MultiResultPolicy) - Method in class swiss.trustbroker.federation.xmlconfig.IdmLookup.IdmLookupBuilder
-
Handling of same attributes across queries.
- MultiResultPolicy - Enum Class in swiss.trustbroker.federation.xmlconfig
-
Handling of same attributes across queries.
- multiSourcePolicy(MultiResultPolicy) - Method in class swiss.trustbroker.federation.xmlconfig.AttributesSelection.AttributesSelectionBuilder
-
Policy for merging attributes from multiple sources.
- multiValued(Multivalued) - Method in class swiss.trustbroker.federation.xmlconfig.Definition.DefinitionBuilder
-
Multi value handling.
- Multivalued - Enum Class in swiss.trustbroker.federation.xmlconfig
-
Handling of multi-values.
N
- name(String) - Method in class swiss.trustbroker.config.dto.AttributeProperties.AttributePropertiesBuilder
-
Short name used in auditing and for IDM attribute addressing.
- name(String) - Method in class swiss.trustbroker.config.dto.Banner.BannerBuilder
-
Name of the banner used for referencing resources (texts, css class).
- name(String) - Method in class swiss.trustbroker.config.dto.CookieProperties.CookiePropertiesBuilder
-
Cookie name
- name(String) - Method in class swiss.trustbroker.federation.xmlconfig.AuthorizedApplication.AuthorizedApplicationBuilder
-
Required application name (usually corresponding to IDM).
- name(String) - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsProvider.ClaimsProviderBuilder
-
Name displayed to the user directly.
- name(String) - Method in class swiss.trustbroker.federation.xmlconfig.Definition.DefinitionBuilder
-
Short name used in auditing and for IDM attribute addressing.
- name(String) - Method in class swiss.trustbroker.federation.xmlconfig.IdmQuery.IdmQueryBuilder
-
Name of the query, depending on the IdmService implementation.
- name(String) - Method in class swiss.trustbroker.federation.xmlconfig.Script.ScriptBuilder
-
The value identifies the script stored in the trustbroker-inventories definition/scripts directory.
- name(String) - Method in class swiss.trustbroker.federation.xmlconfig.SsoGroup.SsoGroupBuilder
-
Mandatory group name.
- name(String) - Method in class swiss.trustbroker.homerealmdiscovery.dto.CookieConfig.CookieConfigBuilder
- name(String) - Method in class swiss.trustbroker.saml.dto.UiBanner.UiBannerBuilder
-
Name of the banner referencing configuration.
- name(String) - Method in class swiss.trustbroker.saml.dto.UiObject.UiObjectBuilder
-
name is displayed on the tile given it's not used as a key into the translation service or overridden by tileTitle.
- nameId(String) - Method in class swiss.trustbroker.saml.dto.CpResponse.CpResponseBuilder
-
Subject name ID.
- nameId(String) - Method in class swiss.trustbroker.saml.dto.ResponseParameters.ResponseParametersBuilder
- nameIdFormat(String) - Method in class swiss.trustbroker.saml.dto.CpResponse.CpResponseBuilder
-
Format of the subject name ID.
- nameIdFormat(String) - Method in class swiss.trustbroker.saml.dto.ResponseParameters.ResponseParametersBuilder
- nameIdQualifier(String) - Method in class swiss.trustbroker.saml.dto.ResponseParameters.ResponseParametersBuilder
- namespace(String) - Method in class swiss.trustbroker.config.dto.SamlNamespace.SamlNamespaceBuilder
-
SAML namespace.
- namespacePrefix(String) - Method in class swiss.trustbroker.federation.xmlconfig.Flow.FlowBuilder
-
Prefix if there are multiple
- namespaceUri(String) - Method in class swiss.trustbroker.audit.dto.AuditDto.ResponseAttributeValue.ResponseAttributeValueBuilder
- namespaceUri(String) - Method in class swiss.trustbroker.config.dto.AttributeProperties.AttributePropertiesBuilder
-
The long name is used in the generated SAML assertion towards the RP.
- namespaceUri(String) - Method in class swiss.trustbroker.federation.xmlconfig.Definition.DefinitionBuilder
-
The long name is used in the generated SAML assertion towards the RP.
- needToKnow(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.ProfileSelection.ProfileSelectionBuilder
-
Apply name/value transformation.
- nestedStatus(String) - Method in class swiss.trustbroker.audit.dto.AuditDto.AuditDtoBuilder
- nestedStatusCode() - Method in class swiss.trustbroker.saml.dto.ResponseStatus
- nestedStatusCode(SamlProperties) - Method in class swiss.trustbroker.saml.dto.ResponseStatus
- NetworkConfig - Class in swiss.trustbroker.config.dto
-
Network configuration.
- NetworkConfig() - Constructor for class swiss.trustbroker.config.dto.NetworkConfig
- NetworkConfig(String, String, String, String, String, String, String, boolean, String, int) - Constructor for class swiss.trustbroker.config.dto.NetworkConfig
-
Creates a new
NetworkConfiginstance. - NetworkConfig.NetworkConfigBuilder - Class in swiss.trustbroker.config.dto
- networkHeader(String) - Method in class swiss.trustbroker.config.dto.NetworkConfig.NetworkConfigBuilder
-
HTTP header delivering the client network.
- NEVER - Enum constant in enum class swiss.trustbroker.config.dto.AllowPrivateNetworkAccess
-
Never allow private network access.
- noCheckOrEmpty(String, Optional<Integer>, String, String) - Method in class swiss.trustbroker.federation.xmlconfig.AuthorizedApplication
- NONE - Enum constant in enum class swiss.trustbroker.config.dto.SsoSessionIdPolicy
-
Generate no SSO session ID.
- NONE - Enum constant in enum class swiss.trustbroker.federation.xmlconfig.ClientAuthenticationMethod
- NoOpAccessRequestService - Class in swiss.trustbroker.accessrequest.service
-
NO-OP fallback implementation of AccessRequestService, never requires any access request.
- NoOpAccessRequestService() - Constructor for class swiss.trustbroker.accessrequest.service.NoOpAccessRequestService
- NoOpAnnouncementService - Class in swiss.trustbroker.announcement.service
-
NO-OP fallback implementation of AnnouncementService, provides no announcements.
- NoOpAnnouncementService() - Constructor for class swiss.trustbroker.announcement.service.NoOpAnnouncementService
- NoOpHrdService - Class in swiss.trustbroker.homerealmdiscovery.service
-
NO-OP fallback implementation of HrdService, returns unmodified data.
- NoOpHrdService() - Constructor for class swiss.trustbroker.homerealmdiscovery.service.NoOpHrdService
- NoOpProfileSelectionService - Class in swiss.trustbroker.profileselection.service
-
NO-OP fallback implementation of ProfileSelectionService, returns empty data.
- NoOpProfileSelectionService() - Constructor for class swiss.trustbroker.profileselection.service.NoOpProfileSelectionService
- NOT_SUPPORTED - Enum constant in enum class swiss.trustbroker.federation.xmlconfig.ArtifactBindingMode
-
Peer does not support Artifact Binding (inbound or outbound).
- notBeforeToleranceSec(long) - Method in class swiss.trustbroker.config.dto.SecurityChecks.SecurityChecksBuilder
-
Any timestamp tolerance NTP drift tolerance.
- noticeClaimsProviders(List<String>) - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsProvider.ClaimsProviderBuilder
-
The list of ClaimsProviders name
- noticeClaimsProviders(List<String>) - Method in class swiss.trustbroker.saml.dto.UiObject.UiObjectBuilder
-
The list of ClaimsProviders name
- noticeEnabled(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsProvider.ClaimsProviderBuilder
-
Notice enabled
- noticeMaxAgeSec(Integer) - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsProvider.ClaimsProviderBuilder
-
Notice max age
- noticeMaxAgeSec(Integer) - Method in class swiss.trustbroker.saml.dto.UiObject.UiObjectBuilder
-
Notice max age
- NOTIFY_FAIL - Enum constant in enum class swiss.trustbroker.federation.xmlconfig.SloMode
-
Configuration for notification to an RP participating in the SSO session that is being logged out.
- NOTIFY_TRY - Enum constant in enum class swiss.trustbroker.federation.xmlconfig.SloMode
-
Configuration for notification to an RP participating in the SSO session that is being logged out.
- notOnOrAfterSeconds(Integer) - Method in class swiss.trustbroker.federation.xmlconfig.SecurityPolicies.SecurityPoliciesBuilder
-
Overrides the global
tokenLifetimeSecfor CP response AuthnInstant checks. - notOnOrAfterToleranceSec(long) - Method in class swiss.trustbroker.config.dto.SecurityChecks.SecurityChecksBuilder
-
Any timestamp clock/transfer tolerance.
- numCp(Integer) - Method in class swiss.trustbroker.monitoring.dto.MonitoringResponse.MonitoringResponseBuilder
O
- ObjectMapperFactory - Class in swiss.trustbroker.oidc.jackson
- ObjectMixin - Class in swiss.trustbroker.oidc.jackson
- ObjectMixin() - Constructor for class swiss.trustbroker.oidc.jackson.ObjectMixin
- of(HttpServletRequest, HttpServletResponse, TrustBrokerProperties, FrameAncestorHandler) - Static method in class swiss.trustbroker.util.HeaderBuilder
- of(String) - Static method in class swiss.trustbroker.sso.service.SsoService.SsoCookieNameParams
- of(String, String, String) - Static method in class swiss.trustbroker.sso.service.SsoService.SsoCookieNameParams
- of(Object, String, AuditDto.AttributeSource, String, Boolean) - Static method in class swiss.trustbroker.audit.dto.AuditDto.ResponseAttributeValue
- of(String) - Static method in enum class swiss.trustbroker.federation.xmlconfig.ClaimsMapper
- of(String) - Static method in class swiss.trustbroker.federation.xmlconfig.Scope
- of(String) - Static method in enum class swiss.trustbroker.federation.xmlconfig.StatusPolicy
- of(String) - Static method in enum class swiss.trustbroker.federation.xmlconfig.WsTrustBinding
- of(XMLObject, QName) - Static method in class swiss.trustbroker.wstrustclient.service.WsTrustSoapClientBase.MarshallingInfo
- of(HrdClaimsProviderToRelyingPartyMapping) - Static method in class swiss.trustbroker.federation.xmlconfig.ClaimsProvider
- of(IdmRequest) - Static method in class swiss.trustbroker.federation.xmlconfig.IdmQuery
- of(AuditDto.ResponseAttributeValue...) - Static method in class swiss.trustbroker.audit.dto.AuditDto.ResponseAttributeValues
- of(StateData, List<Cookie>) - Static method in class swiss.trustbroker.sso.service.SsoService.StateWithCookies
- of(T, String, SignatureContext) - Static method in class swiss.trustbroker.saml.dto.ResponseData
- ofLowerCase(String) - Static method in enum class swiss.trustbroker.federation.xmlconfig.QoaComparison
- ofName(String) - Static method in class swiss.trustbroker.federation.xmlconfig.Definition
- ofName(AttributeName) - Static method in class swiss.trustbroker.federation.xmlconfig.Definition
- ofNameAndSource(String, String) - Static method in class swiss.trustbroker.federation.xmlconfig.Definition
- ofNameAndSource(AttributeName, String) - Static method in class swiss.trustbroker.federation.xmlconfig.Definition
- ofNameOrValue(String) - Static method in enum class swiss.trustbroker.federation.xmlconfig.WsTrustBinding
- ofNames(String, String) - Static method in class swiss.trustbroker.federation.xmlconfig.Definition
- ofNames(AttributeName) - Static method in class swiss.trustbroker.federation.xmlconfig.Definition
- ofNamesAndSource(String, String, String) - Static method in class swiss.trustbroker.federation.xmlconfig.Definition
- ofNamesAndSource(AttributeName, String) - Static method in class swiss.trustbroker.federation.xmlconfig.Definition
- oidc(String) - Method in class swiss.trustbroker.config.dto.ContentSecurityPolicies.ContentSecurityPoliciesBuilder
-
CSP configuration for OIDC.
- oidc(String) - Method in class swiss.trustbroker.config.dto.FrameOptionsPolicies.FrameOptionsPoliciesBuilder
-
/app/device and other api services might run in an application iframe so switch from deny to same origin.
- oidc(Oidc) - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsParty.ClaimsPartyBuilder
-
OIDC client configuration to integrate CP/IDP
- oidc(Oidc) - Method in class swiss.trustbroker.federation.xmlconfig.RelyingParty.RelyingPartyBuilder
-
OIDC client configuration for this RP.
- Oidc - Class in swiss.trustbroker.federation.xmlconfig
-
OIDC client applications for an RP.
- Oidc() - Constructor for class swiss.trustbroker.federation.xmlconfig.Oidc
- Oidc(Boolean, List<OidcClient>) - Constructor for class swiss.trustbroker.federation.xmlconfig.Oidc
-
Creates a new
Oidcinstance. - OIDC - Enum constant in enum class swiss.trustbroker.federation.xmlconfig.SloProtocol
-
OIDC logout response to an incoming logout request or notification via OIDC logout.
- OIDC_API - Static variable in class swiss.trustbroker.util.ApiSupport
- OIDC_AUTH - Static variable in class swiss.trustbroker.util.ApiSupport
- OIDC_CHECK_3PCOOKIE - Static variable in class swiss.trustbroker.util.ApiSupport
- OIDC_IDTOKEN - Enum constant in enum class swiss.trustbroker.audit.dto.EventType
- OIDC_INTROSPECT - Static variable in class swiss.trustbroker.util.ApiSupport
- OIDC_KEYS - Static variable in class swiss.trustbroker.util.ApiSupport
- OIDC_LABEL - Static variable in class swiss.trustbroker.metrics.service.MetricsService
- OIDC_LOGIN_STATUS - Static variable in class swiss.trustbroker.util.ApiSupport
- OIDC_LOGOUT - Enum constant in enum class swiss.trustbroker.audit.dto.EventType
- OIDC_LOGOUT - Static variable in class swiss.trustbroker.util.ApiSupport
- OIDC_REQUEST - Enum constant in enum class swiss.trustbroker.audit.dto.AuditDto.AttributeSource
- OIDC_RESPONSE - Enum constant in enum class swiss.trustbroker.audit.dto.AuditDto.AttributeSource
- OIDC_RESPONSE_API - Static variable in class swiss.trustbroker.util.ApiSupport
- OIDC_RESPONSE_FRAGMENT - Static variable in class swiss.trustbroker.oidc.tx.FragmentUtil
- OIDC_RESPONSE_MODE - Static variable in class swiss.trustbroker.oidc.tx.FragmentUtil
- OIDC_RESPONSE_URL - Static variable in class swiss.trustbroker.util.ApiSupport
- OIDC_REVOKE - Static variable in class swiss.trustbroker.util.ApiSupport
- OIDC_SESSION_ID_LENGTH - Static variable in class swiss.trustbroker.oidc.session.OidcSessionSupport
- OIDC_SESSION_ID_LENGTH_HEX - Static variable in class swiss.trustbroker.oidc.session.OidcSessionSupport
- OIDC_TOKEN - Enum constant in enum class swiss.trustbroker.audit.dto.EventType
- OIDC_TOKEN - Static variable in class swiss.trustbroker.util.ApiSupport
- OIDC_TOKEN_REQUEST - Enum constant in enum class swiss.trustbroker.audit.dto.EventType
- OIDC_USERINFO - Static variable in class swiss.trustbroker.util.ApiSupport
- Oidc.OidcBuilder - Class in swiss.trustbroker.federation.xmlconfig
- oidc3pCookieOptions(String, String) - Method in class swiss.trustbroker.util.HeaderBuilder
- OidcAuditData - Class in swiss.trustbroker.audit.dto
-
OIDC specific data for auditing.
- OidcAuditData.OidcAuditDataBuilder - Class in swiss.trustbroker.audit.dto
- OidcAuditService - Class in swiss.trustbroker.oidc
- OidcAuditService(AuditService) - Constructor for class swiss.trustbroker.oidc.OidcAuditService
- OidcAuthenticationUtil - Class in swiss.trustbroker.oidc
- OidcClaimsSource - Enum Class in swiss.trustbroker.federation.xmlconfig
-
Source for OIDC CP claims.
- OidcClaimsSources - Class in swiss.trustbroker.federation.xmlconfig
-
Sources of claims for OIDC CPs.
- OidcClaimsSources() - Constructor for class swiss.trustbroker.federation.xmlconfig.OidcClaimsSources
- OidcClaimsSources(Boolean, Boolean, List<OidcClaimsSource>) - Constructor for class swiss.trustbroker.federation.xmlconfig.OidcClaimsSources
-
Creates a new
OidcClaimsSourcesinstance. - OidcClaimsSources.OidcClaimsSourcesBuilder - Class in swiss.trustbroker.federation.xmlconfig
- OidcClaimValidatorService - Class in swiss.trustbroker.oidc
-
Service for validating claims from an OIDC CP.
- OidcClaimValidatorService(TrustBrokerProperties, Clock) - Constructor for class swiss.trustbroker.oidc.OidcClaimValidatorService
- OidcClient - Class in swiss.trustbroker.federation.xmlconfig
-
OIDC client application configuration.
- OidcClient() - Constructor for class swiss.trustbroker.federation.xmlconfig.OidcClient
- OidcClient(String, String, String, String, String, ProtocolEndpoints, AcWhitelist, Certificates, String, OidcSecurityPolicies, AuthorizationGrantTypes, ClientAuthenticationMethods, Scopes, Audiences, Resources, ResponseMode, Qoa, AttributesSelection, OidcClaimsSources, RegisteredClient, Credential, List<JWK>) - Constructor for class swiss.trustbroker.federation.xmlconfig.OidcClient
-
Creates a new
OidcClientinstance. - OidcClient.OidcClientBuilder - Class in swiss.trustbroker.federation.xmlconfig
- OidcClientController - Class in swiss.trustbroker.oidc.client.controller
-
OIDC client side controller accepting responses from an OIDC CP.
- OidcClientController(OidcClientService) - Constructor for class swiss.trustbroker.oidc.client.controller.OidcClientController
- oidcClientId(String) - Method in class swiss.trustbroker.audit.dto.AuditDto.AuditDtoBuilder
- oidcClientId(String) - Method in class swiss.trustbroker.audit.dto.OidcAuditData.OidcAuditDataBuilder
- oidcClientId(String) - Method in class swiss.trustbroker.saml.dto.CpResponse.CpResponseBuilder
-
Incoming OIDC client_id.
- oidcClientId(String) - Method in class swiss.trustbroker.sessioncache.dto.SsoSessionParticipant.SsoSessionParticipantBuilder
- oidcClientId(String) - Method in class swiss.trustbroker.sessioncache.dto.StateData.StateDataBuilder
- OidcClientService - Class in swiss.trustbroker.oidc.client.service
- OidcClientService(AuthorizationCodeFlowService, RelyingPartySetupService, StateCacheService, AssertionConsumerService, List<OutputService>, RelyingPartyService, TrustBrokerProperties) - Constructor for class swiss.trustbroker.oidc.client.service.OidcClientService
- oidcConfigurations(Map<String, Pair<RelyingParty, OidcClient>>) - Method in class swiss.trustbroker.config.dto.RelyingPartyDefinitions.RelyingPartyDefinitionsBuilder
- OidcConfigurationUtil - Class in swiss.trustbroker.oidc
- oidcCspFrameOptions(Set<String>) - Method in class swiss.trustbroker.util.HeaderBuilder
- OidcEncryptionKeystoreService - Class in swiss.trustbroker.oidc
-
Service for OIDC Encryption Keystore loading
- OidcEncryptionKeystoreService(CredentialService, OidcMetadataCacheService) - Constructor for class swiss.trustbroker.oidc.OidcEncryptionKeystoreService
- OidcEncryptionKeystoreService.EncryptionParams - Class in swiss.trustbroker.oidc
- OidcEncryptionKeystoreService.EncryptionParams.EncryptionParamsBuilder - Class in swiss.trustbroker.oidc
- OidcExceptionHelper - Class in swiss.trustbroker.oidc
-
Small parts copied from spring-security-oauth2-authorization-server: org.springframework.security.oauth2.server.authorization.authentication.OAuth2AuthorizationCodeRequestAuthenticationValidator Javadoc of original class: An
AuthenticationProviderimplementation for the OAuth 2.0 Authorization Request used in the Authorization Code Grant. - OidcFrameAncestorHandler - Class in swiss.trustbroker.oidc
- OidcFrameAncestorHandler(HttpServletRequest, RelyingPartyDefinitions, TrustBrokerProperties) - Constructor for class swiss.trustbroker.oidc.OidcFrameAncestorHandler
- OidcHttpClientProvider - Class in swiss.trustbroker.oidc
-
Provides HTTP clients configured for an OidcClient.
- OidcHttpClientProvider(TrustBrokerProperties) - Constructor for class swiss.trustbroker.oidc.OidcHttpClientProvider
- OidcIdentityProvider - Class in swiss.trustbroker.config.dto
-
OIDC identity provider configuration.
- OidcIdentityProvider() - Constructor for class swiss.trustbroker.config.dto.OidcIdentityProvider
- oidcIdpCredential(OidcIdpCredential) - Method in class swiss.trustbroker.config.dto.RelyingPartyDefinitions.RelyingPartyDefinitionsBuilder
- OidcIdpCredential - Class in swiss.trustbroker.config.dto
-
OIDC IDP credential - internal model.
- OidcIdpCredential() - Constructor for class swiss.trustbroker.config.dto.OidcIdpCredential
- OidcIdpCredential(Saml2X509Credential, Saml2X509Credential) - Constructor for class swiss.trustbroker.config.dto.OidcIdpCredential
- OidcIdpCredential.OidcIdpCredentialBuilder - Class in swiss.trustbroker.config.dto
- oidcLogoutUrl(String) - Method in class swiss.trustbroker.audit.dto.OidcAuditData.OidcAuditDataBuilder
- oidcMapper(ClaimsMapper) - Method in class swiss.trustbroker.federation.xmlconfig.Definition.DefinitionBuilder
-
Deprecated.use mappers
- OidcMetadataCacheService - Class in swiss.trustbroker.oidc.cache.service
-
Service for OIDC metadata configuration fetching.
- OidcMetadataCacheService(RelyingPartyDefinitions, GlobalExceptionHandler, OidcHttpClientProvider, OidcClientSecretResolver, TrustBrokerProperties, ExecutorService) - Constructor for class swiss.trustbroker.oidc.cache.service.OidcMetadataCacheService
- oidcNameList(List<String>) - Method in class swiss.trustbroker.config.dto.AttributeProperties.AttributePropertiesBuilder
-
The claim names used when emitting an attribute to an OIDC client.
- oidcNames(String) - Method in class swiss.trustbroker.federation.xmlconfig.Definition.DefinitionBuilder
-
The claim names used when emitting an attribute to an OIDC client (comma-separated - as an attribute, it cannot be a List).
- oidcNonce(String) - Method in class swiss.trustbroker.sessioncache.dto.StateData.StateDataBuilder
- oidcOnly(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.ProfileSelection.ProfileSelectionBuilder
-
Apply name/value transformation for n2k only for Oidc.
- OidcProperties - Class in swiss.trustbroker.config.dto
-
OIDC protocol configuration.
- OidcProperties() - Constructor for class swiss.trustbroker.config.dto.OidcProperties
- oidcRefreshToken(String) - Method in class swiss.trustbroker.sessioncache.dto.StateData.StateDataBuilder
- OidcRequestUtil - Class in swiss.trustbroker.oidc.tx
- oidcScopes(Set<String>) - Method in class swiss.trustbroker.saml.dto.CpResponse.CpResponseBuilder
-
Incoming OIDC scopes.
- OidcSecurityConfiguration - Class in swiss.trustbroker.oidc
- OidcSecurityConfiguration(ClientConfigInMemoryRepository, CustomRelyingPartyRegistrationRepository, TrustBrokerProperties, RelyingPartyDefinitions, QoaMappingService, JwkCacheService, ServerProperties, ScriptService, ClaimsMapperService, OidcAuditService, SsoService, VelocityEngine, QoaMappingService, CustomOAuth2AuthorizationService, MetricsService) - Constructor for class swiss.trustbroker.oidc.OidcSecurityConfiguration
- oidcSecurityPolicies(OidcSecurityPolicies) - Method in class swiss.trustbroker.federation.xmlconfig.OidcClient.OidcClientBuilder
-
Override security policies.
- OidcSecurityPolicies - Class in swiss.trustbroker.federation.xmlconfig
-
Security policy overrides for OIDC.
- OidcSecurityPolicies() - Constructor for class swiss.trustbroker.federation.xmlconfig.OidcSecurityPolicies
- OidcSecurityPolicies(Boolean, Boolean, Boolean, Boolean, Boolean, Boolean, Boolean, String, String, String, Integer, Integer, Integer, Integer, Integer, Integer, Boolean, String, String, Boolean, Integer, Integer, Integer, Integer, Integer, Integer, Integer, Integer) - Constructor for class swiss.trustbroker.federation.xmlconfig.OidcSecurityPolicies
-
Creates a new
OidcSecurityPoliciesinstance. - OidcSecurityPolicies.OidcSecurityPoliciesBuilder - Class in swiss.trustbroker.federation.xmlconfig
- OidcServerConfiguration - Class in swiss.trustbroker.oidc
- OidcServerConfiguration(OidcProperties, ClientConfigInMemoryRepository, RelyingPartyDefinitions, TrustBrokerProperties, ScriptService, ObjectMapper, OidcEncryptionKeystoreService, OidcMetadataCacheService, RelyingPartyService, RelyingPartySetupService, QoaMappingService, OidcAuditService) - Constructor for class swiss.trustbroker.oidc.OidcServerConfiguration
- OidcSessionController - Class in swiss.trustbroker.oidc.sso.controller
- OidcSessionController(RelyingPartyDefinitions, TrustBrokerProperties) - Constructor for class swiss.trustbroker.oidc.sso.controller.OidcSessionController
- oidcSessionData(String) - Method in class swiss.trustbroker.sessioncache.dto.StateData.StateDataBuilder
- oidcSessionId(String) - Method in class swiss.trustbroker.audit.dto.OidcAuditData.OidcAuditDataBuilder
- oidcSessionId(String) - Method in class swiss.trustbroker.sessioncache.dto.SsoSessionParticipant.SsoSessionParticipantBuilder
- oidcSessionId(String) - Method in class swiss.trustbroker.sessioncache.dto.StateData.StateDataBuilder
- OidcSessionSupport - Class in swiss.trustbroker.oidc.session
- oidcTokenCount(int) - Method in class swiss.trustbroker.sessioncache.dto.StateData.StateDataBuilder
- oidcTokenData(String) - Method in class swiss.trustbroker.sessioncache.dto.StateData.StateDataBuilder
- OidcTxFilter - Class in swiss.trustbroker.oidc.tx
-
Transaction boundary filter.
- OidcTxFilter(RelyingPartyDefinitions, TrustBrokerProperties, ApiSupport, ScriptService, SessionTxWrapper) - Constructor for class swiss.trustbroker.oidc.tx.OidcTxFilter
- OidcTxRequestWrapper - Class in swiss.trustbroker.oidc.tx
- OidcTxRequestWrapper(HttpServletRequest) - Constructor for class swiss.trustbroker.oidc.tx.OidcTxRequestWrapper
- OidcTxResponseWrapper - Class in swiss.trustbroker.oidc.tx
- OidcTxResponseWrapper(HttpServletRequest, HttpServletResponse, RelyingPartyDefinitions, TrustBrokerProperties, ApiSupport, OidcFrameAncestorHandler) - Constructor for class swiss.trustbroker.oidc.tx.OidcTxResponseWrapper
- OidcTxUtil - Class in swiss.trustbroker.oidc.tx
- OidcUserInfoUtil - Class in swiss.trustbroker.oidc
- OidcValidator - Class in swiss.trustbroker.oidc
- OK - Enum constant in enum class swiss.trustbroker.federation.dto.ConfigStatus
- onApplicationEvent() - Method in class swiss.trustbroker.ApplicationInitializer
- onApplicationEvent() - Method in class swiss.trustbroker.federation.service.FederationMetadataService
- onApplicationEvent(AbstractSessionEvent) - Method in class swiss.trustbroker.oidc.CustomSessionRegistry
- onAuthenticationFailure(HttpServletRequest, HttpServletResponse, AuthenticationException) - Method in class swiss.trustbroker.oidc.CustomFailureHandler
- onAuthenticationSuccess(HttpServletRequest, HttpServletResponse, Authentication) - Method in class swiss.trustbroker.oidc.CustomUserInfoResponseHandler
- onLogoutSuccess(HttpServletRequest, HttpServletResponse, Authentication) - Method in class swiss.trustbroker.oidc.CustomLogoutSuccessHandler
- OPENID - Static variable in class swiss.trustbroker.federation.xmlconfig.Scope
- OpenIdProviderConfiguration - Class in swiss.trustbroker.oidc.client.dto
-
Configuration read from OIDC metadata.
- OpenIdProviderConfiguration() - Constructor for class swiss.trustbroker.oidc.client.dto.OpenIdProviderConfiguration
- OpenIdProviderConfiguration(String, URI, URI, URI, URI, JWKSet, ClientAuthenticationMethods, String) - Constructor for class swiss.trustbroker.oidc.client.dto.OpenIdProviderConfiguration
- OpenIdProviderConfiguration.OpenIdProviderConfigurationBuilder - Class in swiss.trustbroker.oidc.client.dto
- OpenSaml5AuthenticationProvider - Class in swiss.trustbroker.oidc.opensaml5
-
Implementation of
AuthenticationProviderfor SAML authentications when receiving aResponseobject containing anAssertion. - OpenSaml5AuthenticationProvider() - Constructor for class swiss.trustbroker.oidc.opensaml5.OpenSaml5AuthenticationProvider
-
Creates an
OpenSaml5AuthenticationProvider - OpenSaml5AuthenticationProvider.AssertionToken - Class in swiss.trustbroker.oidc.opensaml5
-
A tuple containing an OpenSAML
Assertionand its associated authentication token. - OpenSaml5AuthenticationProvider.ResponseToken - Class in swiss.trustbroker.oidc.opensaml5
-
A tuple containing an OpenSAML
Responseand its associated authentication token. - OpenSaml5AuthenticationRequestResolver - Class in swiss.trustbroker.oidc.opensaml5
-
A strategy for resolving a SAML 2.0 Authentication Request from the
HttpServletRequestusing OpenSAML. - OpenSaml5AuthenticationRequestResolver(RelyingPartyRegistrationRepository) - Constructor for class swiss.trustbroker.oidc.opensaml5.OpenSaml5AuthenticationRequestResolver
-
Construct an
OpenSaml5AuthenticationRequestResolver - OpenSaml5AuthenticationRequestResolver(RelyingPartyRegistrationResolver) - Constructor for class swiss.trustbroker.oidc.opensaml5.OpenSaml5AuthenticationRequestResolver
-
Construct a
OpenSaml5AuthenticationRequestResolver - OpenSaml5AuthenticationRequestResolver.AuthnRequestContext - Class in swiss.trustbroker.oidc.opensaml5
- OpenSaml5AuthenticationTokenConverter - Class in swiss.trustbroker.oidc.opensaml5
-
An
AuthenticationConverterthat generates aSaml2AuthenticationTokenappropriate for authenticated a SAML 2.0 Assertion against anAuthenticationManager. - OpenSaml5AuthenticationTokenConverter(RelyingPartyRegistrationRepository) - Constructor for class swiss.trustbroker.oidc.opensaml5.OpenSaml5AuthenticationTokenConverter
-
Constructs a
OpenSaml5AuthenticationTokenConvertergiven a repository forRelyingPartyRegistrations - OperationalUtil - Class in swiss.trustbroker.homerealmdiscovery.util
- OpsAuditConfig - Class in swiss.trustbroker.config.dto
-
CID (client identifying data) auditing configuration.
- OpsAuditConfig() - Constructor for class swiss.trustbroker.config.dto.OpsAuditConfig
- OpsAuditLogger - Class in swiss.trustbroker.audit.service
-
Audit logger for CID free logging.
- OpsAuditLogger(TrustBrokerProperties) - Constructor for class swiss.trustbroker.audit.service.OpsAuditLogger
- OPTIONAL - Enum constant in enum class swiss.trustbroker.federation.xmlconfig.FingerprintCheck
-
Mismatching fingerprint is accepted.
- OPTIONAL_ATTRIB_NAME - Static variable in interface swiss.trustbroker.wstrustclient.xml.ClaimType
- order(Integer) - Method in class swiss.trustbroker.config.dto.Banner.BannerBuilder
-
Banner display order for global banners or if no order is defined for the CP.
- order(Integer) - Method in class swiss.trustbroker.federation.xmlconfig.AcClass.AcClassBuilder
-
ACClass QoA order.
- order(Integer) - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsProvider.ClaimsProviderBuilder
-
Indicates the order of display in the UI.
- order(Integer) - Method in class swiss.trustbroker.federation.xmlconfig.IdmQuery.IdmQueryBuilder
-
The order of the execution of the query.
- order(Integer) - Method in class swiss.trustbroker.saml.dto.UiBanner.UiBannerBuilder
-
Order of the banner.
- order(Integer) - Method in class swiss.trustbroker.saml.dto.UiObject.UiObjectBuilder
-
order allows to compose multiple tiles in a flexible manner.
- organizationSelector(String) - Method in class swiss.trustbroker.federation.xmlconfig.ProfileSelection.ProfileSelectionBuilder
-
Attribute used as selector (kind of unique Secondary Key) for organization selection.
- ORIGINAL - Enum constant in enum class swiss.trustbroker.federation.xmlconfig.Multivalued
-
Unwrap single element list.
- originalAttributes(List<String>) - Method in class swiss.trustbroker.config.dto.AccessRequestConfig.AccessRequestConfigBuilder
-
Special attributes that might be marked as coming from the original issuer i.e.
- originalAttributes(Map<Definition, List<String>>) - Method in class swiss.trustbroker.saml.dto.CpResponse.CpResponseBuilder
-
Copy of Attributes before filtering.
- originalIssuer(String) - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsParty.ClaimsPartyBuilder
-
The original issuer is by default consumed as is and not changed in the CP handling of XTB.
- originalNameId(String) - Method in class swiss.trustbroker.saml.dto.CpResponse.CpResponseBuilder
-
CP Response incoming subject name ID used for internal processing.
- originalPropertiesCount(int) - Method in class swiss.trustbroker.saml.dto.CpResponse.CpResponseBuilder
- originalUserDetailsCount(int) - Method in class swiss.trustbroker.saml.dto.CpResponse.CpResponseBuilder
- origins(List<String>) - Method in class swiss.trustbroker.federation.xmlconfig.AcWhitelist.AcWhitelistBuilder
- originSet(Set<String>) - Method in class swiss.trustbroker.federation.xmlconfig.AcWhitelist.AcWhitelistBuilder
- OutboundAuditMapper - Class in swiss.trustbroker.audit.service
- OutboundAuditMapper(TrustBrokerProperties) - Constructor for class swiss.trustbroker.audit.service.OutboundAuditMapper
- outboundMode(ArtifactBindingMode) - Method in class swiss.trustbroker.federation.xmlconfig.ArtifactBinding.ArtifactBindingBuilder
-
Mode for outbound Artifact binding.
- OVERWRITE - Enum constant in enum class swiss.trustbroker.federation.xmlconfig.MultiResultPolicy
-
Overwrite values.
P
- participants(Set<SsoParticipant>) - Method in class swiss.trustbroker.saml.dto.SsoParticipants.SsoParticipantsBuilder
- password(String) - Method in class swiss.trustbroker.config.dto.WsTrustConfig.WsTrustConfigBuilder
-
Keystore password.
- password(String) - Method in class swiss.trustbroker.federation.xmlconfig.SignerKeystore.SignerKeystoreBuilder
-
Password for the store.
- password(String) - Method in class swiss.trustbroker.federation.xmlconfig.SignerTruststore.SignerTruststoreBuilder
-
Password for the store.
- passwordEncoder() - Method in class swiss.trustbroker.oidc.OidcSecurityConfiguration
-
Config secret decoding support.
- path(String) - Method in class swiss.trustbroker.config.dto.CookieProperties.CookiePropertiesBuilder
-
Optional cookie path
- path(String) - Method in class swiss.trustbroker.homerealmdiscovery.dto.CookieConfig.CookieConfigBuilder
- PathReference - Interface in swiss.trustbroker.federation.xmlconfig
-
A base config class that mau contain references relative to its file path.
- PEER - Enum constant in enum class swiss.trustbroker.federation.xmlconfig.EncryptionKeyPlacement
-
EncryptedKeyis placed as peer ofKeyInfo. - penTestingModeEnabled(HttpServletRequest, TrustBrokerProperties) - Static method in class swiss.trustbroker.util.WebSupport
- penTestingScenario(HttpServletRequest, TrustBrokerProperties) - Static method in class swiss.trustbroker.util.WebSupport
- performAccessRequestIfRequired(AccessRequestHttpData, RelyingPartyConfig, SessionState, Runnable) - Method in class swiss.trustbroker.accessrequest.service.NoOpAccessRequestService
- performAccessRequestWithDataRefreshIfRequired(HttpServletRequest, RelyingParty, ClaimsParty, StateData, StateData) - Method in class swiss.trustbroker.saml.service.RelyingPartyService
- performIdmLookups(CpResponse, RelyingParty, boolean, IdmStatusPolicyCallback, List<IdmQueryService>) - Static method in class swiss.trustbroker.homerealmdiscovery.util.RelyingPartyUtil
- persistentCache(Boolean) - Method in class swiss.trustbroker.config.dto.ArtifactResolution.ArtifactResolutionBuilder
-
Persist artifact cache.
- PHONE - Static variable in class swiss.trustbroker.federation.xmlconfig.Scope
- phoneNumber(String) - Method in class swiss.trustbroker.homerealmdiscovery.dto.SupportInfo.SupportInfoBuilder
- pingBackend() - Method in class swiss.trustbroker.monitoring.service.StateCacheHealthIndicator
- pingBackend() - Method in class swiss.trustbroker.monitoring.service.TrustbrokerHealthIndicator
- PolicyDecider - Class in swiss.trustbroker.saml.util
- prefix(String) - Method in class swiss.trustbroker.config.dto.SamlNamespace.SamlNamespaceBuilder
-
Optional prefix added if the namespace is removed.
- prepareRedirectForDeviceInfoAfterHrd(Cookie[], StateData, String) - Method in class swiss.trustbroker.sso.service.SsoService
- prepareRefresh() - Method in class swiss.trustbroker.script.service.ScriptService
- preserve(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.SubjectNameMappings.SubjectNameMappingsBuilder
-
If true, do not overwrite nameId if differing from originalNameId (i.e.
- principal(String) - Method in class swiss.trustbroker.audit.dto.AuditDto.AuditDtoBuilder
- PRIVATE_KEY_JWT - Enum constant in enum class swiss.trustbroker.federation.xmlconfig.ClientAuthenticationMethod
- processAllSamlScripts(String, List<Pair<String, CompiledScript>>, CpResponse, Response, WSTrustObject, List<IdmQuery>) - Method in class swiss.trustbroker.script.service.ScriptService
- processAttribute(XMLObject, Attr) - Method in class swiss.trustbroker.wstrustclient.xml.ClaimTypeUnmarshaller
- processCpAfterIdm(CpResponse, Response, String, String) - Method in class swiss.trustbroker.script.service.ScriptService
- processCpAfterProvisioning(CpResponse, String) - Method in class swiss.trustbroker.script.service.ScriptService
- processCpBeforeIdm(CpResponse, Response, String, String) - Method in class swiss.trustbroker.script.service.ScriptService
- processCpBeforeRequest(String, RpRequest) - Method in class swiss.trustbroker.script.service.ScriptService
- processCpBeforeResponse(CpResponse, Response, String, String) - Method in class swiss.trustbroker.script.service.ScriptService
- processCpOnRequest(String, RequestAbstractType) - Method in class swiss.trustbroker.script.service.ScriptService
- processCpOnResponse(CpResponse, Response, String, String) - Method in class swiss.trustbroker.script.service.ScriptService
- processCpWsTrustOnAssertion(RequestSecurityToken, List<Assertion>, String, String) - Method in class swiss.trustbroker.script.service.ScriptService
- processExpires() - Method in class swiss.trustbroker.oidc.session.TomcatSessionManager
- processHrdSelection(RpRequest) - Method in class swiss.trustbroker.script.service.ScriptService
- processOnMessage() - Method in class swiss.trustbroker.script.service.ScriptService
- processOnRequest(String, RpRequest, RequestAbstractType) - Method in class swiss.trustbroker.script.service.ScriptService
- processOnResponse(String, CpResponse, Response, WSTrustObject, List<IdmQuery>) - Method in class swiss.trustbroker.script.service.ScriptService
- processRequestValidation(RpRequest, RequestAbstractType) - Method in class swiss.trustbroker.script.service.ScriptService
- processRpAfterIdm(CpResponse, Response, String, String) - Method in class swiss.trustbroker.script.service.ScriptService
- processRpAfterProvisioning(CpResponse, String, String) - Method in class swiss.trustbroker.script.service.ScriptService
- processRpBeforeIdm(CpResponse, Response, String, String) - Method in class swiss.trustbroker.script.service.ScriptService
- processRpBeforeResponse(CpResponse, Response, String, String) - Method in class swiss.trustbroker.script.service.ScriptService
- processRpOnResponse(CpResponse, Response, String, String) - Method in class swiss.trustbroker.script.service.ScriptService
- processRpOnToken(CpResponse, String, String) - Method in class swiss.trustbroker.script.service.ScriptService
- processRpOnUserInfo(CpResponse, String, String) - Method in class swiss.trustbroker.script.service.ScriptService
- processRpWsTrustOnAssertion(RequestSecurityToken, List<Assertion>, String, String) - Method in class swiss.trustbroker.script.service.ScriptService
- processValueConversion(String, List<Object>) - Method in class swiss.trustbroker.script.service.ScriptService
- processWsTrustOnResponse(CpResponse, WSTrustObject, String, String) - Method in class swiss.trustbroker.script.service.ScriptService
- profile(String) - Method in class swiss.trustbroker.config.dto.TechUserProperties.TechUserPropertiesBuilder
-
User profile in IDM.
- PROFILE - Static variable in class swiss.trustbroker.federation.xmlconfig.Scope
- PROFILE_SEPARATOR - Static variable in class swiss.trustbroker.profileselection.service.LdapIdentitySelectionService
- profileExtId(String) - Method in class swiss.trustbroker.audit.dto.AuditDto.AuditDtoBuilder
- ProfileRequest - Class in swiss.trustbroker.homerealmdiscovery.dto
- ProfileRequest() - Constructor for class swiss.trustbroker.homerealmdiscovery.dto.ProfileRequest
- ProfileRequest(String, String) - Constructor for class swiss.trustbroker.homerealmdiscovery.dto.ProfileRequest
- profileSelection(ProfileSelection) - Method in class swiss.trustbroker.federation.xmlconfig.RelyingParty.RelyingPartyBuilder
-
Profile selection configuration for this RP.
- ProfileSelection - Class in swiss.trustbroker.federation.xmlconfig
-
Configures the profile selection.
- ProfileSelection() - Constructor for class swiss.trustbroker.federation.xmlconfig.ProfileSelection
- ProfileSelection(Boolean, String, Boolean, Boolean, Boolean, Boolean, Boolean, Boolean, Boolean, String, String, String, List<String>, List<String>, ProfileSelectionMode) - Constructor for class swiss.trustbroker.federation.xmlconfig.ProfileSelection
-
Creates a new
ProfileSelectioninstance. - ProfileSelection.ProfileSelectionBuilder - Class in swiss.trustbroker.federation.xmlconfig
- ProfileSelectionConfig - Class in swiss.trustbroker.config.dto
-
Profile selection configuration.
- ProfileSelectionConfig() - Constructor for class swiss.trustbroker.config.dto.ProfileSelectionConfig
- ProfileSelectionConfig(boolean, Map<String, Object>) - Constructor for class swiss.trustbroker.config.dto.ProfileSelectionConfig
-
Creates a new
ProfileSelectionConfiginstance. - ProfileSelectionConfig.ProfileSelectionConfigBuilder - Class in swiss.trustbroker.config.dto
- ProfileSelectionController - Class in swiss.trustbroker.profileselection.controller
-
Controller for profile selection services.
- ProfileSelectionController(ProfileSelectionServiceFactory, RelyingPartyService, RelyingPartySetupService, StateCacheService, List<OutputService>, RedirectOutputService) - Constructor for class swiss.trustbroker.profileselection.controller.ProfileSelectionController
- ProfileSelectionMode - Enum Class in swiss.trustbroker.federation.xmlconfig
-
Mode for profile selection.
- ProfileSelectionServiceFactory - Class in swiss.trustbroker.profileselection.service
- ProfileSelectionServiceFactory(Map<String, ProfileSelectionService>, ProfileSelectionService) - Constructor for class swiss.trustbroker.profileselection.service.ProfileSelectionServiceFactory
- profileSelector(String) - Method in class swiss.trustbroker.federation.xmlconfig.ProfileSelection.ProfileSelectionBuilder
-
Attribute used as selector (kind of unique Primary Key) for profile selection.
- properties(Map<Definition, List<String>>) - Method in class swiss.trustbroker.saml.dto.CpResponse.CpResponseBuilder
-
Properties contain computed values that can be sent as RP attributes based on incoming CP attributes and userdetails.
- propertiesSelection(AttributesSelection) - Method in class swiss.trustbroker.federation.xmlconfig.RelyingParty.RelyingPartyBuilder
-
Properties selection identifies the computed/derived attributes passed through to the RP.
- PropertyConfigScheduler - Class in swiss.trustbroker.config
- PropertyConfigScheduler(AppConfigService, GitService, TrustBrokerProperties, GlobalExceptionHandler) - Constructor for class swiss.trustbroker.config.PropertyConfigScheduler
- PropertyUtil - Class in swiss.trustbroker.util
-
Java bean property utilities.
- PROPS - Enum constant in enum class swiss.trustbroker.saml.dto.ClaimSource
- protocol(SloProtocol) - Method in class swiss.trustbroker.federation.xmlconfig.SloResponse.SloResponseBuilder
-
The protocol for which this entry applies.
- PROTOCOL_OPENIDCONNECT - Static variable in class swiss.trustbroker.util.ApiSupport
- protocolEndpoints(ProtocolEndpoints) - Method in class swiss.trustbroker.federation.xmlconfig.OidcClient.OidcClientBuilder
-
OpenID endpoints a single CP side OIDC client uses for federated login.
- protocolEndpoints(ProtocolEndpoints) - Method in class swiss.trustbroker.federation.xmlconfig.Saml.SamlBuilder
-
SAML protocol endpoint configuration.
- ProtocolEndpoints - Class in swiss.trustbroker.federation.xmlconfig
-
SAML/OIDC protocol endpoints.
- ProtocolEndpoints() - Constructor for class swiss.trustbroker.federation.xmlconfig.ProtocolEndpoints
- ProtocolEndpoints(String, String, String, String, Integer, String) - Constructor for class swiss.trustbroker.federation.xmlconfig.ProtocolEndpoints
-
Creates a new
ProtocolEndpointsinstance. - ProtocolEndpoints.ProtocolEndpointsBuilder - Class in swiss.trustbroker.federation.xmlconfig
- provision(String) - Method in class swiss.trustbroker.federation.xmlconfig.Definition.DefinitionBuilder
-
Provision this attribute to IDM.
- provision(ProvisioningMode) - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsParty.ClaimsPartyBuilder
-
Enable IDM provisioning based on CP response.
- provisioning(Provisioning) - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsParty.ClaimsPartyBuilder
-
Provisioning configurations for this CP.
- Provisioning - Class in swiss.trustbroker.federation.xmlconfig
-
This class describes the configuration of the provisioning for a CP.
- Provisioning() - Constructor for class swiss.trustbroker.federation.xmlconfig.Provisioning
- Provisioning(ProvisioningMode, List<String>) - Constructor for class swiss.trustbroker.federation.xmlconfig.Provisioning
-
Creates a new
Provisioninginstance. - Provisioning.ProvisioningBuilder - Class in swiss.trustbroker.federation.xmlconfig
- provisioningId(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.Definition.DefinitionBuilder
-
ID attribute for provisioning.
- ProvisioningMode - Enum Class in swiss.trustbroker.federation.xmlconfig
-
Provisioning mode for a claims party.
- proxyUrl(String) - Method in class swiss.trustbroker.config.dto.ArtifactResolution.ArtifactResolutionBuilder
-
Deprecated.Use NetworkConfig.proxyUrl
- proxyUrl(String) - Method in class swiss.trustbroker.config.dto.NetworkConfig.NetworkConfigBuilder
-
Default proxy URL.
- proxyUrl(String) - Method in class swiss.trustbroker.federation.xmlconfig.ProtocolEndpoints.ProtocolEndpointsBuilder
-
Proxy URL for these endpoints that overrides global default.
- PUBLIC_OIDC_CONFIG_PATH - Static variable in class swiss.trustbroker.util.ApiSupport
- PublicClientAuthenticationToken - Class in swiss.trustbroker.oidc.pkce
- PublicClientRefreshTokenAndTokenExchangeAuthenticationConverter - Class in swiss.trustbroker.oidc.pkce
- PublicClientRefreshTokenAndTokenExchangeAuthenticationConverter() - Constructor for class swiss.trustbroker.oidc.pkce.PublicClientRefreshTokenAndTokenExchangeAuthenticationConverter
- PublicClientRefreshTokenAuthenticationProvider - Class in swiss.trustbroker.oidc.pkce
- PublicClientRefreshTokenAuthenticationProvider(RegisteredClientRepository) - Constructor for class swiss.trustbroker.oidc.pkce.PublicClientRefreshTokenAuthenticationProvider
- putAttributeDefinitionValue(Map<AttributeName, List<String>>, String, String, String, String) - Static method in class swiss.trustbroker.homerealmdiscovery.util.DefinitionUtil
- putAttributeValue(Map<AttributeName, List<String>>, AttributeName, String, String) - Static method in class swiss.trustbroker.homerealmdiscovery.util.DefinitionUtil
- putDefinitionValue(Map<Definition, List<String>>, String, String, String, String) - Static method in class swiss.trustbroker.homerealmdiscovery.util.DefinitionUtil
- putOrRemoveCpAttributeValues(Map<AttributeName, List<String>>, String, String, String, List<String>) - Static method in class swiss.trustbroker.homerealmdiscovery.util.DefinitionUtil
Q
- qoa(Qoa) - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsParty.ClaimsPartyBuilder
-
QoA configurations for this CP.
- qoa(Qoa) - Method in class swiss.trustbroker.federation.xmlconfig.OidcClient.OidcClientBuilder
-
QoAs to use.
- qoa(Qoa) - Method in class swiss.trustbroker.federation.xmlconfig.RelyingParty.RelyingPartyBuilder
-
QoA configurations for this RP.
- Qoa - Class in swiss.trustbroker.federation.xmlconfig
-
Quality of Authentication (QoA) configuration.
- Qoa() - Constructor for class swiss.trustbroker.federation.xmlconfig.Qoa
- Qoa(Boolean, Boolean, Boolean, QoaComparison, Boolean, String, Boolean, String, List<AcClass>) - Constructor for class swiss.trustbroker.federation.xmlconfig.Qoa
-
Creates a new
Qoainstance. - Qoa.QoaBuilder - Class in swiss.trustbroker.federation.xmlconfig
- QoaComparison - Enum Class in swiss.trustbroker.federation.xmlconfig
-
Comparison of Qoa values.
- QoaConfig - Record Class in swiss.trustbroker.mapping.dto
- QoaConfig(Qoa, String) - Constructor for record class swiss.trustbroker.mapping.dto.QoaConfig
-
Creates an instance of a
QoaConfigrecord class. - QoaMappingService - Class in swiss.trustbroker.mapping.service
-
Service for mapping and handling Qoa values from/to RP and CP.
- QoaMappingService(TrustBrokerProperties, RelyingPartyDefinitions) - Constructor for class swiss.trustbroker.mapping.service.QoaMappingService
- QoaMappingUtil - Class in swiss.trustbroker.mapping.util
-
Mostly internal helper for QoaMappingService.
- QoaSpec - Record Class in swiss.trustbroker.mapping.dto
- QoaSpec(QoaComparison, List<String>) - Constructor for record class swiss.trustbroker.mapping.dto.QoaSpec
-
Creates an instance of a
QoaSpecrecord class. - QualityOfAuthenticationConfig - Class in swiss.trustbroker.config.dto
-
Quality of Authentication (QoA) configuration.
- QualityOfAuthenticationConfig() - Constructor for class swiss.trustbroker.config.dto.QualityOfAuthenticationConfig
- QualityOfAuthenticationConfig(String, String, Map<String, Integer>, Map<String, Integer>) - Constructor for class swiss.trustbroker.config.dto.QualityOfAuthenticationConfig
-
Creates a new
QualityOfAuthenticationConfiginstance. - QualityOfAuthenticationConfig.QualityOfAuthenticationConfigBuilder - Class in swiss.trustbroker.config.dto
- queriedStores(Set<String>) - Method in class swiss.trustbroker.saml.dto.CpResponse.CpResponseBuilder
-
Contains the stores of IDM lookups actually executed by the available
IdmQueryServiceimplementations - including those that did not find a result. - queries(List<IdmQuery>) - Method in class swiss.trustbroker.federation.xmlconfig.IdmLookup.IdmLookupBuilder
-
List of queries to be executed.
- QUERY - Enum constant in enum class swiss.trustbroker.federation.xmlconfig.ResponseMode
- querySource(String) - Method in class swiss.trustbroker.audit.dto.AuditDto.ResponseAttributeValue.ResponseAttributeValueBuilder
R
- randomIdGenerator() - Static method in class swiss.trustbroker.sso.service.RandomProvider
- RandomProvider - Class in swiss.trustbroker.sso.service
- RandomProvider() - Constructor for class swiss.trustbroker.sso.service.RandomProvider
- read(String, String) - Method in class swiss.trustbroker.sessioncache.service.ArtifactStorageService
- read(String, String, long) - Method in class swiss.trustbroker.sessioncache.service.ArtifactStorageService
- realm(String) - Method in class swiss.trustbroker.federation.xmlconfig.OidcClient.OidcClientBuilder
-
Optional support to be able to map back /oauth2/authorize
- reap() - Method in class swiss.trustbroker.sessioncache.service.StateCacheService
- reap(String) - Method in class swiss.trustbroker.sessioncache.service.ArtifactStorageService
- reapMaxDelaySec(int) - Method in class swiss.trustbroker.config.dto.StateCacheProperties.StateCachePropertiesBuilder
-
Delay at most 25 sec randomly to allow multiple reapers on the same session DB.
- reapSchedule(String) - Method in class swiss.trustbroker.config.dto.StateCacheProperties.StateCachePropertiesBuilder
-
Use by scheduled job checking for expired sessions and delete them from the session DB StateCache.
- reapWarnThresholdMs(int) - Method in class swiss.trustbroker.config.dto.StateCacheProperties.StateCachePropertiesBuilder
-
Expected reap cycle execution in milliseconds before we start to WARN about bad performance.
- reauthTime(Timestamp) - Method in class swiss.trustbroker.sessioncache.dto.Lifecycle.LifecycleBuilder
- recipient(String) - Method in class swiss.trustbroker.federation.xmlconfig.AuthorizedApplication.AuthorizedApplicationBuilder
-
Overrides the global AccessRequest recipientId.
- recipientId(String) - Method in class swiss.trustbroker.config.dto.AccessRequestConfig.AccessRequestConfigBuilder
-
Global default recipient ID.
- recipientId(String) - Method in class swiss.trustbroker.saml.dto.ResponseParameters.ResponseParametersBuilder
- RECONFIG_URL - Static variable in class swiss.trustbroker.util.ApiSupport
- recycle() - Method in class swiss.trustbroker.oidc.session.TomcatSession
- redirectBindingSignatureWarning(boolean) - Method in class swiss.trustbroker.config.dto.SecurityChecks.SecurityChecksBuilder
-
Deprecated.
- RedirectOutputService - Class in swiss.trustbroker.homerealmdiscovery.service
-
Output redirect in a form suitable for a calling script (XMLHttpRequest/fetch).
- RedirectOutputService(VelocityEngine, TrustBrokerProperties) - Constructor for class swiss.trustbroker.homerealmdiscovery.service.RedirectOutputService
- redirectUris(AcWhitelist) - Method in class swiss.trustbroker.federation.xmlconfig.OidcClient.OidcClientBuilder
-
Permitted redirect URLs for this client.
- redirectUrl() - Method in record class swiss.trustbroker.sso.dto.SloResponseParameters
-
Returns the value of the
redirectUrlrecord component. - redirectUrl(String) - Method in class swiss.trustbroker.federation.xmlconfig.AuthorizedApplication.AuthorizedApplicationBuilder
-
URL to be redirected to after AccessRequest.
- RedirectUrlBuilder - Class in swiss.trustbroker.saml.util
- RedirectUrlBuilder(SignatureContext) - Constructor for class swiss.trustbroker.saml.util.RedirectUrlBuilder
- redirectUrls(List<String>) - Method in class swiss.trustbroker.federation.xmlconfig.AcWhitelist.AcWhitelistBuilder
- redirectUserToClaimsProvider(HttpServletRequest, HttpServletResponse, String, String) - Method in class swiss.trustbroker.homerealmdiscovery.controller.HrdController
-
CP selection handling called by UI (we have provided with the links earlier) Updates the relay state cache with the CP's AuthnRequest ID.
- reduceClaimsProviderMappings(HttpServletRequest, String, String, String, List<ClaimsProvider>, TrustBrokerProperties, HrdService) - Static method in class swiss.trustbroker.util.HrdSupport
- reference(String) - Method in class swiss.trustbroker.federation.xmlconfig.HomeName.HomeNameBuilder
-
The homeName is usually consumed from the home name attribute and identifies the CP attribute to consume the CP identity from.
- referer(String) - Method in class swiss.trustbroker.saml.dto.RpRequest.RpRequestBuilder
-
Referer header from the incoming HTTP request.
- referer(String) - Method in class swiss.trustbroker.sessioncache.dto.StateData.StateDataBuilder
- referrer(String) - Method in class swiss.trustbroker.audit.dto.AuditDto.AuditDtoBuilder
- REFERRER_POLICY - Static variable in class swiss.trustbroker.util.HeaderBuilder
- referrerPolicy() - Method in class swiss.trustbroker.util.HeaderBuilder
- refresh() - Method in class swiss.trustbroker.config.AppConfigService
- REFRESH_TOKEN - Enum constant in enum class swiss.trustbroker.federation.xmlconfig.AuthorizationGrantType
- refreshConfigurations() - Method in class swiss.trustbroker.oidc.cache.service.OidcMetadataCacheService
- refreshLastRequest(String) - Method in class swiss.trustbroker.oidc.CustomSessionRegistry
- refreshTokenTimeToLiveMin(Integer) - Method in class swiss.trustbroker.federation.xmlconfig.OidcSecurityPolicies.OidcSecurityPoliciesBuilder
-
Overrides tokenTimeToLiveMin for the refresh token.
- registeredClient(RegisteredClient) - Method in class swiss.trustbroker.federation.xmlconfig.OidcClient.OidcClientBuilder
- registerNewSession(String, Object) - Method in class swiss.trustbroker.oidc.CustomSessionRegistry
- registerObjectProvider() - Static method in class swiss.trustbroker.wstrustclient.xml.ClaimTypeImpl
- reInit() - Method in class swiss.trustbroker.sessioncache.dto.StateData
- rejectRequestIfQoaConfMissing(Qoa, boolean, String) - Static method in class swiss.trustbroker.mapping.util.QoaMappingUtil
- relativeUrl(String) - Method in class swiss.trustbroker.util.ApiSupport
- relayState(String) - Method in class swiss.trustbroker.saml.dto.ResponseData.ResponseDataBuilder
- relayState(String) - Method in class swiss.trustbroker.sessioncache.dto.StateData.StateDataBuilder
- reloadIdmData(RelyingParty, StateData) - Method in class swiss.trustbroker.saml.service.RelyingPartyService
- reLogin(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.Flow.FlowBuilder
-
Show error page including re-login button (triggers another login).
- RELOGIN_FLAG - Static variable in class swiss.trustbroker.federation.xmlconfig.Flow
- relyingParties(List<ConfigElementStatus>) - Method in class swiss.trustbroker.federation.dto.ConfigStatusData.ConfigStatusDataBuilder
- relyingParties(List<RelyingParty>) - Method in class swiss.trustbroker.federation.xmlconfig.RelyingPartySetup.RelyingPartySetupBuilder
-
List of RPs.
- RelyingParty - Class in swiss.trustbroker.federation.xmlconfig
-
This class describes the configuration of a relying party (RP).
- RelyingParty() - Constructor for class swiss.trustbroker.federation.xmlconfig.RelyingParty
- RelyingParty(String, String, FeatureEnum, String, String, String, String, String, AcWhitelist, Certificates, SecurityPolicies, Oidc, Saml, WsTrust, AnnouncementRpConfig, Sso, ClaimsProviderMappings, SubjectNameMappings, Qoa, FlowPolicies, AccessRequest, AttributesSelection, ConstAttributes, IdmLookup, AttributesSelection, AttributesSelection, ProfileSelection, Scripts, List<Credential>, Credential, Credential, List<Credential>) - Constructor for class swiss.trustbroker.federation.xmlconfig.RelyingParty
-
Deprecated.replaced with ClaimsSelection
- RelyingParty(RelyingParty.RelyingPartyBuilder<?, ?>) - Constructor for class swiss.trustbroker.federation.xmlconfig.RelyingParty
- RelyingParty.RelyingPartyBuilder<C,
B> - Class in swiss.trustbroker.federation.xmlconfig - relyingPartyAlias(String) - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsProvider.ClaimsProviderBuilder
-
By providing a relying party ID on the HRD declaration, it's not necessary anymore to copy and paste entire RP definition files just to be able to automatically selecting an RP without showing a HRD selection screen.
- RelyingPartyBuilder() - Constructor for class swiss.trustbroker.federation.xmlconfig.RelyingParty.RelyingPartyBuilder
- RelyingPartyDefinitions - Class in swiss.trustbroker.config.dto
-
Relying party configuration - internal model.
- RelyingPartyDefinitions() - Constructor for class swiss.trustbroker.config.dto.RelyingPartyDefinitions
- RelyingPartyDefinitions(ClaimsProviderDefinitions, RelyingPartySetup, ClaimsProviderSetup, SsoGroupSetup, Map<String, Pair<RelyingParty, OidcClient>>, Map<String, Pair<RelyingParty, AuthorizedApplication>>, OidcIdpCredential) - Constructor for class swiss.trustbroker.config.dto.RelyingPartyDefinitions
- RelyingPartyDefinitions.RelyingPartyDefinitionsBuilder - Class in swiss.trustbroker.config.dto
- RelyingPartyService - Class in swiss.trustbroker.saml.service
- RelyingPartyService(StateCacheService, TrustBrokerProperties, RelyingPartySetupService, List<IdmQueryService>, List<IdmProvisioningService>, ProfileSelectionServiceFactory, SsoService, AuditService, ScriptService, ApiSupport, AccessRequestService, ResponseFactory, UnknownUserPolicyService, QoaMappingService, ClaimsMapperService, JwtClaimsService) - Constructor for class swiss.trustbroker.saml.service.RelyingPartyService
- relyingPartySetup(RelyingPartySetup) - Method in class swiss.trustbroker.config.dto.RelyingPartyDefinitions.RelyingPartyDefinitionsBuilder
- RelyingPartySetup - Class in swiss.trustbroker.federation.xmlconfig
-
Defines relying parties (RPs).
- RelyingPartySetup() - Constructor for class swiss.trustbroker.federation.xmlconfig.RelyingPartySetup
- RelyingPartySetup(List<RelyingParty>, String, List<RelyingParty>) - Constructor for class swiss.trustbroker.federation.xmlconfig.RelyingPartySetup
-
Creates a new
RelyingPartySetupinstance. - RelyingPartySetup.RelyingPartySetupBuilder - Class in swiss.trustbroker.federation.xmlconfig
- RelyingPartySetupService - Class in swiss.trustbroker.homerealmdiscovery.service
- RelyingPartySetupService(RelyingPartyDefinitions, TrustBrokerProperties, List<IdmQueryService>) - Constructor for class swiss.trustbroker.homerealmdiscovery.service.RelyingPartySetupService
- RelyingPartySetupUtil - Class in swiss.trustbroker.homerealmdiscovery.util
- RelyingPartyUtil - Class in swiss.trustbroker.homerealmdiscovery.util
- rememberAcrValues(HttpServletRequest) - Static method in class swiss.trustbroker.oidc.session.OidcSessionSupport
- remove(Session, boolean) - Method in class swiss.trustbroker.oidc.session.TomcatSessionManager
- removeAttribute(String) - Method in class swiss.trustbroker.oidc.session.TomcatSession
- removeAttributes(String) - Method in class swiss.trustbroker.saml.dto.CpResponse
-
Remove CP/IDP claim with name or FQ name.
- removeClaim(String) - Method in class swiss.trustbroker.saml.dto.CpResponse
-
Remove claim.
- removeContext(String) - Method in class swiss.trustbroker.saml.dto.RpRequest
-
Remove internal federation context required during federation.
- removeContextClass(String) - Method in class swiss.trustbroker.saml.dto.RpRequest
- removeFeatureCondition(String) - Method in class swiss.trustbroker.saml.dto.ResponseStatus
-
Script hook: Remove single feature condition.
- removeProperty(String) - Method in class swiss.trustbroker.saml.dto.CpResponse
-
Script hook use: Remove entry by name or FQ name.
- removeSessionInformation(String) - Method in class swiss.trustbroker.oidc.CustomSessionRegistry
- removeUserDetails(String) - Method in class swiss.trustbroker.saml.dto.CpResponse
-
Script hook use: Remove entry by name or FQ name.
- removeUserDetails(String, String) - Method in class swiss.trustbroker.saml.dto.CpResponse
-
Script hook use: Remove entry by name or FQ name from the optional source.
- renderSkinnyHrdPage(List<UiObject>, String, HttpServletResponse) - Method in class swiss.trustbroker.saml.service.SkinnyHrdService
- renderUi(String, String, String, HttpServletRequest, String, StateData) - Method in class swiss.trustbroker.saml.service.AssertionConsumerService
- renew(boolean) - Method in class swiss.trustbroker.saml.util.AssertionValidator.ExpectedAssertionValues.ExpectedAssertionValuesBuilder
- RENEW - Enum constant in enum class swiss.trustbroker.federation.xmlconfig.WsTrustBinding
-
WS-Trust RST RENEW.
- RENEW_TOLERANCE_NOT_AFTER_SEC - Static variable in class swiss.trustbroker.config.dto.SecurityChecks
- renewEnabled(boolean) - Method in class swiss.trustbroker.config.dto.WsTrustConfig.WsTrustConfigBuilder
-
Deprecated.use bindings
- renewNotOnOrAfterToleranceRenewSec(long) - Method in class swiss.trustbroker.config.dto.SecurityChecks.SecurityChecksBuilder
-
Duration after expiration of an assertion for which WS-Trust RENEW request is accepted.
- renewRequireSignedRequests(boolean) - Method in class swiss.trustbroker.config.dto.WsTrustConfig.WsTrustConfigBuilder
-
Require signed SOAP requests for WS-Trust RENEW.
- renewRequiresSecurityToken(boolean) - Method in class swiss.trustbroker.config.dto.WsTrustConfig.WsTrustConfigBuilder
-
RENEW request requires a valid security token.
- renewRequiresSsoSession(boolean) - Method in class swiss.trustbroker.config.dto.WsTrustConfig.WsTrustConfigBuilder
-
RENEW request requires a valid SSO session.
- replaceAttributeValuesFromSource(Map<AttributeName, List<String>>, String, String, List<String>, String) - Static method in class swiss.trustbroker.homerealmdiscovery.util.DefinitionUtil
- replaceInbound(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.AcClass.AcClassBuilder
-
Replace inbound Qoa from RP request.
- replaceInbound(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.Qoa.QoaBuilder
-
Replace incoming Qoa from the request Only applied on RP side
Default: false - replaceInboundQoas() - Method in class swiss.trustbroker.federation.xmlconfig.Qoa
- replicateRelyingPartiesByHrdAlias(List<RelyingParty>, Set<String>) - Static method in class swiss.trustbroker.homerealmdiscovery.util.ClaimsProviderUtil
- requestBinding(SamlBinding) - Method in class swiss.trustbroker.sessioncache.dto.StateData.StateDataBuilder
- REQUESTED - Enum constant in enum class swiss.trustbroker.sessioncache.dto.AccessRequestState
- requestedResponseBinding(SamlBinding) - Method in class swiss.trustbroker.sessioncache.dto.StateData.StateDataBuilder
- requestEnterpriseIdp(ResponseData<Response>) - Method in class swiss.trustbroker.saml.service.AssertionConsumerService
- requestFromTestApplication(HttpServletRequest, TrustBrokerProperties) - Static method in class swiss.trustbroker.util.HrdSupport
- requestId(String) - Method in class swiss.trustbroker.saml.dto.RpRequest.RpRequestBuilder
-
ID of the incoming message (e.g.
- requestType(String) - Method in class swiss.trustbroker.wstrustclient.dto.WsTrustRstRequest.WsTrustRstRequestBuilder
- requestUri() - Method in record class swiss.trustbroker.oidc.client.dto.AuthorizationCodeFlowRequest
-
Returns the value of the
requestUrirecord component. - requestUri(String) - Method in class swiss.trustbroker.oidc.client.dto.AuthorizationCodeFlowRequest.AuthorizationCodeFlowRequestBuilder
- requireAudienceRestriction(boolean) - Method in class swiss.trustbroker.config.dto.SecurityChecks.SecurityChecksBuilder
-
Enforce presence and validation of audience restriction for other subject confirmations (e.g.
- requireAudienceRestriction(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.SecurityPolicies.SecurityPoliciesBuilder
-
Overrides global SecurityChecks
- requireAudienceRestrictionForBearerSubjectConfirmation(boolean) - Method in class swiss.trustbroker.config.dto.SecurityChecks.SecurityChecksBuilder
-
Enforce presence and validation of audience restriction for bearer subject confirmations.
- requireAudienceRestrictionForBearerSubjectConfirmation(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.SecurityPolicies.SecurityPoliciesBuilder
-
Overrides global SecurityChecks
- requireAuthorizationConsent(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.OidcSecurityPolicies.OidcSecurityPoliciesBuilder
-
Require authorization consent (currently unsupported).
- required(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.Definition.DefinitionBuilder
-
Indicates whether this attribute is mandatory.
- REQUIRED - Enum constant in enum class swiss.trustbroker.federation.xmlconfig.ArtifactBindingMode
-
Outbound: Always use Artifact Binding towards peer.
- requireEncryptedAssertion() - Method in class swiss.trustbroker.federation.xmlconfig.CounterParty
- requireEncryptedAssertion(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.SecurityPolicies.SecurityPoliciesBuilder
-
Allow to disable required encrypted Assertion when the EncryptionKeystore is configured.
- requireIdTokenEncryption(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.OidcSecurityPolicies.OidcSecurityPoliciesBuilder
-
Allow to enable Encrypted IdToken JWT Singing for Rp.
- requireOpaqueAccessToken(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.OidcSecurityPolicies.OidcSecurityPoliciesBuilder
-
Allow to enable Opaque AccessToken for Rp.
- requireOpaqueRefreshToken(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.OidcSecurityPolicies.OidcSecurityPoliciesBuilder
-
Allow to enable Opaque RefreshToken for Rp.
- requireOriginalIssuerClaims(List<String>) - Method in class swiss.trustbroker.saml.dto.ResponseParameters.ResponseParametersBuilder
- requireProofKey(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.OidcSecurityPolicies.OidcSecurityPoliciesBuilder
-
Require Proof Key for Code Exchange (PKCE).
- requireSignedArtifactResolve(boolean) - Method in class swiss.trustbroker.config.dto.SecurityChecks.SecurityChecksBuilder
-
Reject unsigned ArtifactResolve?
Default: true - requireSignedArtifactResponse(boolean) - Method in class swiss.trustbroker.config.dto.SecurityChecks.SecurityChecksBuilder
-
Reject unsigned ArtifactResponse?
Default: true - requireSignedArtifactResponse(boolean) - Method in class swiss.trustbroker.federation.xmlconfig.CounterParty
- requireSignedArtifactResponse(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.SecurityPolicies.SecurityPoliciesBuilder
-
Flag allows to enforce signed SAML artifact responses from CP required for maximum security to assert integrity of the incoming artifact response message.
- requireSignedAssertion(boolean) - Method in class swiss.trustbroker.config.dto.SecurityChecks.SecurityChecksBuilder
-
Reject unsigned Assertions?
Default: true - requireSignedAuthnRequest() - Method in class swiss.trustbroker.federation.xmlconfig.CounterParty
- requireSignedAuthnRequest(boolean) - Method in class swiss.trustbroker.config.dto.SecurityChecks.SecurityChecksBuilder
-
Reject unsigned AuthnRequest?
Default: true - requireSignedAuthnRequest(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.SecurityPolicies.SecurityPoliciesBuilder
-
Allow to disable signature check for incoming SAML AuthnRequests.
- requireSignedAuthnRequestForSsoJoin() - Method in class swiss.trustbroker.federation.xmlconfig.CounterParty
- requireSignedAuthnRequestForSsoJoin(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.SecurityPolicies.SecurityPoliciesBuilder
-
Require signed SAML AuthnRequests to join an SSO session.
- requireSignedLogoutNotificationRequest() - Method in class swiss.trustbroker.federation.xmlconfig.CounterParty
- requireSignedLogoutNotificationRequest(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.SecurityPolicies.SecurityPoliciesBuilder
-
Allow to disable signature check for outgoing SLO notification LogoutRequests.
- requireSignedLogoutRequest() - Method in class swiss.trustbroker.federation.xmlconfig.CounterParty
- requireSignedLogoutRequest(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.SecurityPolicies.SecurityPoliciesBuilder
-
Allow to disable signature check for incoming LogoutRequests.
- requireSignedResponse(boolean) - Method in class swiss.trustbroker.config.dto.SecurityChecks.SecurityChecksBuilder
-
Reject unsigned Response?
Default: true - requireSignedResponse(boolean) - Method in class swiss.trustbroker.federation.xmlconfig.CounterParty
- requireSignedResponse(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.SecurityPolicies.SecurityPoliciesBuilder
-
Flag allows to enforce signed SAML responses from CP required for maximum security to assert integrity of the incoming message and assertion.
- requireSubjectConfirmation(boolean) - Method in class swiss.trustbroker.config.dto.SecurityChecks.SecurityChecksBuilder
-
In WS-Trust RST case we per default require a valid subject confirmation.
- requireUserInfoResponseEncryption(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.OidcSecurityPolicies.OidcSecurityPoliciesBuilder
-
Allow to enable Encrypted UserInfo response
Default: false - resetErrorPageStatus() - Method in class swiss.trustbroker.saml.dto.ResponseStatus
-
Reset error page passed as flow policy to abort.
- resolve(HttpServletRequest) - Method in class swiss.trustbroker.oidc.CustomBearerTokenResolver
- resolve(HttpServletRequest) - Method in class swiss.trustbroker.oidc.opensaml5.OpenSaml5AuthenticationRequestResolver
- resolveArtifact(HttpServletRequest, HttpServletResponse) - Method in class swiss.trustbroker.saml.controller.AppController
- resolveArtifact(HttpServletRequest, HttpServletResponse) - Method in class swiss.trustbroker.saml.service.ArtifactResolutionService
- resolvedCertPath(String) - Method in class swiss.trustbroker.federation.xmlconfig.SignerStore.SignerStoreBuilder
- resolvedKeyPath(String) - Method in class swiss.trustbroker.federation.xmlconfig.SignerStore.SignerStoreBuilder
- resolveErrorView(HttpServletRequest, HttpStatus, Map<String, Object>) - Method in class swiss.trustbroker.exception.AppErrorViewResolver
- resourceList(Set<String>) - Method in class swiss.trustbroker.federation.xmlconfig.Resources.ResourcesBuilder
-
List of resources.
- resources(Resources) - Method in class swiss.trustbroker.federation.xmlconfig.OidcClient.OidcClientBuilder
-
OIDC allowed resources in TokenExchange.
- Resources - Class in swiss.trustbroker.federation.xmlconfig
-
OIDC client resources.
- Resources() - Constructor for class swiss.trustbroker.federation.xmlconfig.Resources
- Resources(Set<String>) - Constructor for class swiss.trustbroker.federation.xmlconfig.Resources
-
Creates a new
Resourcesinstance. - Resources.ResourcesBuilder - Class in swiss.trustbroker.federation.xmlconfig
- response(T) - Method in class swiss.trustbroker.saml.dto.ResponseData.ResponseDataBuilder
- RESPONSE - Enum constant in enum class swiss.trustbroker.audit.dto.EventType
- RESPONSE - Enum constant in enum class swiss.trustbroker.federation.xmlconfig.SloMode
-
Configuration for response to the RP initiating the logout.
- RESPONSE - Enum constant in enum class swiss.trustbroker.federation.xmlconfig.SubjectNameScope
-
Use SubjectNameId for SAML response
- RESPONSE_ATTRIBUTES_NAME - Static variable in class swiss.trustbroker.audit.dto.AuditDto
- RESPONSE_NOTIFY_FAIL - Enum constant in enum class swiss.trustbroker.federation.xmlconfig.SloMode
-
Configuration for both RESPONSE and NOTIFY_FAIL
- RESPONSE_NOTIFY_TRY - Enum constant in enum class swiss.trustbroker.federation.xmlconfig.SloMode
-
Configuration for both RESPONSE and NOTIFY_TRY
- responseAttributes(Map<String, AuditDto.ResponseAttributeValues>) - Method in class swiss.trustbroker.audit.dto.AuditDto.AuditDtoBuilder
- ResponseAttributeValues() - Constructor for class swiss.trustbroker.audit.dto.AuditDto.ResponseAttributeValues
- ResponseData<T> - Class in swiss.trustbroker.saml.dto
- ResponseData.ResponseDataBuilder<T> - Class in swiss.trustbroker.saml.dto
- ResponseFactory - Class in swiss.trustbroker.saml.util
- ResponseFactory(RelyingPartySetupService, TrustBrokerProperties, QoaMappingService) - Constructor for class swiss.trustbroker.saml.util.ResponseFactory
- responseId(String) - Method in class swiss.trustbroker.sessioncache.dto.AccessRequestSessionState.AccessRequestSessionStateBuilder
- responseIssuer(String) - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsParty.ClaimsPartyBuilder
-
Override ID as expected issuer of CP response.
- responseMode(ResponseMode) - Method in class swiss.trustbroker.federation.xmlconfig.OidcClient.OidcClientBuilder
-
Response mode to be requested from CP.
- ResponseMode - Enum Class in swiss.trustbroker.federation.xmlconfig
-
OIDC response modes.
- ResponseParameters - Class in swiss.trustbroker.saml.dto
- ResponseParameters.ResponseParametersBuilder - Class in swiss.trustbroker.saml.dto
- responseSent(boolean) - Method in class swiss.trustbroker.sso.service.SsoService.SloState.SloStateBuilder
- ResponseStatus - Class in swiss.trustbroker.saml.dto
-
Base class for CP and RP side status codes.
- ResponseStatus() - Constructor for class swiss.trustbroker.saml.dto.ResponseStatus
- ResponseStatus(ResponseStatus.ResponseStatusBuilder<?, ?>) - Constructor for class swiss.trustbroker.saml.dto.ResponseStatus
- ResponseStatus.ResponseStatusBuilder<C,
B> - Class in swiss.trustbroker.saml.dto - ResponseStatusBuilder() - Constructor for class swiss.trustbroker.saml.dto.ResponseStatus.ResponseStatusBuilder
- RESULT_LABEL - Static variable in class swiss.trustbroker.metrics.service.MetricsService
- results(Map<Definition, List<String>>) - Method in class swiss.trustbroker.saml.dto.CpResponse.CpResponseBuilder
-
The results map contains these SAML attributes: CP SAML Response attributes extracted from the message (PassThrough Claims from CP) Derived attributes computed in ScriptService BeforeIdm hooks (Computed CP claims) IDM attributes retrieved from the IDMService Derived attributes computed in ScriptService AfterIdm hooks (Computed IDM claims) The names in this map are usually fully qualified as represented in the SAML response from the CP.
- retainClaimsProvider(String) - Method in class swiss.trustbroker.saml.dto.RpRequest
- retainContextClass(String) - Method in class swiss.trustbroker.saml.dto.RpRequest
- returnUrl(String) - Method in class swiss.trustbroker.sessioncache.dto.AccessRequestSessionState.AccessRequestSessionStateBuilder
- reuseRefreshTokens(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.OidcSecurityPolicies.OidcSecurityPoliciesBuilder
-
Reuse refresh tokens.
- ROBOTS_TAG - Static variable in class swiss.trustbroker.util.HeaderBuilder
- robotsTag() - Method in class swiss.trustbroker.util.HeaderBuilder
- roles(Set<String>) - Method in class swiss.trustbroker.config.dto.TechUserProperties.TechUserPropertiesBuilder
-
Roles in IDM.
- RotateJwkSource<C> - Class in swiss.trustbroker.oidc
- RotateJwkSource(JwkCacheService, MetricsService) - Constructor for class swiss.trustbroker.oidc.RotateJwkSource
- RP_ISSUER_LABEL - Static variable in class swiss.trustbroker.metrics.service.MetricsService
- rpAuthnRequestId(String) - Method in class swiss.trustbroker.saml.dto.ResponseParameters.ResponseParametersBuilder
- rpClientName(String) - Method in class swiss.trustbroker.saml.dto.ResponseParameters.ResponseParametersBuilder
- rpComparison(QoaComparison) - Method in class swiss.trustbroker.saml.dto.ResponseParameters.ResponseParametersBuilder
- rpContext(Map<String, String>) - Method in class swiss.trustbroker.saml.dto.CpResponse.CpResponseBuilder
-
The HttpServletRequest params, some specific ones: username, Client_Network
- rpContext(Map<String, String>) - Method in class swiss.trustbroker.sessioncache.dto.StateData.StateDataBuilder
- rpContextClasses(List<String>) - Method in class swiss.trustbroker.saml.dto.CpResponse.CpResponseBuilder
-
Incoming context class requirements on RP side.
- rpContextClasses(List<String>) - Method in class swiss.trustbroker.saml.dto.ResponseParameters.ResponseParametersBuilder
- rpDecryptionCredentials(List<Credential>) - Method in class swiss.trustbroker.federation.xmlconfig.RelyingParty.RelyingPartyBuilder
- rpDestination(String) - Method in class swiss.trustbroker.saml.dto.CpResponse.CpResponseBuilder
-
Override SAML Response.Destination on RP side.
- rpEncryptionTrustCredential(Credential) - Method in class swiss.trustbroker.federation.xmlconfig.RelyingParty.RelyingPartyBuilder
- rpId(String) - Method in class swiss.trustbroker.saml.dto.SsoParticipant.SsoParticipantBuilder
- rpIssuer(String) - Method in class swiss.trustbroker.audit.dto.AuditDto.AuditDtoBuilder
- rpIssuer(String) - Method in class swiss.trustbroker.saml.dto.CpResponse.CpResponseBuilder
-
Incoming issuer on RP side.
- rpIssuer(String) - Method in class swiss.trustbroker.saml.dto.RpRequest.RpRequestBuilder
-
Issuer of the incoming SAML request
- rpIssuerId(String) - Method in class swiss.trustbroker.saml.dto.ResponseParameters.ResponseParametersBuilder
- rpIssuerId(String) - Method in class swiss.trustbroker.sessioncache.dto.AccessRequestSessionState.AccessRequestSessionStateBuilder
- rpIssuerId(String) - Method in class swiss.trustbroker.sessioncache.dto.SsoSessionParticipant.SsoSessionParticipantBuilder
- rpRecipient(String) - Method in class swiss.trustbroker.saml.dto.CpResponse.CpResponseBuilder
-
Override SAML SubjectConfirmationData.Recipient on RP side.
- rpReferer(String) - Method in class swiss.trustbroker.saml.dto.CpResponse.CpResponseBuilder
-
Incoming HTTP referrer on RP side.
- rpReferer(String) - Method in class swiss.trustbroker.saml.dto.ResponseParameters.ResponseParametersBuilder
- rpReferrer(String) - Method in class swiss.trustbroker.audit.dto.AuditDto.AuditDtoBuilder
- RpRequest - Class in swiss.trustbroker.saml.dto
-
Class is used to implement the contract towards ScriptService on RP request processing side.
- RpRequest() - Constructor for class swiss.trustbroker.saml.dto.RpRequest
- RpRequest(String, String, String, String, List<String>, Map<String, String>, QoaComparison, boolean, List<ClaimsProvider>, UiObjects) - Constructor for class swiss.trustbroker.saml.dto.RpRequest
-
Creates a new
RpRequestinstance. - RpRequest(RpRequest.RpRequestBuilder<?, ?>) - Constructor for class swiss.trustbroker.saml.dto.RpRequest
- RpRequest.RpRequestBuilder<C,
B> - Class in swiss.trustbroker.saml.dto - RpRequestBuilder() - Constructor for class swiss.trustbroker.saml.dto.RpRequest.RpRequestBuilder
- rpSigner(Credential) - Method in class swiss.trustbroker.federation.xmlconfig.RelyingParty.RelyingPartyBuilder
- rpTrustCredentials(List<Credential>) - Method in class swiss.trustbroker.federation.xmlconfig.RelyingParty.RelyingPartyBuilder
- RST_REQUEST - Enum constant in enum class swiss.trustbroker.audit.dto.EventType
- RST_RESPONSE - Enum constant in enum class swiss.trustbroker.audit.dto.EventType
- rstAddress(String) - Method in class swiss.trustbroker.wstrustclient.dto.WsTrustRstRequest.WsTrustRstRequestBuilder
- run() - Method in class swiss.trustbroker.config.PropertyConfigScheduler
- run() - Method in class swiss.trustbroker.sessioncache.service.ArtifactStorageService.ArtifactCleanupTask
- run(Class<?>, String[]) - Static method in class swiss.trustbroker.ApplicationStart
- runSynchronization() - Method in class swiss.trustbroker.config.PropertyConfigScheduler
S
- sameHrd(RelyingParty) - Method in class swiss.trustbroker.federation.xmlconfig.RelyingParty
- sameSite(String) - Method in class swiss.trustbroker.config.dto.CookieProperties.CookiePropertiesBuilder
-
Optional cookie sameSite flag.
- sameSite(String) - Method in class swiss.trustbroker.homerealmdiscovery.dto.CookieConfig.CookieConfigBuilder
- saml(String) - Method in class swiss.trustbroker.config.dto.ContentSecurityPolicies.ContentSecurityPoliciesBuilder
-
CSP configuration for SAML.
- saml(Saml) - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsParty.ClaimsPartyBuilder
-
SAML protocol configuration for this CP.
- saml(Saml) - Method in class swiss.trustbroker.federation.xmlconfig.RelyingParty.RelyingPartyBuilder
-
SAML protocol configuration for this RP.
- Saml - Class in swiss.trustbroker.federation.xmlconfig
-
SAML configuration for CP/RP.
- Saml() - Constructor for class swiss.trustbroker.federation.xmlconfig.Saml
- Saml(Boolean, Boolean, ProtocolEndpoints, ArtifactBinding, List<SamlBinding>, Encryption, Signature) - Constructor for class swiss.trustbroker.federation.xmlconfig.Saml
-
Creates a new
Samlinstance. - SAML_API - Static variable in class swiss.trustbroker.util.ApiSupport
- SAML_LABEL - Static variable in class swiss.trustbroker.metrics.service.MetricsService
- SAML_METADATA_URL - Static variable in class swiss.trustbroker.util.ApiSupport
- SAML_RESPONSE - Enum constant in enum class swiss.trustbroker.audit.dto.AuditDto.AttributeSource
- Saml.SamlBuilder - Class in swiss.trustbroker.federation.xmlconfig
- SAML2 - Enum constant in enum class swiss.trustbroker.federation.xmlconfig.SloProtocol
-
SAML2 LogoutResponse to an incoming LogoutRequest or notification via SAML2 LogoutRequest.
- Saml2TokenGenerator - Class in swiss.trustbroker.oidc
- Saml2TokenGenerator(RelyingParty, TrustBrokerProperties) - Constructor for class swiss.trustbroker.oidc.Saml2TokenGenerator
- samlCsp() - Method in class swiss.trustbroker.util.HeaderBuilder
- samlMessage(XMLObject) - Method in class swiss.trustbroker.audit.dto.AuditDto.AuditDtoBuilder
- SamlNamespace - Class in swiss.trustbroker.config.dto
-
SAML namespace mapping.
- SamlNamespace() - Constructor for class swiss.trustbroker.config.dto.SamlNamespace
- SamlNamespace(String, String) - Constructor for class swiss.trustbroker.config.dto.SamlNamespace
-
Creates a new
SamlNamespaceinstance. - SamlNamespace.SamlNamespaceBuilder - Class in swiss.trustbroker.config.dto
- SamlOutputService - Class in swiss.trustbroker.saml.service
- SamlOutputService(TrustBrokerProperties, ArtifactCacheService, VelocityEngine) - Constructor for class swiss.trustbroker.saml.service.SamlOutputService
- SamlProperties - Class in swiss.trustbroker.config.dto
-
SAML protocol configuration.
- SamlProperties() - Constructor for class swiss.trustbroker.config.dto.SamlProperties
- SamlProperties(boolean, String, List<SamlNamespace>, ArtifactResolution, List<String>, boolean, List<String>, boolean, boolean, List<String>, boolean, boolean) - Constructor for class swiss.trustbroker.config.dto.SamlProperties
-
Creates a new
SamlPropertiesinstance. - SamlProperties.SamlPropertiesBuilder - Class in swiss.trustbroker.config.dto
- SamlStatusCode - Class in swiss.trustbroker.saml.util
-
Performs mapping between Flow ID, SAML error codes, OIDC error codes, UI error codes.
- SamlValidationUtil - Class in swiss.trustbroker.saml.util
- samlValidator - Variable in class swiss.trustbroker.saml.controller.AbstractSamlController
- SamlValidator - Class in swiss.trustbroker.util
- SamlValidator() - Constructor for class swiss.trustbroker.util.SamlValidator
- save() - Method in class swiss.trustbroker.oidc.session.TomcatSessionManager
- save(RegisteredClient) - Method in class swiss.trustbroker.oidc.ClientConfigInMemoryRepository
- save(OAuth2Authorization) - Method in class swiss.trustbroker.oidc.CustomOAuth2AuthorizationService
- save(StateData, String) - Method in class swiss.trustbroker.sessioncache.service.StateCacheService
- save(StateData, Instant, String) - Method in class swiss.trustbroker.sessioncache.service.StateCacheService
- saveAuthenticationException(HttpServletRequest, AuthenticationException) - Static method in class swiss.trustbroker.oidc.OidcExceptionHelper
- saveJWK(JWK) - Method in class swiss.trustbroker.sessioncache.service.JwkCacheService
- savePenTestScenarioForBackend(OAuth2Authorization) - Method in class swiss.trustbroker.oidc.CustomOAuth2AuthorizationService
- saveState(AuthnRequest, String, boolean, HttpServletRequest, RelyingParty, Optional<StateData>, SamlBinding) - Method in class swiss.trustbroker.saml.service.AssertionConsumerService
- saveStateOnValidationFailure(boolean) - Method in class swiss.trustbroker.config.dto.SecurityChecks.SecurityChecksBuilder
-
Register state in DB even when validation fails.
- saveTokenExchangeSubjectToken(String, String, String, Timestamp, Timestamp) - Method in class swiss.trustbroker.oidc.CustomOAuth2AuthorizationService
- SchemaDefinitionService - Class in swiss.trustbroker.federation.service
-
Service for loading the XSD schemas.
- SchemaDefinitionService() - Constructor for class swiss.trustbroker.federation.service.SchemaDefinitionService
- schemaMigration(boolean) - Method in class swiss.trustbroker.config.dto.StateCacheProperties.StateCachePropertiesBuilder
-
State cache schema migration.
- scope(String) - Method in class swiss.trustbroker.federation.xmlconfig.Definition.DefinitionBuilder
-
To restrict emitting an attribute, the scope can be set as follows: saml: Use only in SAML assertions oidc: Use only in OIDC tokens (oidcName must be set) If not set, the attribute is emitted on all protocols and any requested OIDC scope.
- scope(SubjectNameScope) - Method in class swiss.trustbroker.federation.xmlconfig.SubjectName.SubjectNameBuilder
-
Scope of the SubjectName
- Scope - Class in swiss.trustbroker.federation.xmlconfig
-
OIDC scopes.
- scopeList(List<String>) - Method in class swiss.trustbroker.federation.xmlconfig.Scopes.ScopesBuilder
-
List of scopes.
- scopes() - Method in record class swiss.trustbroker.oidc.client.dto.AuthorizationCodeFlowRequest
-
Returns the value of the
scopesrecord component. - scopes(String) - Method in class swiss.trustbroker.audit.dto.AuditDto.AuditDtoBuilder
- scopes(List<String>) - Method in class swiss.trustbroker.oidc.client.dto.AuthorizationCodeFlowRequest.AuthorizationCodeFlowRequestBuilder
- scopes(Scopes) - Method in class swiss.trustbroker.federation.xmlconfig.OidcClient.OidcClientBuilder
-
OIDC scopes to be used.
- Scopes - Class in swiss.trustbroker.federation.xmlconfig
-
OIDC client scopes.
- Scopes() - Constructor for class swiss.trustbroker.federation.xmlconfig.Scopes
- Scopes(List<String>) - Constructor for class swiss.trustbroker.federation.xmlconfig.Scopes
-
Creates a new
Scopesinstance. - Scopes.ScopesBuilder - Class in swiss.trustbroker.federation.xmlconfig
- Script - Class in swiss.trustbroker.federation.xmlconfig
-
Groovy script hook configuration.
- Script() - Constructor for class swiss.trustbroker.federation.xmlconfig.Script
- Script(String, String) - Constructor for class swiss.trustbroker.federation.xmlconfig.Script
-
Creates a new
Scriptinstance. - SCRIPT - Enum constant in enum class swiss.trustbroker.audit.dto.AuditDto.AttributeSource
- SCRIPT - Enum constant in enum class swiss.trustbroker.federation.xmlconfig.ClaimsMapper
- SCRIPT - Enum constant in enum class swiss.trustbroker.saml.dto.ClaimSource
- Script.ScriptBuilder - Class in swiss.trustbroker.federation.xmlconfig
- scripts(List<Script>) - Method in class swiss.trustbroker.federation.xmlconfig.Scripts.ScriptsBuilder
-
List of scripts.
- scripts(Scripts) - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsParty.ClaimsPartyBuilder
-
Script hooks.
- scripts(Scripts) - Method in class swiss.trustbroker.federation.xmlconfig.RelyingParty.RelyingPartyBuilder
-
Script hooks.
- Scripts - Class in swiss.trustbroker.federation.xmlconfig
-
Groovy script hooks per RP/CP.
- Scripts() - Constructor for class swiss.trustbroker.federation.xmlconfig.Scripts
- Scripts(List<Script>) - Constructor for class swiss.trustbroker.federation.xmlconfig.Scripts
-
Creates a new
Scriptsinstance. - Scripts.ScriptsBuilder - Class in swiss.trustbroker.federation.xmlconfig
- ScriptService - Class in swiss.trustbroker.script.service
-
Service implements flexibility hooks for the XTB Processing Model.
- ScriptService(TrustBrokerProperties, RelyingPartySetupService) - Constructor for class swiss.trustbroker.script.service.ScriptService
- ScriptSource - Class in swiss.trustbroker.script.service
- ScriptSource(String) - Constructor for class swiss.trustbroker.script.service.ScriptSource
- secondaryImages(List<String>) - Method in class swiss.trustbroker.config.dto.Banner.BannerBuilder
-
Optional list of secondary images.
- secondaryImages(List<String>) - Method in class swiss.trustbroker.saml.dto.UiBanner.UiBannerBuilder
-
Secondary images of banner.
- secToken(SecToken) - Method in class swiss.trustbroker.config.dto.IdmConfig.IdmConfigBuilder
-
Security token for accessing the IDM.
- SecToken - Class in swiss.trustbroker.config.dto
-
Security token configuration.
- SecToken() - Constructor for class swiss.trustbroker.config.dto.SecToken
- SecToken(Integer, String, String) - Constructor for class swiss.trustbroker.config.dto.SecToken
-
Creates a new
SecTokeninstance. - SecToken.SecTokenBuilder - Class in swiss.trustbroker.config.dto
- secure(Boolean) - Method in class swiss.trustbroker.config.dto.CookieProperties.CookiePropertiesBuilder
-
Optional cookie secure flag.
- secure(Boolean) - Method in class swiss.trustbroker.homerealmdiscovery.dto.CookieConfig.CookieConfigBuilder
- SecurityChecks - Class in swiss.trustbroker.config.dto
-
Class controls various security checks on a global level.
- SecurityChecks() - Constructor for class swiss.trustbroker.config.dto.SecurityChecks
- SecurityChecks(boolean, boolean, boolean, boolean, boolean, boolean, boolean, boolean, boolean, boolean, String, boolean, boolean, boolean, boolean, boolean, boolean, boolean, boolean, boolean, boolean, boolean, boolean, boolean, boolean, long, long, long, long, long, String, boolean, boolean, boolean, boolean, boolean, boolean, boolean, boolean, boolean, boolean, boolean, boolean, List<String>, boolean, boolean, boolean, boolean) - Constructor for class swiss.trustbroker.config.dto.SecurityChecks
-
Deprecated.
- SecurityChecks.SecurityChecksBuilder - Class in swiss.trustbroker.config.dto
- securityFilterChain(HttpSecurity) - Method in class swiss.trustbroker.oidc.OidcSecurityConfiguration
- securityPolicies(SecurityPolicies) - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsParty.ClaimsPartyBuilder
-
Global security policy overrides for this CP.
- securityPolicies(SecurityPolicies) - Method in class swiss.trustbroker.federation.xmlconfig.RelyingParty.RelyingPartyBuilder
-
Global security policy overrides for this RP.
- SecurityPolicies - Class in swiss.trustbroker.federation.xmlconfig
-
This class allows configuring policies per CP/RP as opposed to SecurityChecks on a global level.
- SecurityPolicies() - Constructor for class swiss.trustbroker.federation.xmlconfig.SecurityPolicies
- SecurityPolicies(Boolean, Boolean, Boolean, Boolean, Boolean, Boolean, Boolean, Boolean, Boolean, Boolean, Integer, Integer, Integer, Boolean, Boolean, Boolean, Boolean, Boolean, Boolean, Boolean, Long, Long, List<String>) - Constructor for class swiss.trustbroker.federation.xmlconfig.SecurityPolicies
-
Deprecated.Transition feature
- SecurityPolicies.SecurityPoliciesBuilder - Class in swiss.trustbroker.federation.xmlconfig
- selectableCpIssuerIds(List<String>) - Method in class swiss.trustbroker.sessioncache.dto.StateData.StateDataBuilder
- selectedProfileExtId(String) - Method in class swiss.trustbroker.sessioncache.dto.StateData.StateDataBuilder
- selectProfile(HttpServletRequest, HttpServletResponse, ProfileRequest) - Method in class swiss.trustbroker.profileselection.controller.ProfileSelectionController
- self() - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsParty.ClaimsPartyBuilder
- self() - Method in class swiss.trustbroker.federation.xmlconfig.CounterParty.CounterPartyBuilder
- self() - Method in class swiss.trustbroker.federation.xmlconfig.RelyingParty.RelyingPartyBuilder
- self() - Method in class swiss.trustbroker.federation.xmlconfig.SignerKeystore.SignerKeystoreBuilder
- self() - Method in class swiss.trustbroker.federation.xmlconfig.SignerStore.SignerStoreBuilder
- self() - Method in class swiss.trustbroker.federation.xmlconfig.SignerTruststore.SignerTruststoreBuilder
- self() - Method in class swiss.trustbroker.saml.dto.CpResponse.CpResponseBuilder
- self() - Method in class swiss.trustbroker.saml.dto.ResponseStatus.ResponseStatusBuilder
- self() - Method in class swiss.trustbroker.saml.dto.RpRequest.RpRequestBuilder
- SELF_SIGNED_TLS_CLIENT_AUTH - Enum constant in enum class swiss.trustbroker.federation.xmlconfig.ClientAuthenticationMethod
- sendAbortedSamlResponseToRp(List<OutputService>, StateData, HttpServletRequest, HttpServletResponse, ResponseStatus, SamlBinding) - Method in class swiss.trustbroker.saml.service.RelyingPartyService
- sendAuthnRequestToCp(HttpServletRequest, HttpServletResponse, StateData, ClaimsParty) - Method in class swiss.trustbroker.saml.service.ClaimsProviderService
-
For SAML: Sends SAML POST response automatically.
- sendAuthnResponseToRpFromState(List<OutputService>, HttpServletRequest, HttpServletResponse, StateData, StateData) - Method in class swiss.trustbroker.saml.service.RelyingPartyService
- sendFailedSamlResponseToRp(List<OutputService>, ResponseData<Response>, HttpServletRequest, HttpServletResponse, CpResponse) - Method in class swiss.trustbroker.saml.service.RelyingPartyService
- sendRedirect(String) - Method in class swiss.trustbroker.oidc.tx.OidcTxResponseWrapper
- sendRequest(T, Credential, String, String, HttpServletResponse, EncodingParameters, DestinationType) - Method in class swiss.trustbroker.saml.service.SamlOutputService
- sendRequestSecurityToken(String, RequestSecurityToken, WebServiceMessageCallback) - Method in class swiss.trustbroker.wstrustclient.service.WsTrustSoapClientBase
- sendResponse(T, Credential, String, String, HttpServletResponse, EncodingParameters, DestinationType) - Method in class swiss.trustbroker.saml.service.SamlOutputService
- sendResponseToRpFromSessionState(List<OutputService>, RelyingParty, StateData, HttpServletRequest, HttpServletResponse) - Method in class swiss.trustbroker.saml.service.RelyingPartyService
- sendResponseWithSamlResponseFromCp(List<OutputService>, ResponseData<Response>, CpResponse, HttpServletRequest, HttpServletResponse) - Method in class swiss.trustbroker.saml.service.RelyingPartyService
- sendResponseWithSamlResponseFromCp(List<OutputService>, ResponseData<Response>, StateData, CpResponse, HttpServletRequest, HttpServletResponse) - Method in class swiss.trustbroker.saml.service.RelyingPartyService
- sendResponseWithSelectedProfile(List<OutputService>, ProfileRequest, HttpServletRequest, HttpServletResponse) - Method in class swiss.trustbroker.saml.service.RelyingPartyService
- sendSamlToCpWithMandatoryIds(HttpServletRequest, HttpServletResponse, StateData, String) - Method in class swiss.trustbroker.saml.service.ClaimsProviderService
- sentTime(Timestamp) - Method in class swiss.trustbroker.sessioncache.dto.AccessRequestSessionState.AccessRequestSessionStateBuilder
- SEPARATOR - Static variable in class swiss.trustbroker.saml.util.ClaimSourceUtil
- serialize(Definition, JsonGenerator, SerializationContext) - Method in class swiss.trustbroker.saml.dto.DefinitionSerializer
- serializeNotifications() - Method in class swiss.trustbroker.federation.xmlconfig.Sso
- serializeNotifications(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.Sso.SsoBuilder
-
Serialize logout notifications in the order of the
SloResponseelements. - serviceUrl(String) - Method in class swiss.trustbroker.config.dto.AnnouncementConfig.AnnouncementConfigBuilder
-
REST endpoint to retrieve current announcements from.
- serviceUrl(String) - Method in class swiss.trustbroker.config.dto.ArtifactResolution.ArtifactResolutionBuilder
-
XTB Artifact Resolution service URL, included in the metadata.
- serviceUrl(String) - Method in class swiss.trustbroker.federation.xmlconfig.AuthorizedApplication.AuthorizedApplicationBuilder
-
Service URL to be called by AccessRequest.
- sessId(String) - Method in class swiss.trustbroker.audit.dto.AuditDto.AuditDtoBuilder
- SESSION_LABEL - Static variable in class swiss.trustbroker.metrics.service.MetricsService
- sessionCookieSameSite(String) - Method in class swiss.trustbroker.federation.xmlconfig.OidcSecurityPolicies.OidcSecurityPoliciesBuilder
-
Controls the OIDC session cookies sameSite flag None, Strict, Dynamic.
- sessionCookieSameSite(String) - Method in class swiss.trustbroker.federation.xmlconfig.SsoGroup.SsoGroupBuilder
-
Controls the SSO session cookie
- sessionIndex(String) - Method in class swiss.trustbroker.saml.dto.ResponseParameters.ResponseParametersBuilder
- sessionIndex(String) - Method in class swiss.trustbroker.sessioncache.dto.StateData.StateDataBuilder
- sessionNotOnOrAfter(Instant) - Method in class swiss.trustbroker.saml.dto.ResponseParameters.ResponseParametersBuilder
- SessionPrincipal - Class in swiss.trustbroker.oidc.session
- SessionPrincipal(String) - Constructor for class swiss.trustbroker.oidc.session.SessionPrincipal
- sessionRegistry() - Method in class swiss.trustbroker.oidc.OidcServerConfiguration
- SessionRequest - Class in swiss.trustbroker.homerealmdiscovery.dto
- SessionRequest() - Constructor for class swiss.trustbroker.homerealmdiscovery.dto.SessionRequest
- sessionRequired(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.SloResponse.SloResponseBuilder
-
Enables OIDC
- sessionTimeToLiveMin(Integer) - Method in class swiss.trustbroker.federation.xmlconfig.OidcSecurityPolicies.OidcSecurityPoliciesBuilder
-
Allow to invalidate OIDC sessions before token TTL, keep for 1 minute to allow login sequence termination.
- SessionTxWrapper - Class in swiss.trustbroker.oidc.tx
-
Wrap transactional Tomcat session loading and session around a servlet API filter chain.
- SessionTxWrapper(TomcatSessionManager, RelyingPartyDefinitions, TrustBrokerProperties, ApiSupport) - Constructor for class swiss.trustbroker.oidc.tx.SessionTxWrapper
- setAcceptSubjectConfirmationMethods(String) - Method in class swiss.trustbroker.config.dto.SecurityChecks
-
Acceptable subject confirmation methods.
- setAccessControlHeaders(HttpServletRequest, HttpServletResponse, CorsPolicies, Set<String>) - Static method in class swiss.trustbroker.util.CorsSupport
- setAccessCount(long) - Method in class swiss.trustbroker.sessioncache.dto.Lifecycle
- setAccessRequest(AccessRequestConfig) - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
Access request configuration.
- setAccessRequest(AccessRequest) - Method in class swiss.trustbroker.federation.xmlconfig.RelyingParty
-
AccessRequest configuration for this RP.
- setAccessRequest(AccessRequestSessionState) - Method in class swiss.trustbroker.sessioncache.dto.StateData
- setAccessRequestConfigurations(Map<String, Pair<RelyingParty, AuthorizedApplication>>) - Method in class swiss.trustbroker.config.dto.RelyingPartyDefinitions
- setAccessTokenTimeToLiveMin(Integer) - Method in class swiss.trustbroker.federation.xmlconfig.OidcSecurityPolicies
-
Overrides tokenTimeToLiveMin for the access token.
- setAccountSource(AccountSource) - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsParty
-
The Account Source consumed by the
IdmProvisioningService - setAcNetUrls(List<URI>) - Method in class swiss.trustbroker.federation.xmlconfig.AcWhitelist
- setAction(String) - Method in class swiss.trustbroker.config.dto.AdminAction
- setAcUrls(List<String>) - Method in class swiss.trustbroker.federation.xmlconfig.AcWhitelist
- setAcWhitelist(AcWhitelist) - Method in class swiss.trustbroker.federation.xmlconfig.RelyingParty
-
Assertion consumer service URL authorized to access XTB federation services for this RP.
- setAddEidStandardClaims(boolean) - Method in class swiss.trustbroker.config.dto.OidcProperties
-
Internal fallback to add eID OIDC standard-claims
- setAdditionalIdmData(Map<Object, Object>) - Method in class swiss.trustbroker.saml.dto.CpResponse
-
Additional exchanged between related API implementations.
- setAddTokenClaims(List<String>) - Method in class swiss.trustbroker.config.dto.OidcProperties
-
Globally customize /token and /userinfo output dropping technical claims (typ=JWT and iss=issuer we keep for now).
- setAddTokenHeader(List<String>) - Method in class swiss.trustbroker.config.dto.OidcProperties
-
Globally customize OIDC header (e.g.
- setAdminSecret(String) - Method in class swiss.trustbroker.config.dto.AdminAction
- setAdminSecret(String) - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
Secret for administrative APIs.
- setAlgorithm(String) - Method in class swiss.trustbroker.config.dto.SecToken
-
Security token algorithm.
- setAlias(String) - Method in class swiss.trustbroker.config.dto.WsTrustConfig
-
Keystore alias.
- setAlias(String) - Method in class swiss.trustbroker.federation.xmlconfig.SignerKeystore
-
If the store contains multiple objects and a specific one shall be used.
- setAlias(String) - Method in class swiss.trustbroker.federation.xmlconfig.SignerTruststore
-
If the store contains multiple objects and a specific one shall be used.
- setAllowClaimsOverride(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.OidcClaimsSources
-
Allow overriding claims by sources in the given order.
- setAllowedClientIpRegex(String) - Method in class swiss.trustbroker.config.dto.WsTrustConfig
-
Regex of client IPs allowed (using
X-Forwarded-ForHTTP header). - setAllowedClientIps(List<String>) - Method in class swiss.trustbroker.config.dto.Support
-
List of IP regexp rules matched against the IP address received from perimeter or socket e.g.
- setAllowedHeaders(List<String>) - Method in class swiss.trustbroker.config.dto.CorsPolicies
-
Headers permitted.
- setAllowedMethods(List<String>) - Method in class swiss.trustbroker.config.dto.CorsPolicies
-
HTTP methods permitted.
- setAllowedNetworks(String) - Method in class swiss.trustbroker.config.dto.Support
-
Network header if present checked against the configured regexp e.g.
- setAllowedNetworks(List<String>) - Method in class swiss.trustbroker.config.dto.WsTrustConfig
-
List of client networks allowed (using
trustbroker.config.network.networkHeaderHTTP header). - setAllowedOrigins(List<String>) - Method in class swiss.trustbroker.config.dto.CorsPolicies
-
Origins permitted.
- setAllowedSignatureAlgorithms(List<String>) - Method in class swiss.trustbroker.config.dto.SecurityChecks
-
List of allowed message signature algorithms.
- setAllowedSignatureAlgorithms(List<String>) - Method in class swiss.trustbroker.federation.xmlconfig.SecurityPolicies
-
List of allowed message signature algorithms.
- setAllowFormBearerToken(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.OidcSecurityPolicies
-
Allow access_token in form body
Default: false - setAllowPrivateNetworkAccess(AllowPrivateNetworkAccess) - Method in class swiss.trustbroker.config.dto.CorsPolicies
-
Private network access permitted.
- setAllowPublicClientTokenExchange(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.OidcSecurityPolicies
-
Allow Token Exchange with Public Client
Default: false - setAllowSubjectOverride(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.OidcClaimsSources
-
Allow overriding subject by sources in the given order.
- setAltName(String) - Method in class swiss.trustbroker.config.dto.AttributeProperties
-
Known external attributes we just document here - used when we cannot use namespaceUri due to semantics.
- setAltName(String) - Method in class swiss.trustbroker.federation.xmlconfig.Definition
-
Known external attributes we just document here - used when we cannot use namespaceUri due to semantics.
- setAnnouncement(AnnouncementRpConfig) - Method in class swiss.trustbroker.federation.xmlconfig.RelyingParty
-
Announcement configuration for this RP.
- setAnnouncementCookie(CookieProperties) - Method in class swiss.trustbroker.config.dto.GuiProperties
-
XTB can (via a plugin) support announcements to communicate with the federating user.
- setAnnouncementCookie(CookieConfig) - Method in class swiss.trustbroker.homerealmdiscovery.dto.GuiConfig
- setAnnouncements(AnnouncementConfig) - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
Announcement configuration.
- setAnnouncementUrls(List<String>) - Method in class swiss.trustbroker.federation.xmlconfig.AnnouncementRpConfig
-
URLs for the announcement.
- setAppContinue(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.Flow
-
Show error page including continue to application button (send SAML error on to application).
- setAppFilter(String) - Method in class swiss.trustbroker.federation.xmlconfig.IdmQuery
-
Application as filtering parameter for the IDM.
- setApplicationName(String) - Method in class swiss.trustbroker.audit.dto.AuditDto
- setApplicationName(String) - Method in class swiss.trustbroker.federation.xmlconfig.RelyingParty
-
If the SAML ProviderName or OIDC client_id are wrong or missing, a relying party can be configured with a global ApplicationName used for AccessRequest ProfileSelection or AnnouncementService to select the matching data items.
- setApplicationName(String) - Method in class swiss.trustbroker.saml.dto.CpResponse
-
RP/OIDC context sending 'SAML clientId' in ProviderName.
- setApplicationName(String) - Method in class swiss.trustbroker.saml.dto.RpRequest
-
Application name e.g.
- setApplicationName(String) - Method in class swiss.trustbroker.sessioncache.dto.StateData
- setApplicationNames(List<String>) - Method in class swiss.trustbroker.config.dto.AnnouncementConfig
-
A list of application names: Global announcements are shown to all users on every federated login CP related announcements as well, but they can also lead to disabling the HRD tile when the CP 'application' is marked as unavailable.
- setApplUrl(String) - Method in class swiss.trustbroker.federation.xmlconfig.AuthorizedApplication
-
If configured the value is sent as appUrl instead of sending app=name in the INTERACTIVE AccessRequest.
- setAppRedirectUrl(String) - Method in class swiss.trustbroker.federation.xmlconfig.Flow
-
Redirect to (application-specific) URL instead of showing an error page.
- setAppUrl(String) - Method in class swiss.trustbroker.federation.xmlconfig.Flow
-
Show a link to further information on the error page (general error information on the application or specific to this error code).
- setAppUrl(String) - Method in class swiss.trustbroker.homerealmdiscovery.dto.SupportInfo
- setArDurationSecs(Long) - Method in class swiss.trustbroker.audit.dto.AuditDto
- setArMode(String) - Method in class swiss.trustbroker.audit.dto.AuditDto
- setArResponseId(String) - Method in class swiss.trustbroker.audit.dto.AuditDto
- setArReturnUrl(String) - Method in class swiss.trustbroker.audit.dto.AuditDto
- setArState(String) - Method in class swiss.trustbroker.audit.dto.AuditDto
- setArtifactBinding(ArtifactBinding) - Method in class swiss.trustbroker.federation.xmlconfig.Saml
-
SAML Artifact Binding configuration
- setArtifactId(String) - Method in class swiss.trustbroker.sessioncache.dto.ArtifactCacheEntity
- setArtifactLifetimeSecs(int) - Method in class swiss.trustbroker.config.dto.ArtifactResolution
-
Lifetime of artifacts in cache in seconds.
- setArtifactReapIntervalSecs(int) - Method in class swiss.trustbroker.config.dto.ArtifactResolution
-
Artifact cache reap interval in seconds.
- setArtifactResolution(ArtifactResolution) - Method in class swiss.trustbroker.config.dto.SamlProperties
-
SAML Artifact Resolution configuration.
- setArtifactResolutionIndex(Integer) - Method in class swiss.trustbroker.federation.xmlconfig.ProtocolEndpoints
-
SAML Artifact Resolution Protocol index.
- setArtifactResolutionKeystore(SignerKeystore) - Method in class swiss.trustbroker.federation.xmlconfig.Certificates
-
Deprecated.Use backendKeystore
- setArtifactResolutionProxyUrl(String) - Method in class swiss.trustbroker.federation.xmlconfig.ProtocolEndpoints
-
Deprecated, for removal: This API element is subject to removal in a future version.Use proxyUrl
- setArtifactResolutionTruststore(SignerTruststore) - Method in class swiss.trustbroker.federation.xmlconfig.Certificates
-
Deprecated.Use backendTruststore
- setArtifactResolutionUrl(String) - Method in class swiss.trustbroker.federation.xmlconfig.ProtocolEndpoints
-
SAML Artifact Resolution Protocol URL.
- setArtifactValue(String) - Method in class swiss.trustbroker.sessioncache.dto.ArtifactCacheEntity
- setAssertion(Assertion) - Method in class swiss.trustbroker.wstrustclient.dto.WsTrustRstRequest
- setAssertionConsumerService(String) - Method in class swiss.trustbroker.config.dto.OidcIdentityProvider
-
Assertion consumer service URL.
- setAssertionConsumerServiceUrl(String) - Method in class swiss.trustbroker.sessioncache.dto.SsoSessionParticipant
- setAssertionConsumerServiceUrl(String) - Method in class swiss.trustbroker.sessioncache.dto.StateData
- setAssertionConsumerUrl(String) - Method in class swiss.trustbroker.audit.dto.AuditDto
- setAssertionElementsDecrypter(Consumer<OpenSaml5AuthenticationProvider.AssertionToken>) - Method in class swiss.trustbroker.oidc.opensaml5.OpenSaml5AuthenticationProvider
-
Set the
Consumerstrategy to use for decrypting elements of a validatedAssertion. - setAssertionValidator(Converter<OpenSaml5AuthenticationProvider.AssertionToken, Saml2ResponseValidatorResult>) - Method in class swiss.trustbroker.oidc.opensaml5.OpenSaml5AuthenticationProvider
-
Set the
Converterto use for validating eachAssertionin the SAML 2.0 Response. - setAttribute(String, Object) - Method in class swiss.trustbroker.oidc.session.TomcatSession
- setAttribute(String, String) - Method in class swiss.trustbroker.saml.dto.CpResponse
-
Set single value attribute.
- setAttribute(String, String, String) - Method in class swiss.trustbroker.saml.dto.CpResponse
-
Set single value attribute with namespace.
- setAttributeDefinitions(List<Definition>) - Method in class swiss.trustbroker.federation.xmlconfig.ConstAttributes
-
List of attributes.
- setAttributeInternal(String, Object) - Method in class swiss.trustbroker.oidc.session.TomcatSession
- setAttributes(String, String, List<String>) - Method in class swiss.trustbroker.saml.dto.CpResponse
-
Set multi-value attribute with namespace.
- setAttributes(String, List<String>) - Method in class swiss.trustbroker.saml.dto.CpResponse
-
Set multi-value attribute.
- setAttributes(Map<String, Object>) - Method in class swiss.trustbroker.config.dto.AccessRequestConfig
-
Custom attributes that might be needed by the implementation.
- setAttributes(Map<String, Object>) - Method in class swiss.trustbroker.config.dto.AnnouncementConfig
-
Custom attributes that might be needed by the implementation.
- setAttributes(Map<String, Object>) - Method in class swiss.trustbroker.config.dto.IdmConfig
-
Custom attributes that might be needed by the implementation.
- setAttributes(Map<String, Object>) - Method in class swiss.trustbroker.config.dto.ProfileSelectionConfig
-
Custom attributes that might be needed by the implementation.
- setAttributes(Map<Definition, List<String>>) - Method in class swiss.trustbroker.saml.dto.CpResponse
-
The attributes map contains these attributes: CP SAML Response attributes extracted from the message Derived attributes computed in ScriptService BeforeIdm hooks The names in this map are usually fully qualified as represented in the SAML response from the CP.
- setAttributes(AttributeConfig) - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
Configuration for attributes
- setAttributes(Definition, List<String>) - Method in class swiss.trustbroker.saml.dto.CpResponse
-
Set multi-value attribute with Definition key.
- setAttributesSelection(AttributesSelection) - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsParty
-
The filtering is done when the SAML response is received from the CP.
- setAttributesSelection(AttributesSelection) - Method in class swiss.trustbroker.federation.xmlconfig.RelyingParty
-
RP side attribute selection.
- setAttrValue(String) - Method in class swiss.trustbroker.federation.xmlconfig.HomeName
-
Overridden by value.
- setAudienceNotOnOrAfterSeconds(Integer) - Method in class swiss.trustbroker.federation.xmlconfig.SecurityPolicies
-
Overrides the global
notOnOrAfterSecondsfor conditionsnotOnOrAfterif greater than zero. - setAudiences(Audiences) - Method in class swiss.trustbroker.federation.xmlconfig.OidcClient
-
OIDC allowed audience in TokenExchange.
- setAudiencesList(Set<String>) - Method in class swiss.trustbroker.federation.xmlconfig.Audiences
-
List of audiences.
- setAudienceValiditySeconds(long) - Method in class swiss.trustbroker.saml.dto.ResponseParameters
- setAudit(AuditConfig) - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
Audit configuration.
- setAuthContextHandled(boolean) - Method in class swiss.trustbroker.oidc.session.HttpExchangeSupport
- setAuthenticationMethods(ClientAuthenticationMethods) - Method in class swiss.trustbroker.oidc.client.dto.OpenIdProviderConfiguration
- setAuthenticationRequestRepository(Saml2AuthenticationRequestRepository<AbstractSaml2AuthenticationRequest>) - Method in class swiss.trustbroker.oidc.opensaml5.OpenSaml5AuthenticationTokenConverter
-
Use the given
Saml2AuthenticationRequestRepositoryto load authentication request. - setAuthLevel(String) - Method in class swiss.trustbroker.audit.dto.AuditDto
- setAuthLevel(String) - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsParty
-
Configure what QoA the CP can deliver per default, e.g.
- setAuthLevel(String) - Method in class swiss.trustbroker.saml.dto.CpResponse
-
Declared QoA CP side.
- setAuthnRequestCustomizer(Consumer<OpenSaml5AuthenticationRequestResolver.AuthnRequestContext>) - Method in class swiss.trustbroker.oidc.opensaml5.OpenSaml5AuthenticationRequestResolver
-
Set a
Consumerfor modifying the OpenSAMLAuthnRequest - setAuthnRequestIssuerId(String) - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsParty
-
Override of the global issuer for this CP.
- setAuthnStatementInstant(Instant) - Method in class swiss.trustbroker.saml.dto.ResponseParameters
- setAuthorizationCodeTimeToLiveMin(Integer) - Method in class swiss.trustbroker.federation.xmlconfig.OidcSecurityPolicies
-
Overrides tokenTimeToLiveMin for the authorization code.
- setAuthorizationEndpoint(URI) - Method in class swiss.trustbroker.oidc.client.dto.OpenIdProviderConfiguration
- setAuthorizationGrantTypes(AuthorizationGrantTypes) - Method in class swiss.trustbroker.federation.xmlconfig.OidcClient
-
Authorization grant types to be allowed.
- setAuthorizedApplicationList(List<AuthorizedApplication>) - Method in class swiss.trustbroker.federation.xmlconfig.AuthorizedApplications
-
List of Authorized Applications.
- setAuthorizedApplications(AuthorizedApplications) - Method in class swiss.trustbroker.federation.xmlconfig.AccessRequest
-
Authorized applications for the AccessRequest.
- setAuthStateInstant(String) - Method in class swiss.trustbroker.saml.dto.CpResponse
-
Issuing instant of authentication statement.
- setBackendConnectTimeoutSec(int) - Method in class swiss.trustbroker.config.dto.NetworkConfig
-
Backend service connect timeout in seconds.
- setBackendKeystore(SignerKeystore) - Method in class swiss.trustbroker.federation.xmlconfig.Certificates
-
Keystore for backend connections (via SAML the artifact resolution or OIDC metadata protocol).
- setBackendTruststore(SignerTruststore) - Method in class swiss.trustbroker.federation.xmlconfig.Certificates
-
Truststore for backend connections (via SAML the artifact resolution or OIDC metadata protocol).
- setBanner(String) - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsProvider
-
Show this banner above the HRD selection area if tile is enabled.
- setBanners(List<Banner>) - Method in class swiss.trustbroker.config.dto.GuiProperties
-
Banners.
- setBanners(List<UiBanner>) - Method in class swiss.trustbroker.saml.dto.UiObjects
-
Banners.
- setBase(String) - Method in class swiss.trustbroker.federation.xmlconfig.RelyingParty
-
Base profile.
- setBillingId(String) - Method in class swiss.trustbroker.audit.dto.AuditDto
- setBillingId(String) - Method in class swiss.trustbroker.federation.xmlconfig.RelyingParty
-
We introduce the billing field, so we can start make some trials adding it to the config.
- setBinding(SamlBinding) - Method in class swiss.trustbroker.federation.xmlconfig.SloResponse
-
The protocol binding for which this entry applies.
- setBindings(List<String>) - Method in class swiss.trustbroker.config.dto.SamlProperties
-
List of exposed SAML protocols.
- setBindings(List<String>) - Method in class swiss.trustbroker.config.dto.WsTrustConfig
-
List of exposed WS-Trust bindings.
- setBlockedHeaderNames(List<String>) - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
Header block list.
- setBlockedRequestParameterNames(List<String>) - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
Request parameter block list.
- setBrokerIdpId(String) - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
Deprecated.Replaced by the 'first' marker on the network, e.g. INTERNET-first.
- setButton(String) - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsProvider
-
Deprecated.remove
- setButtons(List<GuiButtons>) - Method in class swiss.trustbroker.config.dto.GuiProperties
-
Buttons enabled for the theme.
- setButtons(List<GuiButtons>) - Method in class swiss.trustbroker.homerealmdiscovery.dto.GuiConfig
- setCachePath(String) - Method in class swiss.trustbroker.config.dto.AnnouncementConfig
-
Path for the local announcements cache.
- setCanaryEnabledValue(String) - Method in class swiss.trustbroker.config.dto.NetworkConfig
-
Value for
canaryMarkerName. - setCanaryMarkerName(String) - Method in class swiss.trustbroker.config.dto.NetworkConfig
-
Running on K8S supporting canary routing using cookies, a test instance.
- setCanonicalizationAlgorithm(String) - Method in class swiss.trustbroker.config.dto.AccessRequestConfig
-
Access Request canonicalization algorithm.
- setCanonicalizationAlgorithm(String) - Method in class swiss.trustbroker.federation.xmlconfig.Signature
-
Canonicalization algorithm.
- setCentralCICD(String) - Method in class swiss.trustbroker.config.dto.AccessRequestConfig
-
Global default for optional request parameter added to URLs.
- setCentralCICD(String) - Method in class swiss.trustbroker.federation.xmlconfig.AuthorizedApplication
-
Optional request parameter added to URLs.
- setCert(String) - Method in class swiss.trustbroker.config.dto.WsTrustConfig
-
Keystore path.
- setCertificates(Certificates) - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsParty
-
You only need to declare SignerTruststore for SAML response verification.
- setCertificates(Certificates) - Method in class swiss.trustbroker.federation.xmlconfig.OidcClient
-
Required for JWT encryption
- setCertificates(Certificates) - Method in class swiss.trustbroker.federation.xmlconfig.RelyingParty
-
For verification and signing.
- setCertPath(String) - Method in class swiss.trustbroker.federation.xmlconfig.SignerKeystore
-
Path of the certificate.
- setCertPath(String) - Method in class swiss.trustbroker.federation.xmlconfig.SignerTruststore
-
Path of the certificate.
- setCertType(String) - Method in class swiss.trustbroker.federation.xmlconfig.SignerKeystore
-
If the store format cannot be derived from the file extension.
- setCertType(String) - Method in class swiss.trustbroker.federation.xmlconfig.SignerTruststore
-
If the store format cannot be derived from the file extension.
- setCid(Boolean) - Method in class swiss.trustbroker.audit.dto.AuditDto.ResponseAttributeValue
- setCid(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.Definition
-
Indicates whether this field is considered CID (client identifying data).
- setCidFields(Map<String, Boolean>) - Method in class swiss.trustbroker.config.dto.OpsAuditConfig
-
Fields to be considered CID by property names of swiss.trustbroker.audit.dto.AuditDto.
- setClaim(String) - Method in class swiss.trustbroker.federation.xmlconfig.Qoa
-
Qoa Claim name
- setClaim(String) - Method in class swiss.trustbroker.federation.xmlconfig.SubjectName
-
Subject Name ID claim name.
- setClaim(String, Object) - Method in class swiss.trustbroker.saml.dto.CpResponse
-
Set claim value or values.
- setClaimList(String, Object) - Method in class swiss.trustbroker.saml.dto.CpResponse
-
Converts values to (possibly immutable) list if needed, empty list for null.
- setClaims(String, Object) - Method in class swiss.trustbroker.saml.dto.CpResponse
-
Set claim value or values.
- setClaims(Map<String, Object>) - Method in class swiss.trustbroker.saml.dto.CpResponse
-
The claims map contains these OIDC claims: Everything that was annotated with an oidcName in the configuration. All well known OIDC claims of the openid scope declared in AttributeName (StandardClaims). Everything added or removed in a OIDC OnToken groovy script hook. We use Object values because of nested collection support.
- setClaimsDefinitionMapping(String) - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
Relative path of the ClaimsProviderDefinitions configuration.
- setClaimsParties(List<ClaimsParty>) - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsProviderSetup
-
List of CPs.
- setClaimsProviderDefinitions(ClaimsProviderDefinitions) - Method in class swiss.trustbroker.config.dto.RelyingPartyDefinitions
- setClaimsProviderList(List<ClaimsProvider>) - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsProviderMappings
-
List of CP mappings.
- setClaimsProviderMappings(ClaimsProviderMappings) - Method in class swiss.trustbroker.federation.xmlconfig.RelyingParty
-
List of CPs mapped to this RP.
- setClaimsProviderNoticeCookie(CookieProperties) - Method in class swiss.trustbroker.config.dto.GuiProperties
-
XTB can (via a plugin) support a notice screen that can be configured, where an end user can set a cookie to not show the screen next time.
- setClaimsProviderNoticeCookie(CookieConfig) - Method in class swiss.trustbroker.homerealmdiscovery.dto.GuiConfig
- setClaimsProviders(List<ConfigElementStatus>) - Method in class swiss.trustbroker.federation.dto.ConfigStatusData
- setClaimsProviders(List<ClaimsProvider>) - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsProviderDefinitions
-
List of CPs
- setClaimsProviders(List<ClaimsProvider>) - Method in class swiss.trustbroker.saml.dto.RpRequest
-
ClaimsProvider mappings for RelyingParty.
- setClaimsProviderSetup(String) - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
Relative path of the SetupCP file.
- setClaimsProviderSetup(ClaimsProviderSetup) - Method in class swiss.trustbroker.config.dto.RelyingPartyDefinitions
- setClaimsSelection(AttributesSelection) - Method in class swiss.trustbroker.federation.xmlconfig.OidcClient
-
Attribute selection applied to the claims.
- setClaimsSelection(AttributesSelection) - Method in class swiss.trustbroker.federation.xmlconfig.RelyingParty
-
RP side claims selection.
- setClaimsSourceList(List<OidcClaimsSource>) - Method in class swiss.trustbroker.federation.xmlconfig.OidcClaimsSources
-
List of claims sources.
Claims from sources are combined in the given order. - setClaimsSources(OidcClaimsSources) - Method in class swiss.trustbroker.federation.xmlconfig.OidcClient
-
Sources of claims for OIDC CPs.
- setClaimTypes(List<String>) - Method in class swiss.trustbroker.wstrustclient.dto.WsTrustRstRequest
- setClasses(List<AcClass>) - Method in class swiss.trustbroker.federation.xmlconfig.Qoa
-
List of SAML AuthnContextClassRef entries.
- setClientAssertionExpirationLifeTimeSec(Integer) - Method in class swiss.trustbroker.federation.xmlconfig.OidcSecurityPolicies
-
Restrict client_assertion expiration maxLifeTime
Default: 3600 (1h) - setClientAssertionMaxAgeSec(Integer) - Method in class swiss.trustbroker.federation.xmlconfig.OidcSecurityPolicies
-
Restrict client_assertion age
Default: 60 - setClientAssertionNotBeforeToleranceSec(Integer) - Method in class swiss.trustbroker.federation.xmlconfig.OidcSecurityPolicies
-
client_assertion tolerance NTP drift tolerance.
- setClientAssertionNotOnOrAfterToleranceSec(Integer) - Method in class swiss.trustbroker.federation.xmlconfig.OidcSecurityPolicies
-
client_assertion timestamp clock/transfer tolerance.
- setClientAuthenticationMethods(ClientAuthenticationMethods) - Method in class swiss.trustbroker.federation.xmlconfig.OidcClient
-
Client authentication methods to be allowed.
- setClientEncryptionCredential(Credential) - Method in class swiss.trustbroker.federation.xmlconfig.OidcClient
- setClientExtId(String) - Method in class swiss.trustbroker.federation.xmlconfig.IdmQuery
-
Client External ID (tenant) as filtering parameter for the IDM.
- setClientExtId(String) - Method in class swiss.trustbroker.federation.xmlconfig.RelyingParty
-
Primary key of the IDM client identifying an access tenant.
- setClientExtId(String) - Method in class swiss.trustbroker.saml.dto.CpResponse
-
Retrieved IDM primary reference for internal reference.
- setClientId(String) - Method in class swiss.trustbroker.federation.xmlconfig.AuthorizedApplication
-
If an RP contains multiple OIDC clients and AccessRequest configurations and the OIDC client_id or the applicationName (provided viy AuthnRequest.ProviderName) does not match the 'name', this attribute can be used to establish the relation.
- setClientIP(String) - Method in class swiss.trustbroker.audit.dto.AuditDto
- setClientName(String) - Method in class swiss.trustbroker.audit.dto.AuditDto
- setClientName(String) - Method in class swiss.trustbroker.federation.xmlconfig.RelyingParty
-
ClientName is the access tenant identifier (somewhat a short form of the relying party ID) applied to all
- setClientName(String) - Method in class swiss.trustbroker.saml.dto.CpResponse
-
RelyingParty ClientName as used in the IDM credential SAML federation Issuer NameID.
- setClientNetwork(String) - Method in class swiss.trustbroker.audit.dto.AuditDto
- setClientNetworks(String) - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsProvider
-
A comma separated list of network identifiers.
- setClients(List<OidcClient>) - Method in class swiss.trustbroker.federation.xmlconfig.Oidc
-
List of OIDC clients handled via the same configuration.
- setClientSecret(String) - Method in class swiss.trustbroker.federation.xmlconfig.OidcClient
-
You can encode the secret with one of the supported encoders.
- setClientSecret(String) - Method in class swiss.trustbroker.oidc.client.dto.OpenIdProviderConfiguration
- setClientType(String) - Method in class swiss.trustbroker.audit.dto.AuditDto
- setClock(Clock) - Method in class swiss.trustbroker.oidc.opensaml5.OpenSaml5AuthenticationRequestResolver
- setCodeChallengeMethods(List<String>) - Method in class swiss.trustbroker.config.dto.OidcProperties
-
Enabled code challenge methods.
- setCodeLifetimeSec(int) - Method in class swiss.trustbroker.config.dto.OidcProperties
-
OIDC code lifetime in seconds.
- setCollapseParagraphs(boolean) - Method in class swiss.trustbroker.saml.dto.UiBanner
-
True if paragraphs of banner are shown collapsed on a small screen.
- setCollapseParagraphs(Boolean) - Method in class swiss.trustbroker.config.dto.Banner
-
Display banner paragraphs collapsed on a small screen.
- setColor(String) - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsProvider
-
HTML color code identifying the CP on small screens.
- setColor(String) - Method in class swiss.trustbroker.saml.dto.SsoParticipant
- setColor(String) - Method in class swiss.trustbroker.saml.dto.UiObject
-
HTML color code identifying the CP on small screens.
- setComparison(QoaComparison) - Method in class swiss.trustbroker.federation.xmlconfig.Qoa
-
Comparison type.
- setComparisonType(QoaComparison) - Method in class swiss.trustbroker.saml.dto.RpRequest
-
AuthnRequest RequestedAuthnContext.comparisonType.
- setComparisonType(QoaComparison) - Method in class swiss.trustbroker.sessioncache.dto.StateData
- setCompletedAuthnRequests(List<String>) - Method in class swiss.trustbroker.sessioncache.dto.StateData
- setCompletedTime(Timestamp) - Method in class swiss.trustbroker.sessioncache.dto.AccessRequestSessionState
- setConfigBranch(String) - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
Configuration branch.
- setConfigurationPath(String) - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
Configuration path.
- setConstAttributes(ConstAttributes) - Method in class swiss.trustbroker.federation.xmlconfig.RelyingParty
-
Deprecated.replaced with ClaimsSelection
- setConsumerUrl(String) - Method in class swiss.trustbroker.config.dto.SamlProperties
-
XTB SAML consumer URL, included in the metadata.
- setContext(Map<String, String>) - Method in class swiss.trustbroker.saml.dto.RpRequest
-
Map to store internal processing attributes required during federation.
- setContextClass(String) - Method in class swiss.trustbroker.federation.xmlconfig.AcClass
-
ACClass name
- setContextClasses(List<String>) - Method in class swiss.trustbroker.saml.dto.CpResponse
-
Authentication context classes.
- setContextClasses(List<String>) - Method in class swiss.trustbroker.saml.dto.RpRequest
-
AuthnRequest RequestedAuthnContext.ContextClassRefs.
- setContextClasses(List<String>) - Method in class swiss.trustbroker.sessioncache.dto.StateData
- setConversationId(String) - Method in class swiss.trustbroker.audit.dto.AuditDto
- setConversationId(String) - Method in class swiss.trustbroker.saml.dto.ResponseParameters
- setCookieSameSite(String) - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
Global default cookie sameSite flag.
- setCookiesToExpire(List<Cookie>) - Method in class swiss.trustbroker.sso.service.SsoService.SloState
- setCors(CorsPolicies) - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
HTTP CORS configuration.
- setCounterPartyDefault(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.WsTrust
-
For CPs use this
WsTrustsetting as default for all RPs used in combination with this CP. - setCpAttrOriginIssuer(String) - Method in class swiss.trustbroker.saml.dto.ResponseParameters
- setCpBackendClientCredential(Credential) - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsParty
- setCpBackendTrustCredentials(List<Credential>) - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsParty
- setCpDecryptionCredentials(List<Credential>) - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsParty
- setCpId(String) - Method in class swiss.trustbroker.saml.dto.SsoParticipant
- setCpIssuer(String) - Method in class swiss.trustbroker.audit.dto.AuditDto
- setCpIssuerId(String) - Method in class swiss.trustbroker.sessioncache.dto.SsoSessionParticipant
- setCpIssuerId(String) - Method in class swiss.trustbroker.sso.service.SsoService.SsoCookieNameParams
- setCpJwks(List<JWK>) - Method in class swiss.trustbroker.federation.xmlconfig.OidcClient
- setCpNameId(String) - Method in class swiss.trustbroker.audit.dto.AuditDto
- setCpResponse(CpResponse) - Method in class swiss.trustbroker.sessioncache.dto.StateData
- setCpTrustCredential(List<Credential>) - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsParty
- setCpUrn(String) - Method in class swiss.trustbroker.saml.dto.DeviceInfoReq
- setCredential(Credential) - Method in class swiss.trustbroker.saml.dto.ResponseParameters
- setCrossProtocol(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.SloResponse
-
Use notification cross-protocol (i.e.
- setCsp(ContentSecurityPolicies) - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
HTTP CSP configuration.
- setCtxClasses(String) - Method in class swiss.trustbroker.audit.dto.AuditDto
- setCurrentValuesFromExchange(TomcatSession, String, AuthenticatedPrincipal, String, RelyingPartyDefinitions, TrustBrokerProperties) - Static method in class swiss.trustbroker.oidc.session.OidcSessionSupport
- setCustomIssuer(String) - Method in class swiss.trustbroker.saml.dto.CpResponse
-
Override RP response issuer.
- setCustomizeProperties(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.ProfileSelection
-
Apply name/value transformation for CustomProperties (if true regardless of n2k).
- setCustomizeUnits(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.ProfileSelection
-
Apply name/value transformation for UnitProperties if n2k=true.
- setDataEncryptionAlgorithm(String) - Method in class swiss.trustbroker.federation.xmlconfig.Encryption
-
Data encryption algorithm.
- setDebugEnabledValue(String) - Method in class swiss.trustbroker.config.dto.Support
-
Value of the cookie or header signaling debug ON e.g.
- setDebugMarkerName(String) - Method in class swiss.trustbroker.config.dto.Support
-
HTTP cookie or header name identifying the debug session.
- setDefaultErrorCode(String) - Method in class swiss.trustbroker.config.dto.OidcProperties
-
Default error code for OIDC.
- setDefaultLanguage(String) - Method in class swiss.trustbroker.config.dto.GuiProperties
-
Default language for the UI.
- setDefaultQoa(String) - Method in class swiss.trustbroker.config.dto.OidcProperties
-
Global default QoA.
- setDefaultQoa(String) - Method in class swiss.trustbroker.config.dto.QualityOfAuthenticationConfig
-
Default Qoa value.
- setDefaultQoa(String) - Method in class swiss.trustbroker.federation.xmlconfig.Qoa
-
Default Qoa if there is none in the response
- setDefaultUsePepQoaPolicy(String) - Method in class swiss.trustbroker.config.dto.OidcProperties
-
Global default for legacy Policy Enforcement Point (PEP) QOA mapping policy configured via
- setDefaultValue(String) - Method in class swiss.trustbroker.config.dto.CookieProperties
-
Optional cookie default value.
- setDefaultValue(String) - Method in class swiss.trustbroker.homerealmdiscovery.dto.CookieConfig
- setDefinition(String) - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsProviderMappings
-
Define a CLaimsProviderMappings.xml definition/profile
- setDefinitions(List<AttributeProperties>) - Method in class swiss.trustbroker.config.dto.AttributeConfig
-
List of attributes.
- setDefinitions(List<Definition>) - Method in class swiss.trustbroker.federation.xmlconfig.AttributesSelection
-
List of attribute definitions.
- setDelegateOrigin(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.SecurityPolicies
-
Control CP AuthnRequest scopes and RP Attribute OriginalIssuer.
- setDeleteTimestamp(Timestamp) - Method in class swiss.trustbroker.sessioncache.dto.JwkCacheEntity
- setDescription(String) - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsProvider
-
Text displayed in the CP tile.
- setDescription(String) - Method in class swiss.trustbroker.saml.dto.UiObject
-
Text displayed in the CP tile.
- setDestination(String) - Method in class swiss.trustbroker.audit.dto.AuditDto
- setDestination(String) - Method in class swiss.trustbroker.saml.dto.CpResponse
-
AuthnRequest.AssertionConsumerUrl from our AuthnRequest.
- setDeviceAuthorizationEnabled(boolean) - Method in class swiss.trustbroker.config.dto.OidcProperties
-
Enable device authorization endpoint.
- setDeviceId(String) - Method in class swiss.trustbroker.audit.dto.AuditDto
- setDeviceId(String) - Method in class swiss.trustbroker.sessioncache.dto.StateData
- setDeviceIdAccepted(String) - Method in class swiss.trustbroker.audit.dto.AuditDto
- setDigestMethod(String) - Method in class swiss.trustbroker.config.dto.AccessRequestConfig
-
Access requiest digest method.
- setDigestMethod(String) - Method in class swiss.trustbroker.federation.xmlconfig.Signature
-
Digest algorithm.
- setDisableACUrl(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsParty
-
This flag allows to disable setting the AssertionConsumerServiceURL in the AuthnRequest towards the CP as some CPs do fail when it is set (correctly or incorrectly).
- setDisabled(UiDisableReason) - Method in class swiss.trustbroker.saml.dto.UiObject
-
disabled signals to the frontend to inactivate the tile.
- setDisplayClaims(List<String>) - Method in class swiss.trustbroker.federation.xmlconfig.ProfileSelection
-
Additional information to be displayed for profile selection.
- setDisplayName(String) - Method in class swiss.trustbroker.federation.xmlconfig.ProfileSelection
-
Attribute used as displayName for profile selection UI.
- setDomain(String) - Method in class swiss.trustbroker.config.dto.CookieProperties
-
Optional cookie domain
- setDomain(String) - Method in class swiss.trustbroker.homerealmdiscovery.dto.CookieConfig
- setDoSignArtifactResolve(boolean) - Method in class swiss.trustbroker.config.dto.SecurityChecks
-
Sign outgoing ArtifactResolve messages.
- setDoSignArtifactResolve(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.SecurityPolicies
-
Flag allows to sign outbound SAML artifact resolve messages for maximum security.
- setDoSignArtifactResponse(boolean) - Method in class swiss.trustbroker.config.dto.SecurityChecks
-
Sign outgoing ArtifactResponse messages.
- setDoSignAssertions(boolean) - Method in class swiss.trustbroker.config.dto.SecurityChecks
-
Sign Assertion in outgoing messages.
- setDoSignFailureResponse(boolean) - Method in class swiss.trustbroker.config.dto.SecurityChecks
-
Sign outgoing Response messages with failure state.
- setDoSignResponse(boolean) - Method in class swiss.trustbroker.config.dto.WsTrustConfig
-
Sign SOAP responses.
- setDoSignSamlMessages(boolean) - Method in class swiss.trustbroker.config.dto.AccessRequestConfig
-
Sign outgoing Access Request SAML messages (not re-using SecurityChecks.doSignSuccessResponse) Assertion signature is controlled by SecurityChecks.doSignAssertions for AccessRequest too.
- setDoSignSuccessResponse(boolean) - Method in class swiss.trustbroker.config.dto.SecurityChecks
-
Sign outgoing Response messages with success state.
- setDowngradeToMaximumRequested(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.AcClass
-
If this Qoa is returned by the CP, but was not requested by the RP, downgrade it to the maximum Qoa requested by the RP.
- setDPoPSigningAlgValuesSupported(List<String>) - Method in class swiss.trustbroker.config.dto.OidcProperties
-
Enabled Demonstrating Proof of Possession (DPoP) signing algorithm values.
- setDropAttrSelectionIfNoFilter(boolean) - Method in class swiss.trustbroker.config.dto.SamlProperties
-
Drop all CP attributes if there is no AttributeSelection defined
- setDropDuplicatedAttributeFromOriginalIssuer(List<String>) - Method in class swiss.trustbroker.config.dto.OidcProperties
-
If we have the same attribute from both original issuer and IDM, drop the original issuer one.
- setDropDuplicatedAttributeFromOriginalIssuer(List<String>) - Method in class swiss.trustbroker.saml.dto.ResponseParameters
- setDropUnmappable(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.Qoa
-
Drop unmapped Qoa from the request
Default: false - setEmailAddress(String) - Method in class swiss.trustbroker.homerealmdiscovery.dto.SupportInfo
- setEnableAppSpecificQuery(boolean) - Method in class swiss.trustbroker.config.dto.AnnouncementConfig
-
App specific queries enabled.
- setEnabled(boolean) - Method in class swiss.trustbroker.config.dto.AccessRequestConfig
-
Globally enable the feature.
- setEnabled(boolean) - Method in class swiss.trustbroker.config.dto.AnnouncementConfig
-
Disable the service to discard all announcements.
- setEnabled(boolean) - Method in class swiss.trustbroker.config.dto.IdmConfig
-
IDM enabled.
- setEnabled(boolean) - Method in class swiss.trustbroker.config.dto.LdapStoreConfig
-
LDAP store sub-system supporting store="LDAP" IDMQuery.
- setEnabled(boolean) - Method in class swiss.trustbroker.config.dto.MonitoringConfig
-
Enable the monitoring API.
- setEnabled(boolean) - Method in class swiss.trustbroker.config.dto.OidcProperties
-
OIDC protocol enabled.
- setEnabled(boolean) - Method in class swiss.trustbroker.config.dto.OpsAuditConfig
-
Enable CID free logging on the log group swiss.trustbroker.audit.service.OpsAuditLogger.
- setEnabled(boolean) - Method in class swiss.trustbroker.config.dto.ProfileSelectionConfig
-
Globally enable the feature.
- setEnabled(boolean) - Method in class swiss.trustbroker.config.dto.SamlProperties
-
SAML protocol enabled.
- setEnabled(boolean) - Method in class swiss.trustbroker.config.dto.SsoConfig
-
Globally enable the feature.
- setEnabled(boolean) - Method in class swiss.trustbroker.config.dto.Support
-
Feature flag
- setEnabled(boolean) - Method in class swiss.trustbroker.config.dto.WsFedConfig
-
Feature toggle allowing to disable the WS-Fed endpoint.
- setEnabled(boolean) - Method in class swiss.trustbroker.config.dto.WsTrustConfig
-
Feature toggle allowing to disable the WSTrust endpoint
Default: false (since 1.13.0) - setEnabled(boolean) - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
Enable XML schema API.
- setEnabled(boolean) - Method in class swiss.trustbroker.federation.xmlconfig.Sso
-
Enable this configuration.
- setEnabled(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.AccessRequest
-
Enable this configuration.
- setEnabled(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.AnnouncementRpConfig
-
Enable this configuration.
- setEnabled(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsProvider
-
Allow pre-configuration of ClaimsProviderMappings with enabled or disabled ClaimsParty in profiles and only pick them per relying party in setup.
- setEnabled(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsProviderMappings
-
Allow pre-configuration of ClaimsProviderMappings in profiles without considering the RP setup
- setEnabled(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.FlowPolicies
-
Enable this configuration.
- setEnabled(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.Oidc
-
SAML protocol enabled.
- setEnabled(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.ProfileSelection
-
Enable this feature
- setEnabled(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.Saml
-
SAML protocol enabled.
- setEnabled(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.WsTrust
-
WS-Trust protocol enabled.
- setEnabled(FeatureEnum) - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsParty
-
Flag to enable/disable this CP.
- setEnabled(FeatureEnum) - Method in class swiss.trustbroker.federation.xmlconfig.CounterParty
- setEnabled(FeatureEnum) - Method in class swiss.trustbroker.federation.xmlconfig.RelyingParty
- setEnabled(ProvisioningMode) - Method in class swiss.trustbroker.federation.xmlconfig.Provisioning
-
Enable IDM provisioning based on CP response.
- setEnableTrigger(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.AuthorizedApplication
-
AccessRequest can be triggered by calling application.
- setEncodedQueryParameters(List<Pair<String, String>>) - Method in class swiss.trustbroker.sso.dto.SloNotification
- setEncodedUrl(String) - Method in class swiss.trustbroker.sso.dto.SloNotification
- setEncryption(Encryption) - Method in class swiss.trustbroker.federation.xmlconfig.Saml
-
SAML encryption configuration.
- setEncryptionAlgorithm(String) - Method in class swiss.trustbroker.federation.xmlconfig.OidcSecurityPolicies
-
Encryption algorithm
Default: RSA-OAEP-256 - setEncryptionKeystore(SignerKeystore) - Method in class swiss.trustbroker.federation.xmlconfig.Certificates
-
Keystore for encryption.
- setEncryptionKid(String) - Method in class swiss.trustbroker.federation.xmlconfig.OidcSecurityPolicies
-
Encryption keyID
- setEncryptionMethod(String) - Method in class swiss.trustbroker.federation.xmlconfig.OidcSecurityPolicies
-
Encryption method
Default: A256GCM - setEncryptionTruststore(SignerTruststore) - Method in class swiss.trustbroker.federation.xmlconfig.Certificates
-
Truststore for encryption verification.
- setEndpointReferenceAddress(String) - Method in class swiss.trustbroker.config.dto.AccessRequestConfig
-
Global default for ID in requests sent by the AccessRequest.
- setEndpointReferenceAddress(String) - Method in class swiss.trustbroker.federation.xmlconfig.AuthorizedApplication
-
Overrides the RP ID in requests sent by the AccessRequest.
- setEndpointUrl(String) - Method in class swiss.trustbroker.config.dto.IdmConfig
-
Endpoint URL of the IDM
- setEndSessionEndpoint(String) - Method in class swiss.trustbroker.config.dto.OidcProperties
-
XTB OIDC session termination endpoint, included in the metadata.
- setEnforce(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.Qoa
-
Enable QoA enforcement.
- setEnforceArtifactSignatureAlgorithms(boolean) - Method in class swiss.trustbroker.config.dto.SecurityChecks
-
Enforce allowed message signature algorithms for Artifact Resolution.
- setEnforceAssertionSignatureAlgorithms(boolean) - Method in class swiss.trustbroker.config.dto.SecurityChecks
-
Enforce allowed message signature algorithms for Assertions.
- setEnforceClientIp(boolean) - Method in class swiss.trustbroker.config.dto.WsTrustConfig
-
Client IPs enforced if configured (
allowedClientIpRegex). - setEnforceNetwork(boolean) - Method in class swiss.trustbroker.config.dto.WsTrustConfig
-
Client networks enforced if configured (
allowedNetworks). - setEnforceQoaIfMissing(boolean) - Method in class swiss.trustbroker.config.dto.SecurityChecks
-
Reject request without getAuthnContextClassRef or Qoa configuration
Default: false - setEnforceRequestSignatureAlgorithms(boolean) - Method in class swiss.trustbroker.config.dto.SecurityChecks
-
Enforce allowed message signature algorithms for AuthnRequests.
- setEnforceResponseSignatureAlgorithms(boolean) - Method in class swiss.trustbroker.config.dto.SecurityChecks
-
Enforce allowed message signature algorithms for Responses.
- setEnterpriseIdpId(String) - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
Deprecated.Replaced by the 'first' marker on the network, e.g. INTRANET-first.
- setEntryId(String) - Method in class swiss.trustbroker.audit.dto.AuditDto
- setErrors(Collection<String>) - Method in class swiss.trustbroker.federation.dto.ConfigElementStatus
- setEventType(EventType) - Method in class swiss.trustbroker.audit.dto.AuditDto
- setExpectedAssertionId(String) - Method in class swiss.trustbroker.saml.util.AssertionValidator.ExpectedAssertionValues
- setExpectedAudience(String) - Method in class swiss.trustbroker.saml.util.AssertionValidator.ExpectedAssertionValues
- setExpectedCpComparison(QoaComparison) - Method in class swiss.trustbroker.saml.util.AssertionValidator.ExpectedAssertionValues
- setExpectedCpContextClasses(List<String>) - Method in class swiss.trustbroker.saml.util.AssertionValidator.ExpectedAssertionValues
- setExpectedIssuer(String) - Method in class swiss.trustbroker.saml.util.AssertionValidator.ExpectedAssertionValues
- setExpectedRecipient(String) - Method in class swiss.trustbroker.saml.util.AssertionValidator.ExpectedAssertionValues
- setExpectedRelayState(String) - Method in class swiss.trustbroker.saml.util.AssertionValidator.ExpectedAssertionValues
- setExpectedRequestId(String) - Method in class swiss.trustbroker.saml.util.AssertionValidator.ExpectedAssertionValues
- setExpectedRpId(String) - Method in class swiss.trustbroker.saml.util.AssertionValidator.ExpectedAssertionValues
- setExpectedSessionIndex(String) - Method in class swiss.trustbroker.saml.util.AssertionValidator.ExpectedAssertionValues
- setExpectSuccess(boolean) - Method in class swiss.trustbroker.saml.util.AssertionValidator.ExpectedAssertionValues
- setExpirationTime(Timestamp) - Method in class swiss.trustbroker.audit.dto.AuditDto
- setExpirationTime(Timestamp) - Method in class swiss.trustbroker.saml.dto.SsoParticipants
- setExpirationTime(Timestamp) - Method in class swiss.trustbroker.sessioncache.dto.Lifecycle
- setExpirationTimestamp(Timestamp) - Method in class swiss.trustbroker.sessioncache.dto.ArtifactCacheEntity
- setExpirationTimestamp(Timestamp) - Method in class swiss.trustbroker.sessioncache.dto.JwkCacheEntity
- setExpirationTimestamp(Timestamp) - Method in class swiss.trustbroker.sessioncache.dto.StateData
- setExpirationTimestamp(Timestamp) - Method in class swiss.trustbroker.sessioncache.dto.StateEntity
-
The scheduled reaper uses this field to clean up the database.
- setExpiredTime(Timestamp) - Method in class swiss.trustbroker.sessioncache.dto.Lifecycle
- setExternalTokenExchangeEnabled(boolean) - Method in class swiss.trustbroker.config.dto.OidcProperties
-
Allow token exchange with external tokens.
- setFallback(String) - Method in class swiss.trustbroker.config.dto.ContentSecurityPolicies
-
Default CSP configuration.
- setFallback(String) - Method in class swiss.trustbroker.config.dto.FrameOptionsPolicies
-
No further differentiation here as the FE, API, and SAML URLs are used together.
- setFeatureConditions(Map<String, String>) - Method in class swiss.trustbroker.saml.dto.ResponseStatus
-
Set by scripts to toggle features, to be consumed by the respective implementations.
- setFeatures(List<GuiFeatures>) - Method in class swiss.trustbroker.config.dto.GuiProperties
-
Feature enabled for the theme.
- setFeatures(List<GuiFeatures>) - Method in class swiss.trustbroker.homerealmdiscovery.dto.GuiConfig
- setFederationId(String) - Method in class swiss.trustbroker.federation.xmlconfig.OidcClient
-
Federation ID override.
- setFederationServiceIssuerId(String) - Method in class swiss.trustbroker.saml.dto.ResponseParameters
- setFilter(String) - Method in class swiss.trustbroker.federation.xmlconfig.ProfileSelection
-
Apply filtering on roles.
- setFilterOutbound(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.ProfileSelection
-
Apply filtering on roles to claims output as well reducing data to what has been selected by the user in INTERACTIVE mode.
- setFilterUnits(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.ProfileSelection
-
Filter unit properties by selected/default profile ID if n2k=true.
- setFinalValuesFromAuthentication(TomcatSession, Object, RelyingPartyDefinitions, TrustBrokerProperties, StateCacheService, SsoService) - Static method in class swiss.trustbroker.oidc.session.OidcSessionSupport
- setFingerprintCheck(FingerprintCheck) - Method in class swiss.trustbroker.federation.xmlconfig.Sso
-
Device fingerprint check mode.
- setFlowPolicies(FlowPolicies) - Method in class swiss.trustbroker.federation.xmlconfig.RelyingParty
-
Error flow policies for this RP.
- setFlowPolicy(Flow) - Method in class swiss.trustbroker.saml.dto.ResponseStatus
-
Optional flow policy to control the abort flow.
- setFlowPolicyNamespaces(List<SamlNamespace>) - Method in class swiss.trustbroker.config.dto.SamlProperties
-
Flow control namespace mappings.
- setFlows(List<Flow>) - Method in class swiss.trustbroker.federation.xmlconfig.FlowPolicies
-
List of flow configurations.
- setForceAuthn(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.SecurityPolicies
-
Always enforce re-authentication on this CP/on all CPs configured for this RP.
- setForceAuthn(Boolean) - Method in class swiss.trustbroker.sessioncache.dto.StateData
- setForceCpAuthentication(boolean) - Method in class swiss.trustbroker.config.dto.SecurityChecks
-
Enforce CP authentication via corresponding OIDC/SAML flags.
- setForceIdmRefresh(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.Sso
-
Refresh IDM data for SSO - enable e.g.
- setFormat(String) - Method in class swiss.trustbroker.config.dto.SecToken
-
Security token format.
- setFormat(String) - Method in class swiss.trustbroker.federation.xmlconfig.SubjectName
-
Subject Name ID format.
- setForwardRpProtocolBinding(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.Saml
-
Forward
ProtocolBindingfrom RP tp CP. - setFrameAncestors(List<String>) - Method in class swiss.trustbroker.federation.xmlconfig.AcWhitelist
-
Allowed frame ancestors for iframes.
- setFrameOptions(FrameOptionsPolicies) - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
HTTP Frame Options configuration.
- setFrontend(String) - Method in class swiss.trustbroker.config.dto.ContentSecurityPolicies
-
CSP configuration for frontend URLs.
- setFrontendBaseUrl(String) - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
Unused / empty for normal setup.
- setGatewayIP(String) - Method in class swiss.trustbroker.audit.dto.AuditDto
- setGitParamsFromEnv() - Method in class swiss.trustbroker.config.TrustBrokerProperties
- setGlobal(Boolean) - Method in class swiss.trustbroker.config.dto.Banner
-
Banner is globally enabled, regardless tiles on the screen.
- setGlobalApplicationName(String) - Method in class swiss.trustbroker.config.dto.AnnouncementConfig
-
Global Announcement application name
- setGlobalProfilesPath(String) - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
Relative path to
definitionof the global profiles. - setGlobalRequestTrust(KeystoreProperties) - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
Optional trust anchor for SAML request test automation or monitoring.
- setGlobalScriptPath(String) - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
Relative path to
scriptPathof the global Groovy scripts. - setGrantType(String) - Method in class swiss.trustbroker.audit.dto.AuditDto
- setGrantTypes(List<String>) - Method in class swiss.trustbroker.config.dto.OidcProperties
-
Enabled grant types.
- setGrantTypes(List<AuthorizationGrantType>) - Method in class swiss.trustbroker.federation.xmlconfig.AuthorizationGrantTypes
-
List of authorization grant types.
- setGroupName(String) - Method in class swiss.trustbroker.federation.xmlconfig.Sso
-
Configure a reference to an existing SSOGroup name.
- setGui(GuiProperties) - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
GUI related configuration.
- setHandleEnterpriseSwitch(boolean) - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
Deprecated.XTB does not support CP/IDP switching based on CP error responses anymore with v1.10.
- setHandleResponderErrors(boolean) - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
SAML responder error handling enabled.
- setHeader(String, String) - Method in class swiss.trustbroker.oidc.tx.OidcTxResponseWrapper
- setHomeName(String) - Method in class swiss.trustbroker.saml.dto.CpResponse
-
HomeName used by IdmService to query IDM.
- setHomeName(HomeName) - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsParty
-
The homeName is usually consumed from the home name attribute and identifies the CP attribute to consume the CP identity from instead of the subject name ID source.
- setHomeNameIssuerMapping(List<RegexNameValue>) - Method in class swiss.trustbroker.saml.dto.ResponseParameters
- setHrdHint(String) - Method in class swiss.trustbroker.sessioncache.dto.StateData
- setHrdHintAlias(String) - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsProvider
-
The HRD hint parameter sent by the RP is matched against the following attributes of the ClaimsProvider element.
- setHrdHintParameter(String) - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
HTTP GET query parameter (or POST parameter) that can be sent to request selection of an IDP instead of showing the HRD screen.
- setHrdHintTestAllowedFromInternet(Boolean) - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
Allow hrdHintTestParameter without a network header or from INTERNET.
- setHrdHintTestParameter(String) - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
HTTP header / cookie name to allow a testing framework to pass a CP to be selected in HRD.
- setHttpOnly(Boolean) - Method in class swiss.trustbroker.config.dto.CookieProperties
-
Optional cookie HTTP only flag.
- setId(String) - Method in class swiss.trustbroker.sessioncache.dto.StateData
- setId(String) - Method in class swiss.trustbroker.federation.dto.ConfigElementStatus
- setId(String) - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsParty
-
Issuer ID of the claims provider that need to match ClaimsProvider entries in ClaimsProviderDefinitions for HRD display and have to be returned by CPs in SAML responses.
- setId(String) - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsProvider
-
References the issuer ID of the CP.
- setId(String) - Method in class swiss.trustbroker.federation.xmlconfig.Flow
-
SAML error code with or without namespace, adding
- setId(String) - Method in class swiss.trustbroker.federation.xmlconfig.IdmQuery
-
A query needs an ID when its name is not unique and its execution needs to be controlled via a custom script based on CP input usually.
- setId(String) - Method in class swiss.trustbroker.federation.xmlconfig.OidcClient
-
Client ID.
- setId(String) - Method in class swiss.trustbroker.federation.xmlconfig.RelyingParty
-
RP ID.
- setId(String) - Method in class swiss.trustbroker.saml.dto.DeviceInfoReq
- setId(String) - Method in class swiss.trustbroker.sessioncache.dto.JwkCacheEntity
- setId(String) - Method in class swiss.trustbroker.sessioncache.dto.StateEntity
- setIdentityProvider(OidcIdentityProvider) - Method in class swiss.trustbroker.config.dto.OidcProperties
-
OIDC identity provider configuration.
- setIdm(IdmConfig) - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
Configuration for optional IDM integration.
- setIdmLookup(IdmLookup) - Method in class swiss.trustbroker.federation.xmlconfig.RelyingParty
-
IDM lookup configuration for this RP.
- setIdmLookup(IdmLookup) - Method in class swiss.trustbroker.saml.dto.CpResponse
-
Contains the
IdmLookupfor the corresponding RP. - setIdpLogoutMetadataEnabled(boolean) - Method in class swiss.trustbroker.config.dto.SamlProperties
-
SAML RP-side logout support can be hidden setting this feature flag to false.
- setIdpMetadataEnabled(boolean) - Method in class swiss.trustbroker.config.dto.SamlProperties
-
SAML CP-side metadata can be hidden setting this feature flag to false.
- setIdpNameFormats(List<String>) - Method in class swiss.trustbroker.config.dto.SamlProperties
-
CP-side supported name formats
- setIdTokenEncryptionAlgorithms(List<String>) - Method in class swiss.trustbroker.config.dto.OidcProperties
-
Enabled ID token encryption algorithms.
- setIdTokenEncryptionMethods(List<String>) - Method in class swiss.trustbroker.config.dto.OidcProperties
-
Enabled ID token encryption methods.
- setIdTokenSignature(String) - Method in class swiss.trustbroker.federation.xmlconfig.OidcSecurityPolicies
-
ID token signature algorithm (many adapters only support RS256)
- setIdTokenSigningAlgorithms(List<String>) - Method in class swiss.trustbroker.config.dto.OidcProperties
-
Enabled ID token signing algorithms methods.
- setIdTokenTimeToLiveMin(Integer) - Method in class swiss.trustbroker.federation.xmlconfig.OidcSecurityPolicies
-
Overrides tokenTimeToLiveMin for the ID token.
- setImage(String) - Method in class swiss.trustbroker.saml.dto.SsoParticipant
- setImage(String) - Method in class swiss.trustbroker.saml.dto.UiObject
-
Image displayed in the HRD large view.
- setImages(String) - Method in class swiss.trustbroker.config.dto.GuiProperties
-
Resource path where images used in the ClaimsProviderDefinitions are stored.
- setImg(String) - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsProvider
-
Image displayed in the HRD large view.
- setImplicitSsoGroup(boolean) - Method in class swiss.trustbroker.sessioncache.dto.SsoState
- setInboundMode(ArtifactBindingMode) - Method in class swiss.trustbroker.federation.xmlconfig.ArtifactBinding
-
Mode for inbound Artifact binding.
- setIndex(int) - Method in class swiss.trustbroker.config.dto.ArtifactResolution
-
XTB Artifact Resolution index.
- setInitTime(Timestamp) - Method in class swiss.trustbroker.sessioncache.dto.AccessRequestSessionState
- setInitTime(Timestamp) - Method in class swiss.trustbroker.sessioncache.dto.Lifecycle
- setInResponseTo(String) - Method in class swiss.trustbroker.saml.dto.CpResponse
-
ID of the authentication request that lead to this CP response.
- setInteractiveMultiServiceParameters(String) - Method in class swiss.trustbroker.config.dto.AccessRequestConfig
-
Global default for interactive Access Request service parameters (multi tenant mode).
- setInteractiveResultParameter(String) - Method in class swiss.trustbroker.config.dto.AccessRequestConfig
-
Interactive Access Request result parameter name.
- setInteractiveResultUserCancel(String) - Method in class swiss.trustbroker.config.dto.AccessRequestConfig
-
Value of resultParameter indicating user has cancelled the process.
- setInteractiveServiceParameters(String) - Method in class swiss.trustbroker.config.dto.AccessRequestConfig
-
Global default for interactive Access Request service parameters.
- setInteractiveServiceUrl(String) - Method in class swiss.trustbroker.config.dto.AccessRequestConfig
-
Global default for interactive Access Request service URL
- setInternetNetworkName(String) - Method in class swiss.trustbroker.config.dto.NetworkConfig
-
Name for the Internet network used in configurations (e.g.
- setIntranetNetworkName(String) - Method in class swiss.trustbroker.config.dto.NetworkConfig
-
Name for the Intranet network used in configurations (e.g.
- setIntrospectionEnabled(boolean) - Method in class swiss.trustbroker.config.dto.OidcProperties
-
Enable introspection endpoint.
- setIntrospectionEndpointAuthMethods(List<String>) - Method in class swiss.trustbroker.config.dto.OidcProperties
-
Enabled introspection endpoint auth methods.
- setIssueEnabled(boolean) - Method in class swiss.trustbroker.config.dto.WsTrustConfig
-
Deprecated.use bindings
- setIssueInstant(String) - Method in class swiss.trustbroker.sessioncache.dto.StateData
- setIssuer(String) - Method in class swiss.trustbroker.audit.dto.AuditDto
- setIssuer(String) - Method in class swiss.trustbroker.config.dto.OidcProperties
-
XTB OIDC issuer ID.
- setIssuer(String) - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
Issuer ID used for all SAML2 messages XTB produces.
- setIssuer(String) - Method in class swiss.trustbroker.federation.xmlconfig.SloResponse
-
Issuer for SAML LogoutResponse.
- setIssuer(String) - Method in class swiss.trustbroker.saml.dto.CpResponse
-
CP Response issuer also referred to as HomeRealm.
- setIssuer(String) - Method in class swiss.trustbroker.sessioncache.dto.StateData
- setIssueRequireSignedAssertions(boolean) - Method in class swiss.trustbroker.config.dto.WsTrustConfig
-
Deprecated.
- setIssueRequireSignedRequests(boolean) - Method in class swiss.trustbroker.config.dto.WsTrustConfig
-
Require signed SOAP requests for WS-Trust ISSUE.
- setIssueRequireTimestamp(boolean) - Method in class swiss.trustbroker.config.dto.WsTrustConfig
-
WS-Trust ISSUE requires timestamp.
- setIssuerId(String) - Method in class swiss.trustbroker.config.dto.AccessRequestConfig
-
Global default issuer ID.
- setIssuerId(String) - Method in class swiss.trustbroker.federation.xmlconfig.AuthorizedApplication
-
Overrides the global issuer.
- setIssuerId(String) - Method in class swiss.trustbroker.federation.xmlconfig.OidcClient
-
CP issuer ID override for
issclaim validation. - setIssuerId(String) - Method in class swiss.trustbroker.oidc.client.dto.OpenIdProviderConfiguration
- setIssuerId(String) - Method in class swiss.trustbroker.saml.dto.ResponseParameters
- setIssuerInstant(Instant) - Method in class swiss.trustbroker.saml.dto.ResponseParameters
- setIssuerNameId(String) - Method in class swiss.trustbroker.federation.xmlconfig.IdmQuery
-
SAML federation filter to be applied to the user query.
- setIssuerNameIdNS(String) - Method in class swiss.trustbroker.federation.xmlconfig.IdmQuery
-
Instead of an issuerNameId the SAML federation can also be identified via its fully qualified homeName attribute as an input.
- setJsonClaim(String, Object) - Method in class swiss.trustbroker.saml.dto.CpResponse
-
Set claim value from collection or other value.
- setJsonClaims(String, Object) - Method in class swiss.trustbroker.saml.dto.CpResponse
-
Set claim value from collection or other value.
- setJsonData(String) - Method in class swiss.trustbroker.sessioncache.dto.StateEntity
- setJsonErrorPageHeaders(List<RegexNameValue>) - Method in class swiss.trustbroker.config.dto.OidcProperties
-
List of HTTP header names and regex matching the value.
- setJwk(String) - Method in class swiss.trustbroker.sessioncache.dto.JwkCacheEntity
- setJwkEndpoint(URI) - Method in class swiss.trustbroker.oidc.client.dto.OpenIdProviderConfiguration
- setJwkSet(JWKSet) - Method in class swiss.trustbroker.oidc.client.dto.OpenIdProviderConfiguration
- setJwkSetUrl(String) - Method in class swiss.trustbroker.federation.xmlconfig.ProtocolEndpoints
-
Jwk endpoint url
- setKeycloakTransparencyModeOn(boolean) - Method in class swiss.trustbroker.config.dto.OidcProperties
-
NOTE: Transparency mode simulates /realms/X URLs and IDs for all clients on redirects etc.
- setKeyDeletionMinutes(long) - Method in class swiss.trustbroker.config.dto.OidcProperties
-
Deletion of expired (rotated) keys in minutes.
- setKeyEncryptionAlgorithm(String) - Method in class swiss.trustbroker.federation.xmlconfig.Encryption
-
Key encryption algorithm.
- setKeyExpirationMinutes(long) - Method in class swiss.trustbroker.config.dto.OidcProperties
-
Expiration of keys in minutes.
- setKeyInfo(EncryptionKeyInfo) - Method in class swiss.trustbroker.federation.xmlconfig.Encryption
-
Value emitted in Key Info (CERTIFICATE, SKI).
- setKeyPath(String) - Method in class swiss.trustbroker.federation.xmlconfig.SignerKeystore
-
Path of the key.
- setKeyPath(String) - Method in class swiss.trustbroker.federation.xmlconfig.SignerTruststore
-
Path of the key.
- setKeyPlacement(EncryptionKeyPlacement) - Method in class swiss.trustbroker.federation.xmlconfig.Encryption
-
Key placement (PEER, INLINE).
- setKeySchedule(String) - Method in class swiss.trustbroker.config.dto.OidcProperties
-
Key rotation schedule.
- setKeystore(KeystoreProperties) - Method in class swiss.trustbroker.config.dto.ArtifactResolution
-
Default keystore for artifact resolution.
- setKeystore(KeystoreProperties) - Method in class swiss.trustbroker.config.dto.IdmConfig
-
Keystore for accessing the IDM.
- setKeystore(KeystoreProperties) - Method in class swiss.trustbroker.config.dto.OidcProperties
-
Default keystore for direct connections to OIDC CPs.
- setKeystoreBasePath(String) - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
Base path of the keystores configured in the XML configurations.
- setKeyType(String) - Method in class swiss.trustbroker.wstrustclient.dto.WsTrustRstRequest
- setLanguageCookie(CookieProperties) - Method in class swiss.trustbroker.config.dto.GuiProperties
-
Attributes for the cookie that stores the user's selected language.
- setLanguageCookie(CookieConfig) - Method in class swiss.trustbroker.homerealmdiscovery.dto.GuiConfig
- setLastConversationId(String) - Method in class swiss.trustbroker.sessioncache.dto.StateData
- setLdap(LdapStoreConfig) - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
Configuration for optional LDAP integration.
- setLegacy(Map<String, Integer>) - Method in class swiss.trustbroker.config.dto.QualityOfAuthenticationConfig
-
Mapping of legacy QoA values to QoaLevel.
- setLevel(Map<String, String>) - Method in class swiss.trustbroker.config.dto.Support
-
Logger names handle on a higher level than the default logging.logger level.
- setLifecycle(Lifecycle) - Method in class swiss.trustbroker.sessioncache.dto.StateData
- setLifecycleState(LifecycleState) - Method in class swiss.trustbroker.sessioncache.dto.Lifecycle
- setLifetimeMin(long) - Method in class swiss.trustbroker.config.dto.WsTrustConfig
-
Lifetime expiration in minutes.
- setLifeTimeMin(int) - Method in class swiss.trustbroker.config.dto.AnnouncementConfig
-
After this many minutes of connection loss discard the messages from the cache.
- setLifetimeSec(Integer) - Method in class swiss.trustbroker.config.dto.SecToken
-
Security token lifetime in seconds.
- setLink(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.Flow
-
Show error page including a link to
appUrl. - setLoginDurationSecs(Long) - Method in class swiss.trustbroker.audit.dto.AuditDto
- setLogoutEnabled(boolean) - Method in class swiss.trustbroker.config.dto.OidcProperties
-
Enable logout endpoint.
- setLogoutNotifications(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.Sso
-
Notify other SSO participants about the ongoing logout.
- setLogoutSsoGroup(String) - Method in class swiss.trustbroker.sso.service.SsoService.SloState
- setMainImage(String) - Method in class swiss.trustbroker.config.dto.Banner
-
Optional main image.
- setMainImage(String) - Method in class swiss.trustbroker.saml.dto.UiBanner
-
Main image of banner.
- setMapInbound(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.AcClass
-
Enable mapping of inbound QoA.
- setMapOutbound(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.AcClass
-
Enable mapping of outbound QoA.
- setMapOutbound(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.Qoa
-
Enable mapping of outbound QoA.
- setMappedNameId(String) - Method in class swiss.trustbroker.audit.dto.AuditDto
- setMappedNameId(String) - Method in class swiss.trustbroker.saml.dto.CpResponse
-
CP Response incoming subject name ID after CP side subject name mapping.
- setMappers(String) - Method in class swiss.trustbroker.config.dto.AttributeProperties
-
The claim mappers used for mapping the values.
- setMappers(String) - Method in class swiss.trustbroker.federation.xmlconfig.Definition
-
Comma-separated list of mappers to be used for the value.
- setMapping(Map<String, Integer>) - Method in class swiss.trustbroker.config.dto.QualityOfAuthenticationConfig
-
Global mapping of QoA values to QoaLevel.
- setMappings(List<RegexNameValue>) - Method in class swiss.trustbroker.config.dto.AccessRequestConfig
-
Mappings that might be needed by the implementation.
- setMappings(List<RegexNameValue>) - Method in class swiss.trustbroker.config.dto.IdmConfig
-
Mappings that might be needed by the implementation.
- setMatchAcUrl(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.SloResponse
-
Perform ACUrl matching for absolute url, prefix with ACUrl scheme/host/port for relative URL.
- setMaxAge(Integer) - Method in class swiss.trustbroker.config.dto.CookieProperties
-
Optional cookie maxAge
- setMaxAge(Integer) - Method in class swiss.trustbroker.homerealmdiscovery.dto.CookieConfig
- setMaxBanners(Integer) - Method in class swiss.trustbroker.config.dto.GuiProperties
-
Limit the number of banners shown on HRD.
- setMaxCachingTimeMinutes(int) - Method in class swiss.trustbroker.federation.xmlconfig.SsoGroup
-
Time in minutes an RP can access XTB reusing the currently active SSO session without the need to interact with the CP again on an established SSO session, except when the SAML
- setMaxCachingTimeSecs(int) - Method in class swiss.trustbroker.sessioncache.dto.SsoState
- setMaxIdleTimeMinutes(int) - Method in class swiss.trustbroker.federation.xmlconfig.SsoGroup
-
Time in minutes without any XTB SSO interaction leading to session removal.
- setMaxIdleTimeSecs(int) - Method in class swiss.trustbroker.sessioncache.dto.SsoState
- setMaxSessionTimeMinutes(int) - Method in class swiss.trustbroker.federation.xmlconfig.SsoGroup
-
Time in minutes an SSO session exists at most (even though there was interaction where the idle timeout did not expire yet).
- setMaxSessionTimeSecs(int) - Method in class swiss.trustbroker.sessioncache.dto.SsoState
- setMemoryLimitBytes(int) - Method in class swiss.trustbroker.config.dto.Support
-
Configure in-memory limits so network traffic cannot crash pods.
- setMessageId(String) - Method in class swiss.trustbroker.audit.dto.AuditDto
- setMessageLifetimeSec(long) - Method in class swiss.trustbroker.config.dto.SecurityChecks
-
IssueInstant timestamp check should accept Assertion.Condition.NotValidOnOrAfter over WS-Trust.
- setMetadataUrl(String) - Method in class swiss.trustbroker.federation.xmlconfig.ProtocolEndpoints
-
SAML/OIDC metadata URL.
- setMethods(List<ClientAuthenticationMethod>) - Method in class swiss.trustbroker.federation.xmlconfig.ClientAuthenticationMethods
-
List of authentication methods.
- setMigrationAlias(String) - Method in class swiss.trustbroker.federation.xmlconfig.HomeName
-
Used for provisioning during migration from a CP to another.
- setMinimumMetadataCacheTimeSecs(long) - Method in class swiss.trustbroker.config.dto.OidcProperties
-
Cached CP metadata is only refreshed if cached earlier than this.
- setMinQoa(Integer) - Method in class swiss.trustbroker.federation.xmlconfig.AuthorizedApplication
-
Matched against minimum QOA from SAML AuthnContextClassRef.
- setMinSessionLifetimeSec(int) - Method in class swiss.trustbroker.config.dto.StateCacheProperties
-
Prevents collecting sessions related to a pending login.
- setMobileGatewayIpRegex(String) - Method in class swiss.trustbroker.config.dto.NetworkConfig
- setMobileIdpId(String) - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
Mobile IDP ID that is used for CP filtering in HRD when XTB is accessed via configured IP addresses (mobileGatewayIpRegex).
- setMode(String) - Method in class swiss.trustbroker.federation.xmlconfig.AuthorizedApplication
-
Mode to be used for the AccessRequest, depending on the implementation.
- setMode(String) - Method in class swiss.trustbroker.sessioncache.dto.AccessRequestSessionState
- setMode(ProfileSelectionMode) - Method in class swiss.trustbroker.federation.xmlconfig.ProfileSelection
-
Mode for profile selection.
- setMode(SloMode) - Method in class swiss.trustbroker.federation.xmlconfig.SloResponse
-
The mode of this entry.
- setModes(List<String>) - Method in class swiss.trustbroker.federation.xmlconfig.Provisioning
-
Provisioning mode flags passed to the implementations.
- setMonitoring(MonitoringConfig) - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
Montiforing configuration.
- setMonitoringHints(List<RegexNameValue>) - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
HTTP markers identifying monitoring clients that cannot deal with new features.
- setMultiQueryPolicy(MultiResultPolicy) - Method in class swiss.trustbroker.federation.xmlconfig.IdmLookup
-
Handling of same attributes across queries.
- setMultiSourcePolicy(MultiResultPolicy) - Method in class swiss.trustbroker.federation.xmlconfig.AttributesSelection
-
Policy for merging attributes from multiple sources.
- setMultiValued(Multivalued) - Method in class swiss.trustbroker.federation.xmlconfig.Definition
-
Multi value handling.
- setN2kSeparator(String) - Method in class swiss.trustbroker.config.dto.LdapStoreConfig
-
Default value for n2k separator.
- setName(String) - Method in class swiss.trustbroker.config.dto.AttributeProperties
-
Short name used in auditing and for IDM attribute addressing.
- setName(String) - Method in class swiss.trustbroker.config.dto.Banner
-
Name of the banner used for referencing resources (texts, css class).
- setName(String) - Method in class swiss.trustbroker.config.dto.CookieProperties
-
Cookie name
- setName(String) - Method in class swiss.trustbroker.federation.xmlconfig.AuthorizedApplication
-
Required application name (usually corresponding to IDM).
- setName(String) - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsProvider
-
Name displayed to the user directly.
- setName(String) - Method in class swiss.trustbroker.federation.xmlconfig.Definition
-
Short name used in auditing and for IDM attribute addressing.
- setName(String) - Method in class swiss.trustbroker.federation.xmlconfig.IdmQuery
-
Name of the query, depending on the IdmService implementation.
- setName(String) - Method in class swiss.trustbroker.federation.xmlconfig.Script
-
The value identifies the script stored in the trustbroker-inventories definition/scripts directory.
- setName(String) - Method in class swiss.trustbroker.federation.xmlconfig.SsoGroup
-
Mandatory group name.
- setName(String) - Method in class swiss.trustbroker.homerealmdiscovery.dto.CookieConfig
- setName(String) - Method in class swiss.trustbroker.oidc.session.SessionPrincipal
- setName(String) - Method in class swiss.trustbroker.saml.dto.UiBanner
-
Name of the banner referencing configuration.
- setName(String) - Method in class swiss.trustbroker.saml.dto.UiObject
-
name is displayed on the tile given it's not used as a key into the translation service or overridden by tileTitle.
- setNameId(String) - Method in class swiss.trustbroker.saml.dto.CpResponse
-
Subject name ID.
- setNameId(String) - Method in class swiss.trustbroker.saml.dto.ResponseParameters
- setNameIdFormat(String) - Method in class swiss.trustbroker.saml.dto.CpResponse
-
Format of the subject name ID.
- setNameIdFormat(String) - Method in class swiss.trustbroker.saml.dto.ResponseParameters
- setNameIdQualifier(String) - Method in class swiss.trustbroker.saml.dto.ResponseParameters
- setNamespace(String) - Method in class swiss.trustbroker.config.dto.SamlNamespace
-
SAML namespace.
- setNamespacePrefix(String) - Method in class swiss.trustbroker.federation.xmlconfig.Flow
-
Prefix if there are multiple
- setNamespaceUri(String) - Method in class swiss.trustbroker.audit.dto.AuditDto.ResponseAttributeValue
- setNamespaceUri(String) - Method in class swiss.trustbroker.config.dto.AttributeProperties
-
The long name is used in the generated SAML assertion towards the RP.
- setNamespaceUri(String) - Method in class swiss.trustbroker.federation.xmlconfig.Definition
-
The long name is used in the generated SAML assertion towards the RP.
- setNeedToKnow(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.ProfileSelection
-
Apply name/value transformation.
- setNestedStatus(String) - Method in class swiss.trustbroker.audit.dto.AuditDto
- setNetwork(NetworkConfig) - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
Network configuration.
- setNetworkHeader(String) - Method in class swiss.trustbroker.config.dto.NetworkConfig
-
HTTP header delivering the client network.
- setNotBeforeToleranceSec(long) - Method in class swiss.trustbroker.config.dto.SecurityChecks
-
Any timestamp tolerance NTP drift tolerance.
- setNoticeClaimsProviders(List<String>) - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsProvider
-
The list of ClaimsProviders name
- setNoticeClaimsProviders(List<String>) - Method in class swiss.trustbroker.saml.dto.UiObject
-
The list of ClaimsProviders name
- setNoticeEnabled(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsProvider
-
Notice enabled
- setNoticeMaxAgeSec(Integer) - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsProvider
-
Notice max age
- setNoticeMaxAgeSec(Integer) - Method in class swiss.trustbroker.saml.dto.UiObject
-
Notice max age
- setNotOnOrAfterSeconds(Integer) - Method in class swiss.trustbroker.federation.xmlconfig.SecurityPolicies
-
Overrides the global
tokenLifetimeSecfor CP response AuthnInstant checks. - setNotOnOrAfterToleranceSec(long) - Method in class swiss.trustbroker.config.dto.SecurityChecks
-
Any timestamp clock/transfer tolerance.
- setNumCp(Integer) - Method in class swiss.trustbroker.monitoring.dto.MonitoringResponse
- setOidc(String) - Method in class swiss.trustbroker.config.dto.ContentSecurityPolicies
-
CSP configuration for OIDC.
- setOidc(String) - Method in class swiss.trustbroker.config.dto.FrameOptionsPolicies
-
/app/device and other api services might run in an application iframe so switch from deny to same origin.
- setOidc(OidcProperties) - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
OIDC protocol configuration.
- setOidc(Oidc) - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsParty
-
OIDC client configuration to integrate CP/IDP
- setOidc(Oidc) - Method in class swiss.trustbroker.federation.xmlconfig.RelyingParty
-
OIDC client configuration for this RP.
- setOidcClientId(String) - Method in class swiss.trustbroker.audit.dto.AuditDto
- setOidcClientId(String) - Method in class swiss.trustbroker.audit.dto.OidcAuditData
- setOidcClientId(String) - Method in class swiss.trustbroker.oidc.session.HttpExchangeSupport
- setOidcClientId(String) - Method in class swiss.trustbroker.oidc.session.TomcatSession
- setOidcClientId(String) - Method in class swiss.trustbroker.saml.dto.CpResponse
-
Incoming OIDC client_id.
- setOidcClientId(String) - Method in class swiss.trustbroker.sessioncache.dto.SsoSessionParticipant
- setOidcClientId(String) - Method in class swiss.trustbroker.sessioncache.dto.StateData
- setOidcConfigurations(Map<String, Pair<RelyingParty, OidcClient>>) - Method in class swiss.trustbroker.config.dto.RelyingPartyDefinitions
- setOidcIdpCredential(OidcIdpCredential) - Method in class swiss.trustbroker.config.dto.RelyingPartyDefinitions
- setOidcLogoutUrl(String) - Method in class swiss.trustbroker.audit.dto.OidcAuditData
- setOidcMapper(ClaimsMapper) - Method in class swiss.trustbroker.federation.xmlconfig.Definition
-
Deprecated.use mappers
- setOidcNameList(List<String>) - Method in class swiss.trustbroker.config.dto.AttributeProperties
-
The claim names used when emitting an attribute to an OIDC client.
- setOidcNames(String) - Method in class swiss.trustbroker.federation.xmlconfig.Definition
-
The claim names used when emitting an attribute to an OIDC client (comma-separated - as an attribute, it cannot be a List).
- setOidcNonce(String) - Method in class swiss.trustbroker.sessioncache.dto.StateData
- setOidcOnly(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.ProfileSelection
-
Apply name/value transformation for n2k only for Oidc.
- setOidcRefreshToken(String) - Method in class swiss.trustbroker.sessioncache.dto.StateData
- setOidcRequest(boolean) - Method in class swiss.trustbroker.oidc.session.HttpExchangeSupport
- setOidcScopes(Set<String>) - Method in class swiss.trustbroker.saml.dto.CpResponse
-
Incoming OIDC scopes.
- setOidcSecurityPolicies(OidcSecurityPolicies) - Method in class swiss.trustbroker.federation.xmlconfig.OidcClient
-
Override security policies.
- setOidcSession(TomcatSession) - Method in class swiss.trustbroker.oidc.session.HttpExchangeSupport
- setOidcSessionData(String) - Method in class swiss.trustbroker.sessioncache.dto.StateData
- setOidcSessionId(String) - Method in class swiss.trustbroker.audit.dto.OidcAuditData
- setOidcSessionId(String) - Method in class swiss.trustbroker.sessioncache.dto.SsoSessionParticipant
- setOidcSessionId(String) - Method in class swiss.trustbroker.sessioncache.dto.StateData
- setOidcSessionId(String) - Method in class swiss.trustbroker.sessioncache.dto.StateEntity
- setOidcTokenCount(int) - Method in class swiss.trustbroker.sessioncache.dto.StateData
- setOidcTokenData(String) - Method in class swiss.trustbroker.sessioncache.dto.StateData
- setOpaqueRefreshTokenEnabled(boolean) - Method in class swiss.trustbroker.config.dto.OidcProperties
-
Deprecated.
- setOps(OpsAuditConfig) - Method in class swiss.trustbroker.config.dto.AuditConfig
- setOptional(String) - Method in interface swiss.trustbroker.wstrustclient.xml.ClaimType
- setOptional(String) - Method in class swiss.trustbroker.wstrustclient.xml.ClaimTypeImpl
- setOptionalBoolean(Boolean) - Method in interface swiss.trustbroker.wstrustclient.xml.ClaimType
- setOptionalBoolean(Boolean) - Method in class swiss.trustbroker.wstrustclient.xml.ClaimTypeImpl
- setOrder(Integer) - Method in class swiss.trustbroker.config.dto.Banner
-
Banner display order for global banners or if no order is defined for the CP.
- setOrder(Integer) - Method in class swiss.trustbroker.federation.xmlconfig.AcClass
-
ACClass QoA order.
- setOrder(Integer) - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsProvider
-
Indicates the order of display in the UI.
- setOrder(Integer) - Method in class swiss.trustbroker.federation.xmlconfig.IdmQuery
-
The order of the execution of the query.
- setOrder(Integer) - Method in class swiss.trustbroker.saml.dto.UiBanner
-
Order of the banner.
- setOrder(Integer) - Method in class swiss.trustbroker.saml.dto.UiObject
-
order allows to compose multiple tiles in a flexible manner.
- setOrganizationSelector(String) - Method in class swiss.trustbroker.federation.xmlconfig.ProfileSelection
-
Attribute used as selector (kind of unique Secondary Key) for organization selection.
- setOriginalAttributes(List<String>) - Method in class swiss.trustbroker.config.dto.AccessRequestConfig
-
Special attributes that might be marked as coming from the original issuer i.e.
- setOriginalAttributes(Map<Definition, List<String>>) - Method in class swiss.trustbroker.saml.dto.CpResponse
-
Copy of Attributes before filtering.
- setOriginalIssuer(String) - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsParty
-
The original issuer is by default consumed as is and not changed in the CP handling of XTB.
- setOriginalNameId(String) - Method in class swiss.trustbroker.saml.dto.CpResponse
-
CP Response incoming subject name ID used for internal processing.
- setOriginalPropertiesCount(int) - Method in class swiss.trustbroker.saml.dto.CpResponse
- setOriginalUserDetailsCount(int) - Method in class swiss.trustbroker.saml.dto.CpResponse
- setOrigins(List<String>) - Method in class swiss.trustbroker.federation.xmlconfig.AcWhitelist
- setOriginSet(Set<String>) - Method in class swiss.trustbroker.federation.xmlconfig.AcWhitelist
- setOutboundMode(ArtifactBindingMode) - Method in class swiss.trustbroker.federation.xmlconfig.ArtifactBinding
-
Mode for outbound Artifact binding.
- setParsedJsonAsClaim(String, String) - Method in class swiss.trustbroker.saml.dto.CpResponse
-
Parse value as JSON and add.
- setParticipants(Set<SsoParticipant>) - Method in class swiss.trustbroker.saml.dto.SsoParticipants
- setPassword(String) - Method in class swiss.trustbroker.config.dto.WsTrustConfig
-
Keystore password.
- setPassword(String) - Method in class swiss.trustbroker.federation.xmlconfig.SignerKeystore
-
Password for the store.
- setPassword(String) - Method in class swiss.trustbroker.federation.xmlconfig.SignerTruststore
-
Password for the store.
- setPath(String) - Method in class swiss.trustbroker.config.dto.CookieProperties
-
Optional cookie path
- setPath(String) - Method in class swiss.trustbroker.homerealmdiscovery.dto.CookieConfig
- setPenTestScenario(String) - Method in class swiss.trustbroker.oidc.session.HttpExchangeSupport
- setPerimeterUrl(String) - Method in class swiss.trustbroker.config.dto.OidcProperties
-
XTB OIDC perimeter URL.
- setPerimeterUrl(String) - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
Perimeter URL that is used to access XTB.
- setPersistentCache(Boolean) - Method in class swiss.trustbroker.config.dto.ArtifactResolution
-
Persist artifact cache.
- setPhoneNumber(String) - Method in class swiss.trustbroker.homerealmdiscovery.dto.SupportInfo
- setPrefix(String) - Method in class swiss.trustbroker.config.dto.SamlNamespace
-
Optional prefix added if the namespace is removed.
- setPreserve(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.SubjectNameMappings
-
If true, do not overwrite nameId if differing from originalNameId (i.e.
- setPrincipal(String) - Method in class swiss.trustbroker.audit.dto.AuditDto
- setPrincipal(Principal) - Method in class swiss.trustbroker.oidc.session.TomcatSession
- setProfile(String) - Method in class swiss.trustbroker.config.dto.TechUserProperties
-
User profile in IDM.
- setProfileExtId(String) - Method in class swiss.trustbroker.audit.dto.AuditDto
- setProfileId(String) - Method in class swiss.trustbroker.homerealmdiscovery.dto.ProfileRequest
- setProfileSelection(ProfileSelectionConfig) - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
Profile selection configuration.
- setProfileSelection(ProfileSelection) - Method in class swiss.trustbroker.federation.xmlconfig.RelyingParty
-
Profile selection configuration for this RP.
- setProfileSelector(String) - Method in class swiss.trustbroker.federation.xmlconfig.ProfileSelection
-
Attribute used as selector (kind of unique Primary Key) for profile selection.
- setProperties(String, String, List<String>) - Method in class swiss.trustbroker.saml.dto.CpResponse
-
Script hook use: Add CP/IDP claims with a list value.using FQ name.
- setProperties(String, List<String>) - Method in class swiss.trustbroker.saml.dto.CpResponse
-
Script hook use: Add entry with a list value.
- setProperties(Map<Definition, List<String>>) - Method in class swiss.trustbroker.saml.dto.CpResponse
-
Properties contain computed values that can be sent as RP attributes based on incoming CP attributes and userdetails.
- setProperties(CpResponse) - Method in class swiss.trustbroker.saml.service.RelyingPartyService
- setPropertiesSelection(AttributesSelection) - Method in class swiss.trustbroker.federation.xmlconfig.RelyingParty
-
Properties selection identifies the computed/derived attributes passed through to the RP.
- setProperty(String, String) - Method in class swiss.trustbroker.saml.dto.CpResponse
-
Script hook use: Add entry with a single value
- setProperty(String, String, String) - Method in class swiss.trustbroker.saml.dto.CpResponse
-
Script hook use: Add entry with a single value
- setProtocol(SloProtocol) - Method in class swiss.trustbroker.federation.xmlconfig.SloResponse
-
The protocol for which this entry applies.
- setProtocolEndpoints(ProtocolEndpoints) - Method in class swiss.trustbroker.federation.xmlconfig.OidcClient
-
OpenID endpoints a single CP side OIDC client uses for federated login.
- setProtocolEndpoints(ProtocolEndpoints) - Method in class swiss.trustbroker.federation.xmlconfig.Saml
-
SAML protocol endpoint configuration.
- setProvision(String) - Method in class swiss.trustbroker.federation.xmlconfig.Definition
-
Provision this attribute to IDM.
- setProvision(ProvisioningMode) - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsParty
-
Enable IDM provisioning based on CP response.
- setProvisioning(Provisioning) - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsParty
-
Provisioning configurations for this CP.
- setProvisioningId(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.Definition
-
ID attribute for provisioning.
- setProxyUrl(String) - Method in class swiss.trustbroker.config.dto.ArtifactResolution
-
Deprecated.Use NetworkConfig.proxyUrl
- setProxyUrl(String) - Method in class swiss.trustbroker.config.dto.NetworkConfig
-
Default proxy URL.
- setProxyUrl(String) - Method in class swiss.trustbroker.federation.xmlconfig.ProtocolEndpoints
-
Proxy URL for these endpoints that overrides global default.
- setPublicAutoLoginCookie(String) - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
Autologin cookie that can be used for CP filtering in HRD.
- setPublicIdpId(String) - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
Deprecated.Replaced by the 'first' marker on the network, e.g. INTERNET-first.
- setPublicPenTestCookie(String) - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
PEN testing cookie that can be used to implement penetration testing scenarios on the OnMessage hook.
- setPublicTestCookie(String) - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
Testing cookie us used to signal special handling for test users e.g.
- setPushedAuthorizationRequestsEndpointEnabled(boolean) - Method in class swiss.trustbroker.config.dto.OidcProperties
-
Enable pushed authorization requests endpoints.
- setQoa(QualityOfAuthenticationConfig) - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
QoA configuration.
- setQoa(Qoa) - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsParty
-
QoA configurations for this CP.
- setQoa(Qoa) - Method in class swiss.trustbroker.federation.xmlconfig.OidcClient
-
QoAs to use.
- setQoa(Qoa) - Method in class swiss.trustbroker.federation.xmlconfig.RelyingParty
-
QoA configurations for this RP.
- setQueriedStores(Set<String>) - Method in class swiss.trustbroker.saml.dto.CpResponse
-
Contains the stores of IDM lookups actually executed by the available
IdmQueryServiceimplementations - including those that did not find a result. - setQueries(List<IdmQuery>) - Method in class swiss.trustbroker.federation.xmlconfig.IdmLookup
-
List of queries to be executed.
- setQuerySource(String) - Method in class swiss.trustbroker.audit.dto.AuditDto.ResponseAttributeValue
- setRealm(String) - Method in class swiss.trustbroker.federation.xmlconfig.OidcClient
-
Optional support to be able to map back /oauth2/authorize
- setReapMaxDelaySec(int) - Method in class swiss.trustbroker.config.dto.StateCacheProperties
-
Delay at most 25 sec randomly to allow multiple reapers on the same session DB.
- setReapSchedule(String) - Method in class swiss.trustbroker.config.dto.StateCacheProperties
-
Use by scheduled job checking for expired sessions and delete them from the session DB StateCache.
- setReapWarnThresholdMs(int) - Method in class swiss.trustbroker.config.dto.StateCacheProperties
-
Expected reap cycle execution in milliseconds before we start to WARN about bad performance.
- setReauthTime(Timestamp) - Method in class swiss.trustbroker.sessioncache.dto.Lifecycle
- setRecipient(String) - Method in class swiss.trustbroker.federation.xmlconfig.AuthorizedApplication
-
Overrides the global AccessRequest recipientId.
- setRecipientId(String) - Method in class swiss.trustbroker.config.dto.AccessRequestConfig
-
Global default recipient ID.
- setRecipientId(String) - Method in class swiss.trustbroker.saml.dto.ResponseParameters
- setRedirectBindingSignatureWarning(boolean) - Method in class swiss.trustbroker.config.dto.SecurityChecks
-
Deprecated.
- setRedirectUri(HttpSession, String) - Static method in class swiss.trustbroker.oidc.session.OidcSessionSupport
- setRedirectUris(AcWhitelist) - Method in class swiss.trustbroker.federation.xmlconfig.OidcClient
-
Permitted redirect URLs for this client.
- setRedirectUrl(String) - Method in class swiss.trustbroker.federation.xmlconfig.AuthorizedApplication
-
URL to be redirected to after AccessRequest.
- setRedirectUrls(List<String>) - Method in class swiss.trustbroker.federation.xmlconfig.AcWhitelist
- setReference(String) - Method in class swiss.trustbroker.federation.xmlconfig.HomeName
-
The homeName is usually consumed from the home name attribute and identifies the CP attribute to consume the CP identity from.
- setReferer(String) - Method in class swiss.trustbroker.saml.dto.RpRequest
-
Referer header from the incoming HTTP request.
- setReferer(String) - Method in class swiss.trustbroker.sessioncache.dto.StateData
- setReferrer(String) - Method in class swiss.trustbroker.audit.dto.AuditDto
- setRefreshTokenTimeToLiveMin(Integer) - Method in class swiss.trustbroker.federation.xmlconfig.OidcSecurityPolicies
-
Overrides tokenTimeToLiveMin for the refresh token.
- setRegisteredClient(RegisteredClient) - Method in class swiss.trustbroker.federation.xmlconfig.OidcClient
- setRelayState(String) - Method in class swiss.trustbroker.sessioncache.dto.StateData
- setRelayStateResolver(Converter<HttpServletRequest, String>) - Method in class swiss.trustbroker.oidc.opensaml5.OpenSaml5AuthenticationRequestResolver
-
Use this
Converterto compute the RelayState - setReLogin(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.Flow
-
Show error page including re-login button (triggers another login).
- setRelyingParties(List<ConfigElementStatus>) - Method in class swiss.trustbroker.federation.dto.ConfigStatusData
- setRelyingParties(List<RelyingParty>) - Method in class swiss.trustbroker.federation.xmlconfig.RelyingPartySetup
-
List of RPs.
- setRelyingPartyAlias(String) - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsProvider
-
By providing a relying party ID on the HRD declaration, it's not necessary anymore to copy and paste entire RP definition files just to be able to automatically selecting an RP without showing a HRD selection screen.
- setRelyingPartySetup(String) - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
Relative path of the SetupRP file.
- setRelyingPartySetup(RelyingPartySetup) - Method in class swiss.trustbroker.config.dto.RelyingPartyDefinitions
- setRemoteRepoUri(String) - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
Git repo.
- setRemoveUserInfoClaims(List<String>) - Method in class swiss.trustbroker.config.dto.OidcProperties
-
Claims to remove for user info.
- setRenew(boolean) - Method in class swiss.trustbroker.saml.util.AssertionValidator.ExpectedAssertionValues
- setRenewEnabled(boolean) - Method in class swiss.trustbroker.config.dto.WsTrustConfig
-
Deprecated.use bindings
- setRenewNotOnOrAfterToleranceRenewSec(long) - Method in class swiss.trustbroker.config.dto.SecurityChecks
-
Duration after expiration of an assertion for which WS-Trust RENEW request is accepted.
- setRenewRequireSignedRequests(boolean) - Method in class swiss.trustbroker.config.dto.WsTrustConfig
-
Require signed SOAP requests for WS-Trust RENEW.
- setRenewRequiresSecurityToken(boolean) - Method in class swiss.trustbroker.config.dto.WsTrustConfig
-
RENEW request requires a valid security token.
- setRenewRequiresSsoSession(boolean) - Method in class swiss.trustbroker.config.dto.WsTrustConfig
-
RENEW request requires a valid SSO session.
- setReplaceInbound(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.AcClass
-
Replace inbound Qoa from RP request.
- setReplaceInbound(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.Qoa
-
Replace incoming Qoa from the request Only applied on RP side
Default: false - setRequestAttribute(String, T, boolean) - Static method in class swiss.trustbroker.util.WebSupport
- setRequestBinding(SamlBinding) - Method in class swiss.trustbroker.sessioncache.dto.StateData
- setRequestedResponseBinding(SamlBinding) - Method in class swiss.trustbroker.sessioncache.dto.StateData
- setRequestId(String) - Method in class swiss.trustbroker.saml.dto.RpRequest
-
ID of the incoming message (e.g.
- setRequestMatcher(RequestMatcher) - Method in class swiss.trustbroker.oidc.opensaml5.OpenSaml5AuthenticationRequestResolver
-
Set the
RequestMatcherto use for setting theOpenSamlAuthenticationRequestResolver.setRequestMatcher(RequestMatcher)(RequestMatcher)} - setRequestMatcher(RequestMatcher) - Method in class swiss.trustbroker.oidc.opensaml5.OpenSaml5AuthenticationTokenConverter
-
Use the given
RequestMatcherto match the request. - setRequestType(String) - Method in class swiss.trustbroker.wstrustclient.dto.WsTrustRstRequest
- setRequireAudienceRestriction(boolean) - Method in class swiss.trustbroker.config.dto.SecurityChecks
-
Enforce presence and validation of audience restriction for other subject confirmations (e.g.
- setRequireAudienceRestriction(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.SecurityPolicies
-
Overrides global SecurityChecks
- setRequireAudienceRestrictionForBearerSubjectConfirmation(boolean) - Method in class swiss.trustbroker.config.dto.SecurityChecks
-
Enforce presence and validation of audience restriction for bearer subject confirmations.
- setRequireAudienceRestrictionForBearerSubjectConfirmation(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.SecurityPolicies
-
Overrides global SecurityChecks
- setRequireAuthorizationConsent(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.OidcSecurityPolicies
-
Require authorization consent (currently unsupported).
- setRequired(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.Definition
-
Indicates whether this attribute is mandatory.
- setRequireEncryptedAssertion(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.SecurityPolicies
-
Allow to disable required encrypted Assertion when the EncryptionKeystore is configured.
- setRequireIdTokenEncryption(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.OidcSecurityPolicies
-
Allow to enable Encrypted IdToken JWT Singing for Rp.
- setRequireOpaqueAccessToken(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.OidcSecurityPolicies
-
Allow to enable Opaque AccessToken for Rp.
- setRequireOpaqueRefreshToken(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.OidcSecurityPolicies
-
Allow to enable Opaque RefreshToken for Rp.
- setRequireOriginalIssuerClaims(List<String>) - Method in class swiss.trustbroker.saml.dto.ResponseParameters
- setRequireProofKey(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.OidcSecurityPolicies
-
Require Proof Key for Code Exchange (PKCE).
- setRequireSignedArtifactResolve(boolean) - Method in class swiss.trustbroker.config.dto.SecurityChecks
-
Reject unsigned ArtifactResolve?
Default: true - setRequireSignedArtifactResponse(boolean) - Method in class swiss.trustbroker.config.dto.SecurityChecks
-
Reject unsigned ArtifactResponse?
Default: true - setRequireSignedArtifactResponse(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.SecurityPolicies
-
Flag allows to enforce signed SAML artifact responses from CP required for maximum security to assert integrity of the incoming artifact response message.
- setRequireSignedAssertion(boolean) - Method in class swiss.trustbroker.config.dto.SecurityChecks
-
Reject unsigned Assertions?
Default: true - setRequireSignedAuthnRequest(boolean) - Method in class swiss.trustbroker.config.dto.SecurityChecks
-
Reject unsigned AuthnRequest?
Default: true - setRequireSignedAuthnRequest(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.SecurityPolicies
-
Allow to disable signature check for incoming SAML AuthnRequests.
- setRequireSignedAuthnRequestForSsoJoin(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.SecurityPolicies
-
Require signed SAML AuthnRequests to join an SSO session.
- setRequireSignedLogoutNotificationRequest(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.SecurityPolicies
-
Allow to disable signature check for outgoing SLO notification LogoutRequests.
- setRequireSignedLogoutRequest(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.SecurityPolicies
-
Allow to disable signature check for incoming LogoutRequests.
- setRequireSignedResponse(boolean) - Method in class swiss.trustbroker.config.dto.SecurityChecks
-
Reject unsigned Response?
Default: true - setRequireSignedResponse(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.SecurityPolicies
-
Flag allows to enforce signed SAML responses from CP required for maximum security to assert integrity of the incoming message and assertion.
- setRequireSubjectConfirmation(boolean) - Method in class swiss.trustbroker.config.dto.SecurityChecks
-
In WS-Trust RST case we per default require a valid subject confirmation.
- setRequireUserInfoResponseEncryption(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.OidcSecurityPolicies
-
Allow to enable Encrypted UserInfo response
Default: false - setResolvedCertPath(String) - Method in class swiss.trustbroker.federation.xmlconfig.SignerStore
- setResolvedKeyPath(String) - Method in class swiss.trustbroker.federation.xmlconfig.SignerStore
- setResourceList(Set<String>) - Method in class swiss.trustbroker.federation.xmlconfig.Resources
-
List of resources.
- setResources(Resources) - Method in class swiss.trustbroker.federation.xmlconfig.OidcClient
-
OIDC allowed resources in TokenExchange.
- setResponseAttributes(Map<String, AuditDto.ResponseAttributeValues>) - Method in class swiss.trustbroker.audit.dto.AuditDto
- setResponseAuthenticationConverter(Converter<OpenSaml5AuthenticationProvider.ResponseToken, ? extends AbstractAuthenticationToken>) - Method in class swiss.trustbroker.oidc.opensaml5.OpenSaml5AuthenticationProvider
-
Set the
Converterto use for converting a validatedResponseinto anAbstractAuthenticationToken. - setResponseElementsDecrypter(Consumer<OpenSaml5AuthenticationProvider.ResponseToken>) - Method in class swiss.trustbroker.oidc.opensaml5.OpenSaml5AuthenticationProvider
-
Set the
Consumerstrategy to use for decrypting elements of a validatedResponse. - setResponseId(String) - Method in class swiss.trustbroker.sessioncache.dto.AccessRequestSessionState
- setResponseIssuer(String) - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsParty
-
Override ID as expected issuer of CP response.
- setResponseIssuerId(String) - Method in class swiss.trustbroker.config.dto.OidcIdentityProvider
-
Issuer for the response.
- setResponseMode(ResponseMode) - Method in class swiss.trustbroker.federation.xmlconfig.OidcClient
-
Response mode to be requested from CP.
- setResponseSent(boolean) - Method in class swiss.trustbroker.sso.service.SsoService.SloState
- setResponseTypes(List<String>) - Method in class swiss.trustbroker.config.dto.OidcProperties
-
Enabled response types.
- setResponseValidator(Converter<OpenSaml5AuthenticationProvider.ResponseToken, Saml2ResponseValidatorResult>) - Method in class swiss.trustbroker.oidc.opensaml5.OpenSaml5AuthenticationProvider
-
Set the
Converterto use for validating the SAML 2.0 Response. - setResult(Definition, List<String>) - Method in class swiss.trustbroker.saml.dto.CpResponse
-
Set results with definition as key.
- setResults(Map<Definition, List<String>>) - Method in class swiss.trustbroker.saml.dto.CpResponse
-
The results map contains these SAML attributes: CP SAML Response attributes extracted from the message (PassThrough Claims from CP) Derived attributes computed in ScriptService BeforeIdm hooks (Computed CP claims) IDM attributes retrieved from the IDMService Derived attributes computed in ScriptService AfterIdm hooks (Computed IDM claims) The names in this map are usually fully qualified as represented in the SAML response from the CP.
- setReturnUrl(String) - Method in class swiss.trustbroker.sessioncache.dto.AccessRequestSessionState
- setReuseRefreshTokens(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.OidcSecurityPolicies
-
Reuse refresh tokens.
- setRevocationEnabled(boolean) - Method in class swiss.trustbroker.config.dto.OidcProperties
-
Enable revocation endpoint.
- setRevocationEndpointAuthMethods(List<String>) - Method in class swiss.trustbroker.config.dto.OidcProperties
-
Enabled revocation endpoint auth methods.
- setRoles(Set<String>) - Method in class swiss.trustbroker.config.dto.TechUserProperties
-
Roles in IDM.
- setRolloverSigner(KeystoreProperties) - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
Signer used during rollover.
- setRpAuthnRequestId(String) - Method in class swiss.trustbroker.saml.dto.ResponseParameters
- setRpClientName(String) - Method in class swiss.trustbroker.saml.dto.ResponseParameters
- setRpComparison(QoaComparison) - Method in class swiss.trustbroker.saml.dto.ResponseParameters
- setRpContext(Map<String, String>) - Method in class swiss.trustbroker.saml.dto.CpResponse
-
The HttpServletRequest params, some specific ones: username, Client_Network
- setRpContext(Map<String, String>) - Method in class swiss.trustbroker.sessioncache.dto.StateData
- setRpContextClasses(List<String>) - Method in class swiss.trustbroker.saml.dto.CpResponse
-
Incoming context class requirements on RP side.
- setRpContextClasses(List<String>) - Method in class swiss.trustbroker.saml.dto.ResponseParameters
- setRpDecryptionCredentials(List<Credential>) - Method in class swiss.trustbroker.federation.xmlconfig.RelyingParty
- setRpDestination(String) - Method in class swiss.trustbroker.saml.dto.CpResponse
-
Override SAML Response.Destination on RP side.
- setRpEncryptionTrustCredential(Credential) - Method in class swiss.trustbroker.federation.xmlconfig.RelyingParty
- setRpId(String) - Method in class swiss.trustbroker.saml.dto.SsoParticipant
- setRpIssuer(String) - Method in class swiss.trustbroker.audit.dto.AuditDto
- setRpIssuer(String) - Method in class swiss.trustbroker.saml.dto.CpResponse
-
Incoming issuer on RP side.
- setRpIssuer(String) - Method in class swiss.trustbroker.saml.dto.RpRequest
-
Issuer of the incoming SAML request
- setRpIssuerId(String) - Method in class swiss.trustbroker.saml.dto.ResponseParameters
- setRpIssuerId(String) - Method in class swiss.trustbroker.sessioncache.dto.AccessRequestSessionState
- setRpIssuerId(String) - Method in class swiss.trustbroker.sessioncache.dto.SsoSessionParticipant
- setRpRecipient(String) - Method in class swiss.trustbroker.saml.dto.CpResponse
-
Override SAML SubjectConfirmationData.Recipient on RP side.
- setRpReferer(String) - Method in class swiss.trustbroker.saml.dto.CpResponse
-
Incoming HTTP referrer on RP side.
- setRpReferer(String) - Method in class swiss.trustbroker.saml.dto.ResponseParameters
- setRpReferrer(String) - Method in class swiss.trustbroker.audit.dto.AuditDto
- setRpSigner(Credential) - Method in class swiss.trustbroker.federation.xmlconfig.RelyingParty
- setRpTrustCredentials(List<Credential>) - Method in class swiss.trustbroker.federation.xmlconfig.RelyingParty
- setRpUrn(String) - Method in class swiss.trustbroker.saml.dto.DeviceInfoReq
- setRstAddress(String) - Method in class swiss.trustbroker.wstrustclient.dto.WsTrustRstRequest
- setRunningOidcClientId(String) - Static method in class swiss.trustbroker.oidc.session.HttpExchangeSupport
- setRunningPenTestScenario(String) - Static method in class swiss.trustbroker.oidc.session.HttpExchangeSupport
- setSameSite(String) - Method in class swiss.trustbroker.config.dto.CookieProperties
-
Optional cookie sameSite flag.
- setSameSite(String) - Method in class swiss.trustbroker.homerealmdiscovery.dto.CookieConfig
- setSaml(String) - Method in class swiss.trustbroker.config.dto.ContentSecurityPolicies
-
CSP configuration for SAML.
- setSaml(SamlProperties) - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
SAML protocol configuration.
- setSaml(Saml) - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsParty
-
SAML protocol configuration for this CP.
- setSaml(Saml) - Method in class swiss.trustbroker.federation.xmlconfig.RelyingParty
-
SAML protocol configuration for this RP.
- setSaml2TokenExchangeEnabled(boolean) - Method in class swiss.trustbroker.config.dto.OidcProperties
-
Allow saml2 token exchange.
- setSamlEncrypt(boolean) - Method in class swiss.trustbroker.config.dto.OidcProperties
-
Encrypt internal SAML messages to XTB.
- setSamlErrorCodeRegexMappings(List<RegexNameValue>) - Method in class swiss.trustbroker.config.dto.OidcProperties
-
SAML error code mappings.
- setSamlHttpMethod(String) - Method in class swiss.trustbroker.sso.dto.SloNotification
- setSamlLogoutRequest(String) - Method in class swiss.trustbroker.sso.dto.SloNotification
- setSamlMessage(XMLObject) - Method in class swiss.trustbroker.audit.dto.AuditDto
- setSamlNamespacesMappedToOidcFormat(List<SamlNamespace>) - Method in class swiss.trustbroker.config.dto.OidcProperties
-
SAML namespace to OIDC mappings.
- setSamlRedirectSignature(String) - Method in class swiss.trustbroker.sso.dto.SloNotification
- setSamlRedirectSignatureAlgorithm(String) - Method in class swiss.trustbroker.sso.dto.SloNotification
- setSamlRelayState(String) - Method in class swiss.trustbroker.sso.dto.SloNotification
- setSaveStateOnValidationFailure(boolean) - Method in class swiss.trustbroker.config.dto.SecurityChecks
-
Register state in DB even when validation fails.
- setSchemaMigration(boolean) - Method in class swiss.trustbroker.config.dto.StateCacheProperties
-
State cache schema migration.
- setScope(String) - Method in class swiss.trustbroker.federation.xmlconfig.Definition
-
To restrict emitting an attribute, the scope can be set as follows: saml: Use only in SAML assertions oidc: Use only in OIDC tokens (oidcName must be set) If not set, the attribute is emitted on all protocols and any requested OIDC scope.
- setScope(SubjectNameScope) - Method in class swiss.trustbroker.federation.xmlconfig.SubjectName
-
Scope of the SubjectName
- setScopeList(List<String>) - Method in class swiss.trustbroker.federation.xmlconfig.Scopes
-
List of scopes.
- setScopes(String) - Method in class swiss.trustbroker.audit.dto.AuditDto
- setScopes(List<String>) - Method in class swiss.trustbroker.config.dto.OidcProperties
-
Enabled scopes.
- setScopes(Scopes) - Method in class swiss.trustbroker.federation.xmlconfig.OidcClient
-
OIDC scopes to be used.
- setScriptPath(String) - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
Relative path of the Groovy scripts.
- setScripts(List<Script>) - Method in class swiss.trustbroker.federation.xmlconfig.Scripts
-
List of scripts.
- setScripts(Scripts) - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsParty
-
Script hooks.
- setScripts(Scripts) - Method in class swiss.trustbroker.federation.xmlconfig.RelyingParty
-
Script hooks.
- setSecondaryImages(List<String>) - Method in class swiss.trustbroker.config.dto.Banner
-
Optional list of secondary images.
- setSecondaryImages(List<String>) - Method in class swiss.trustbroker.saml.dto.UiBanner
-
Secondary images of banner.
- setSecToken(SecToken) - Method in class swiss.trustbroker.config.dto.IdmConfig
-
Security token for accessing the IDM.
- setSecure(Boolean) - Method in class swiss.trustbroker.config.dto.CookieProperties
-
Optional cookie secure flag.
- setSecure(Boolean) - Method in class swiss.trustbroker.homerealmdiscovery.dto.CookieConfig
- setSecureBrowserHeaders(boolean) - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
Default should be secure, disable in DEV only if needed for picky user-agents.
- setSecurity(SecurityChecks) - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
Security check configuration.
- setSecurityPolicies(SecurityPolicies) - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsParty
-
Global security policy overrides for this CP.
- setSecurityPolicies(SecurityPolicies) - Method in class swiss.trustbroker.federation.xmlconfig.RelyingParty
-
Global security policy overrides for this RP.
- setSelectableCpIssuerIds(List<String>) - Method in class swiss.trustbroker.sessioncache.dto.StateData
- setSelectedProfileExtId(String) - Method in class swiss.trustbroker.sessioncache.dto.StateData
- setSentTime(Timestamp) - Method in class swiss.trustbroker.sessioncache.dto.AccessRequestSessionState
- setSerializeNotifications(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.Sso
-
Serialize logout notifications in the order of the
SloResponseelements. - setServerMultiProcessed(boolean) - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
Run session and auth cache in DB
Default: true - setServerSingleUser(boolean) - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
Development feature flag to simulate multi-pod behavior with a single service.
- setServiceUrl(String) - Method in class swiss.trustbroker.config.dto.AnnouncementConfig
-
REST endpoint to retrieve current announcements from.
- setServiceUrl(String) - Method in class swiss.trustbroker.config.dto.ArtifactResolution
-
XTB Artifact Resolution service URL, included in the metadata.
- setServiceUrl(String) - Method in class swiss.trustbroker.federation.xmlconfig.AuthorizedApplication
-
Service URL to be called by AccessRequest.
- setSessId(String) - Method in class swiss.trustbroker.audit.dto.AuditDto
- setSessionCookie(boolean) - Method in class swiss.trustbroker.config.dto.OidcProperties
-
Use session cookies - delete cookies on browser close.
- setSessionCookieSameSite(String) - Method in class swiss.trustbroker.federation.xmlconfig.OidcSecurityPolicies
-
Controls the OIDC session cookies sameSite flag None, Strict, Dynamic.
- setSessionCookieSameSite(String) - Method in class swiss.trustbroker.federation.xmlconfig.SsoGroup
-
Controls the SSO session cookie
- setSessionIFrameEndpoint(String) - Method in class swiss.trustbroker.config.dto.OidcProperties
-
XTB OIDC session iframe endpoint.
- setSessionIndex(boolean) - Method in class swiss.trustbroker.saml.dto.ResponseParameters.ResponseParametersBuilder
- setSessionIndex(String) - Method in class swiss.trustbroker.saml.dto.ResponseParameters
- setSessionIndex(String) - Method in class swiss.trustbroker.sessioncache.dto.StateData
- setSessionLifetimeSec(int) - Method in class swiss.trustbroker.config.dto.OidcProperties
-
OIDC session lifetime in seconds.
- setSessionLifetimeSec(int) - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
Session lifetime for non-SSO login exchanges.
- setSessionMode(TomcatSessionMode) - Method in class swiss.trustbroker.config.dto.OidcProperties
-
Mode for Tomcat sessions.
- setSessionNotOnOrAfter(Instant) - Method in class swiss.trustbroker.saml.dto.ResponseParameters
- setSessionRequired(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.SloResponse
-
Enables OIDC
- setSessionTimeToLiveMin(Integer) - Method in class swiss.trustbroker.federation.xmlconfig.OidcSecurityPolicies
-
Allow to invalidate OIDC sessions before token TTL, keep for 1 minute to allow login sequence termination.
- setSetSessionIndex(boolean) - Method in class swiss.trustbroker.saml.dto.ResponseParameters
- setShortcut(String) - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsProvider
-
A usually two-character code identifying the CP on small screens.
- setShortcut(String) - Method in class swiss.trustbroker.saml.dto.SsoParticipant
- setShortcut(String) - Method in class swiss.trustbroker.saml.dto.UiObject
-
A usually two-character code identifying the CP on small screens.
- setSid(String) - Method in class swiss.trustbroker.homerealmdiscovery.dto.SessionRequest
- setSide(String) - Method in class swiss.trustbroker.audit.dto.AuditDto
- setSignature(Signature) - Method in class swiss.trustbroker.federation.xmlconfig.Saml
-
SAML signature configuration.
- setSignatureMethodAlgorithm(String) - Method in class swiss.trustbroker.config.dto.AccessRequestConfig
-
Access Request signature algorithm.
- setSignatureMethodAlgorithm(String) - Method in class swiss.trustbroker.federation.xmlconfig.Signature
-
Signature algorithm.
- setSignatureValidated(boolean) - Method in class swiss.trustbroker.saml.util.AssertionValidator.MessageValidationResult
- setSignedAuthnRequest(Boolean) - Method in class swiss.trustbroker.sessioncache.dto.StateData
- setSigner(Saml2X509Credential) - Method in class swiss.trustbroker.config.dto.OidcIdpCredential
- setSigner(KeystoreProperties) - Method in class swiss.trustbroker.config.dto.OidcIdentityProvider
-
Signer keystore.
- setSigner(KeystoreProperties) - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
Default signer.
- setSignercert(KeystoreProperties) - Method in class swiss.trustbroker.config.dto.AccessRequestConfig
-
Signer for outbound messages.
- setSignercert(KeystoreProperties) - Method in class swiss.trustbroker.config.dto.IdmConfig
-
Security token signer.
- setSignerKeystore(SignerKeystore) - Method in class swiss.trustbroker.federation.xmlconfig.Certificates
-
Keystore for signing.
- setSignerKeystore(SignerKeystore) - Method in class swiss.trustbroker.federation.xmlconfig.SloResponse
-
Override RPs signer for SAML2 LogoutRequest notifications(the LogoutResponse is always signed with RPs signer).
- setSignerTruststore(KeystoreProperties) - Method in class swiss.trustbroker.config.dto.AccessRequestConfig
-
Truststore for validating inbound messages.
- setSignerTruststore(SignerTruststore) - Method in class swiss.trustbroker.federation.xmlconfig.Certificates
-
Truststore for signature verification.
- setSilentServiceUrl(String) - Method in class swiss.trustbroker.config.dto.AccessRequestConfig
-
Global default for silent Access Request service URL
- setSingleQoaResponse(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.Qoa
-
Send single QoA in response (to RP).
- setSkinnyAssertionNamespaces(String) - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
Skinny SAML messages reducing the size of the messages (large SAML messages on picky perimeters might block).
- setSkinnyAssertionStyle(String) - Method in class swiss.trustbroker.saml.dto.ResponseParameters
- setSkinnyHrdTriggers(List<RegexNameValue>) - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
Legacy clients that get the skinny HRD screen (monitor, testing).
- setSkipHrdWithSsoSession(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.Sso
-
If an RP already is logged in with the first CP, the HRD screen can be skipped leading to the second participant automatically joining the detected SSO session for that CP.
- setSloDefaultOidcDestinationPath(String) - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
Global default for OIDC logout responses.
- setSloDefaultSamlDestinationPath(String) - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
Global default for SAML logout responses.
- setSloIssuerIdDropPatterns(String[]) - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
Parts of issuer ID ignored when determining Single Logout (SLO).
- setSloNotificationMinWaitMillis(int) - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
Minimum wait in case of fire-and-forget SLO notifications
Default: 200 - setSloNotifications(Set<SsoSessionParticipant>) - Method in class swiss.trustbroker.sso.service.SsoService.SloState
- setSloNotificationTimeoutMillis(int) - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
Stop waiting for SLO notifications after that and submit LogoutResponse.
- setSloNotificationTimoutMillis(int) - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
Deprecated, for removal: This API element is subject to removal in a future version.use sloNotificationTimeoutMillis
- setSloPepIssuerIdPrefix(String) - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
Prefix for PEP (Policy Enforcement Point) issuer matching.
- setSloResponse(List<SloResponse>) - Method in class swiss.trustbroker.federation.xmlconfig.Sso
- setSloSigner(Credential) - Method in class swiss.trustbroker.federation.xmlconfig.SloResponse
- setSloUrl(String) - Method in class swiss.trustbroker.federation.xmlconfig.Sso
-
Shortcut for
- setSoapHeadersToConsider(List<String>) - Method in class swiss.trustbroker.config.dto.WsTrustConfig
-
SOAP headers considered by the WS-Trust implementation.
- setSoapVersion(WsTrustConfig.SoapVersionConfig) - Method in class swiss.trustbroker.config.dto.WsTrustConfig
-
SOAP version.
- setSort(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.ProfileSelection
-
Apply sorting on profiles and roles.
- setSortByName(boolean) - Method in class swiss.trustbroker.federation.xmlconfig.IdmQuery
- setSource(String) - Method in class swiss.trustbroker.federation.xmlconfig.Definition
-
Source of the definition Compound primary key member in attribute maps using Definition(De)Serializer.
- setSource(String) - Method in class swiss.trustbroker.federation.xmlconfig.SubjectName
-
Matched against the CP/CP:issuer/IDM/IDM:IDMQuery.name/PROPS
- setSource(AuditDto.AttributeSource) - Method in class swiss.trustbroker.audit.dto.AuditDto.ResponseAttributeValue
- setSourceId(String) - Method in class swiss.trustbroker.federation.xmlconfig.ArtifactBinding
-
Default expected sourceId is
- setSourceIdEncoded(String) - Method in class swiss.trustbroker.federation.xmlconfig.ArtifactBinding
-
Overriding sourceId with encoded value directly in case it is not calculated in the expected way.
- setSpLogoutMetadataEnabled(boolean) - Method in class swiss.trustbroker.config.dto.SamlProperties
-
SAML CP-side logout support could be enabled but CPs need to be added as RPs.
- setSpMetadataEnabled(boolean) - Method in class swiss.trustbroker.config.dto.SamlProperties
-
SAML SP-side metadata can be hidden setting this feature flag to false.
- setSpNameFormats(List<String>) - Method in class swiss.trustbroker.config.dto.SamlProperties
-
RP-side supported name formats
- setSpSessionId(String) - Method in class swiss.trustbroker.sessioncache.dto.StateEntity
- setSpStateData(StateData) - Method in class swiss.trustbroker.sessioncache.dto.StateData
- setSshConfigKeyPath(String) - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
SSH key path.
- setSso(SsoConfig) - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
SSO configuration.
- setSso(Sso) - Method in class swiss.trustbroker.federation.xmlconfig.RelyingParty
-
SSO configuration for this RP.
- setSsoEstablishedTime(Timestamp) - Method in class swiss.trustbroker.audit.dto.AuditDto
- setSsoEstablishedTime(Timestamp) - Method in class swiss.trustbroker.saml.dto.SsoParticipants
- setSsoEstablishedTime(Timestamp) - Method in class swiss.trustbroker.sessioncache.dto.Lifecycle
- setSsoGroupName(String) - Method in class swiss.trustbroker.audit.dto.AuditDto
- setSsoGroupName(String) - Method in class swiss.trustbroker.saml.dto.SsoParticipants
- setSsoGroupName(String) - Method in class swiss.trustbroker.sessioncache.dto.SsoState
- setSsoGroups(List<SsoGroup>) - Method in class swiss.trustbroker.federation.xmlconfig.SsoGroupSetup
-
List of SSO groups.
- setSsoGroupSetup(String) - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
Relative path of the SsoGroupSetup file
- setSsoGroupSetup(SsoGroupSetup) - Method in class swiss.trustbroker.config.dto.RelyingPartyDefinitions
- setSsoMinQoaLevel(int) - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
Global minimum for QoA level for SSO.
- setSsoMinQoaLevel(Integer) - Method in class swiss.trustbroker.federation.xmlconfig.SecurityPolicies
-
If CP returns AuthnContext of value less than that, no SSO session is created.
- setSsoParticipantCount(Integer) - Method in class swiss.trustbroker.audit.dto.AuditDto
- setSsoParticipants(Set<SsoSessionParticipant>) - Method in class swiss.trustbroker.sessioncache.dto.SsoState
- setSsoQoa(String) - Method in class swiss.trustbroker.audit.dto.AuditDto
- setSsoQoa(String) - Method in class swiss.trustbroker.sessioncache.dto.SsoState
- setSsoSessionId(String) - Method in class swiss.trustbroker.audit.dto.AuditDto
- setSsoSessionId(String) - Method in class swiss.trustbroker.audit.dto.OidcAuditData
- setSsoSessionId(String) - Method in class swiss.trustbroker.sessioncache.dto.StateData
- setSsoSessionId(String) - Method in class swiss.trustbroker.sessioncache.dto.StateEntity
- setSsoSessionIdPolicy(String) - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
SSO session ID policy.
- setSsoSessionLifetimeSec(int) - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
Session lifetime during which SSO is possible on XTB.
- setSsoState(SsoState) - Method in class swiss.trustbroker.sessioncache.dto.StateData
- setSsoState(StateData) - Method in class swiss.trustbroker.oidc.session.HttpExchangeSupport
- setSsoSubject(String) - Method in class swiss.trustbroker.saml.dto.SsoParticipants
- setSsoUrl(String) - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsParty
-
SAML POST endpoint on the CP.
- setState(AccessRequestState) - Method in class swiss.trustbroker.sessioncache.dto.AccessRequestSessionState
- setStateCache(StateCacheProperties) - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
Configuration for DB state cache.
- setStateData(StateData) - Method in class swiss.trustbroker.oidc.session.TomcatSession
- setStateId(String) - Method in class swiss.trustbroker.homerealmdiscovery.dto.ProfileRequest
- setStatus(String) - Method in class swiss.trustbroker.audit.dto.AuditDto
- setStatus(ConfigStatus) - Method in class swiss.trustbroker.federation.dto.ConfigStatusData
- setStatus(Status) - Method in class swiss.trustbroker.monitoring.dto.MonitoringResponse
- setStatusCode(String) - Method in class swiss.trustbroker.saml.dto.ResponseStatus
-
Usually urn:oasis:names:tc:SAML:2.0:status:Responder
- setStatusMessage(String) - Method in class swiss.trustbroker.audit.dto.AuditDto
- setStatusMessage(String) - Method in class swiss.trustbroker.saml.dto.ResponseStatus
-
E.g.
- setStatusNestedCode(String) - Method in class swiss.trustbroker.saml.dto.ResponseStatus
-
E.g.
- setStatusPolicy(StatusPolicy) - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsParty
-
This status policy determines the handling of users that are not found in the IDM: BLOCK_UNKNOWN_USER, ALLOW_UNKNOWN_USER.
- setStatusPolicy(StatusPolicy) - Method in class swiss.trustbroker.federation.xmlconfig.IdmQuery
-
Handling of the user status in IDM.
- setStore(String) - Method in class swiss.trustbroker.federation.xmlconfig.IdmLookup
-
Used to select an IdmService implementation
- setStore(String) - Method in class swiss.trustbroker.federation.xmlconfig.IdmQuery
-
Used to select an IdmService implementation
- setStrongestPossible(String) - Method in class swiss.trustbroker.config.dto.QualityOfAuthenticationConfig
-
QoA value for strongest possible authentication level.
- setStrongestPossibleAuthLevel(String) - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsParty
-
This attribute allows to map a QoA of
- setSubject(String) - Method in class swiss.trustbroker.sessioncache.dto.SsoState
- setSubjectConfirmationMethod(String) - Method in class swiss.trustbroker.saml.dto.CpResponse
-
Subject confirmation method.
- setSubjectNameId(String) - Method in class swiss.trustbroker.federation.xmlconfig.IdmQuery
-
Subject Name ID as filtering parameter for the IDM.
- setSubjectNameId(String) - Method in class swiss.trustbroker.sessioncache.dto.StateData
- setSubjectNameId(String) - Method in class swiss.trustbroker.sso.service.SsoService.SsoCookieNameParams
- setSubjectNameMappings(SubjectNameMappings) - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsParty
-
Subject Name ID mappings for this CP.
- setSubjectNameMappings(SubjectNameMappings) - Method in class swiss.trustbroker.federation.xmlconfig.RelyingParty
-
Subject Name ID mappings for this RP.
- setSubjects(List<SubjectName>) - Method in class swiss.trustbroker.federation.xmlconfig.SubjectNameMappings
-
List of mapping
- setSubjectTokenMaxAgeSec(Integer) - Method in class swiss.trustbroker.federation.xmlconfig.OidcSecurityPolicies
-
Restrict Token Exchange subject_token age
Default: 60 - setSubjectTokenMaxUseCount(Integer) - Method in class swiss.trustbroker.federation.xmlconfig.OidcSecurityPolicies
-
Maximum number a subject_token can be used
Default: 1 - setSubjectTokenNotBeforeToleranceSec(Integer) - Method in class swiss.trustbroker.federation.xmlconfig.OidcSecurityPolicies
-
subject_token tolerance NTP drift tolerance.
- setSubjectTokenNotOnOrAfterToleranceSec(Integer) - Method in class swiss.trustbroker.federation.xmlconfig.OidcSecurityPolicies
-
subject_token timestamp clock/transfer tolerance.
- setSubjectTypes(List<String>) - Method in class swiss.trustbroker.config.dto.OidcProperties
-
Enabled subject types.
- setSubjectValiditySeconds(long) - Method in class swiss.trustbroker.saml.dto.ResponseParameters
- setSubPath(String) - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsProviderSetup
- setSubPath(String) - Method in class swiss.trustbroker.federation.xmlconfig.CounterParty
- setSubPath(String) - Method in interface swiss.trustbroker.federation.xmlconfig.PathReference
- setSubPath(String) - Method in class swiss.trustbroker.federation.xmlconfig.RelyingPartySetup
- setSubResource(String) - Method in class swiss.trustbroker.federation.xmlconfig.IdmQuery
-
Sub resource parameter for the IDM (baseDN in case of LDAP).
- setSubSession(HttpSession) - Method in class swiss.trustbroker.oidc.tx.OidcTxRequestWrapper
- setSupport(Support) - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
Support features.
- setSupportedBindings(List<SamlBinding>) - Method in class swiss.trustbroker.federation.xmlconfig.Saml
-
List of supported inbound SAML bindings.
- setSupportedBindings(List<WsTrustBinding>) - Method in class swiss.trustbroker.federation.xmlconfig.WsTrust
-
List of supported inbound WS-Trust bindings.
- setSupportedTlsVersions(String) - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
Comma-separated list of supported TLS versions.
- setSupportEmail(String) - Method in class swiss.trustbroker.federation.xmlconfig.Flow
-
Show (application specific) support e-mail address on the error page.
- setSupportInfo(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.Flow
-
Show error page including a support info section.
- setSupportPhone(String) - Method in class swiss.trustbroker.federation.xmlconfig.Flow
-
Show (application specific) support phone number on the error page.
- setSyncSchedule(String) - Method in class swiss.trustbroker.config.dto.AnnouncementConfig
-
Schedule for fetching current announcements.
- setSyncSchedule(String) - Method in class swiss.trustbroker.config.dto.OidcProperties
-
Schedule for fetching current metadata configurations from all CPs.
- setTaggedResourceMaxAgeSec(int) - Method in class swiss.trustbroker.config.dto.GuiProperties
-
Browser caching max-age in seconds for resources that have are tagged with an ETAG (a hash or version number).
- setTargetMaxEntries(int) - Method in class swiss.trustbroker.config.dto.StateCacheProperties
-
If the session DB runs full (more than targetMaxEntries), XTB starts garbage collecting sessions, that might expire anyway soon to make room for new sessions and prevent storage issues.
- setTechuser(TechUserProperties) - Method in class swiss.trustbroker.config.dto.IdmConfig
-
Technical user for accessing the IDM.
- setTestNetworkHeader(String) - Method in class swiss.trustbroker.config.dto.NetworkConfig
-
HTTP header for simulating the client network.
- setThemeAssets(String) - Method in class swiss.trustbroker.config.dto.GuiProperties
-
Resource path where theme assets are stored.
- setThemeCookie(CookieProperties) - Method in class swiss.trustbroker.config.dto.GuiProperties
-
Attributes for the cookie that stores the user's theme (if there is a theme selector).
- setThemeCookie(CookieConfig) - Method in class swiss.trustbroker.homerealmdiscovery.dto.GuiConfig
- setTiles(List<UiObject>) - Method in class swiss.trustbroker.saml.dto.UiObjects
-
Tiles for CPs.
- setTitle(String) - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsProvider
-
Title for the CP tile and help item.
- setTitle(String) - Method in class swiss.trustbroker.saml.dto.UiObject
-
Title for the CP tile and help item.
- setTlsClientCertificateBoundAccessTokens(boolean) - Method in class swiss.trustbroker.config.dto.OidcProperties
-
Enable TLS client certificate bound access tokens.
- setTlsProtocol(String) - Method in class swiss.trustbroker.config.dto.IdmConfig
-
TLS protocol to use for the connection.
- setTokenEndpoint(URI) - Method in class swiss.trustbroker.oidc.client.dto.OpenIdProviderConfiguration
- setTokenEndpointAuthMethods(List<String>) - Method in class swiss.trustbroker.config.dto.OidcProperties
-
Enabled token endpoint authentication methods.
- setTokenLifetimeSec(long) - Method in class swiss.trustbroker.config.dto.SecurityChecks
-
Used for Condition.notOnOrAfterSeconds and SubjectConfirmationData.notOnOrAfterSeconds.
- setTokenRequestParams(Map<String, String>) - Method in class swiss.trustbroker.audit.dto.AuditDto
- setTokenTimeToLiveMin(Integer) - Method in class swiss.trustbroker.federation.xmlconfig.OidcSecurityPolicies
-
Token validity in minutes.
- setTomcatSessionManager(TomcatSessionManager) - Method in class swiss.trustbroker.oidc.session.TomcatSession
- setTraceId(String) - Method in class swiss.trustbroker.audit.dto.AuditDto
- setTraceIdHeader(String) - Method in class swiss.trustbroker.config.dto.IdmConfig
-
HTTP trace header supported by service to correlate calls from XTB.
- setTraceIdHeader(String) - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
HTTP header that supplies a request trace ID.
- setTracingEnabled(boolean) - Method in class swiss.trustbroker.config.dto.NetworkConfig
-
Allow disabling OpenTelemetry traceparent propagation to backends that might block use otherwise.
- setTranslationAttributes(List<String>) - Method in class swiss.trustbroker.federation.xmlconfig.ProfileSelection
-
Names of attributes that should be translated.
- setTranslations(String) - Method in class swiss.trustbroker.config.dto.GuiProperties
-
Resource path where UI language support files in JSON format are stored.
- setTriggerRole(String) - Method in class swiss.trustbroker.federation.xmlconfig.AuthorizedApplication
-
When the given role is missing after the IDM lookup phase (and before the profile selection phase) the access-request handling is initiated.
- setTrust(Saml2X509Credential) - Method in class swiss.trustbroker.config.dto.OidcIdpCredential
- setTruststore(KeystoreProperties) - Method in class swiss.trustbroker.config.dto.AccessRequestConfig
-
Keystore for outbound requests.
- setTruststore(KeystoreProperties) - Method in class swiss.trustbroker.config.dto.ArtifactResolution
-
Default truststore for artifact resolution.
- setTruststore(KeystoreProperties) - Method in class swiss.trustbroker.config.dto.IdmConfig
-
Truststore for accessing the IDM.
- setTruststore(KeystoreProperties) - Method in class swiss.trustbroker.config.dto.OidcProperties
-
Default truststore for direct connections to OIDC CPs.
- setTruststorePassword(String) - Method in class swiss.trustbroker.config.dto.AnnouncementConfig
-
Password for the truststore.
- setTruststorePath(String) - Method in class swiss.trustbroker.config.dto.AnnouncementConfig
-
TLS truststore used to establish HTTPS connection.
- setTxCommitDelay(int) - Method in class swiss.trustbroker.config.dto.StateCacheProperties
-
Delay before transaction commit in milliseconds.
- setTxRetryCount(int) - Method in class swiss.trustbroker.config.dto.StateCacheProperties
-
Number of retries doubling the txRetryDelayMs on every try.
- setTxRetryDelayMs(int) - Method in class swiss.trustbroker.config.dto.StateCacheProperties
-
Delay before transaction retry in milliseconds (negative values indicate no retry).
- setType(String) - Method in class swiss.trustbroker.config.dto.WsTrustConfig
-
Keystore type.
- setType(String) - Method in class swiss.trustbroker.federation.xmlconfig.Script
-
Script types as listed above.
- setUiObjects(UiObjects) - Method in class swiss.trustbroker.saml.dto.RpRequest
-
UI objects for the HRD screen.
- setUnaliasedId(String) - Method in class swiss.trustbroker.federation.xmlconfig.RelyingParty
- setUndefined(String) - Method in class swiss.trustbroker.config.dto.LdapStoreConfig
-
Default value for undefined IDMQuery.AppFilter value.
- setUnfilteredClaimsParties(List<ClaimsParty>) - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsProviderSetup
- setUnfilteredRelyingParties(List<RelyingParty>) - Method in class swiss.trustbroker.federation.xmlconfig.RelyingPartySetup
- setupModule(Module.SetupContext) - Method in class swiss.trustbroker.oidc.jackson.AuthorizationPrincipalModule
- setUri(String) - Method in interface swiss.trustbroker.wstrustclient.xml.ClaimType
- setUri(String) - Method in class swiss.trustbroker.wstrustclient.xml.ClaimTypeImpl
- setUrl(String) - Method in class swiss.trustbroker.audit.dto.AuditDto
- setUrl(String) - Method in class swiss.trustbroker.federation.xmlconfig.AuthorizedApplication
-
The application can be selected via HTTP Referer matching by configuring the Origin URL in this attribute.
- setUrl(String) - Method in class swiss.trustbroker.federation.xmlconfig.SloResponse
-
Valid settings are: An absolute URL (used as is) A relative URL (path) that is appended to the HTTP referrer or ACUrl URL
- setUrn(String) - Method in class swiss.trustbroker.saml.dto.UiObject
-
id uniquely identifies a tile.
- setUseDefault(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.AcWhitelist
-
Use the first entry as default if the RP does not send an ACS URL.
- setUseKeycloakIssuerId(boolean) - Method in class swiss.trustbroker.config.dto.OidcProperties
-
Use Keycloak issuer ID.
- setUsePepQoa(String) - Method in class swiss.trustbroker.federation.xmlconfig.OidcClient
-
Legacy Policy Enforcement Point (PEP) QOA mapping policy.
- setUser(String) - Method in class swiss.trustbroker.config.dto.TechUserProperties
-
User ID in IDM.
- setUserDetail(String, String) - Method in class swiss.trustbroker.saml.dto.CpResponse
-
Script hook use: Add user claim with a single value.
- setUserDetail(String, String, String) - Method in class swiss.trustbroker.saml.dto.CpResponse
-
Script hook use: Add entry with a single value and a FQ name for outbound mapping.
- setUserDetails(String, String, List<String>) - Method in class swiss.trustbroker.saml.dto.CpResponse
-
Script hook use: Set user claims with a list value and a FQ name.
- setUserDetails(String, List<String>) - Method in class swiss.trustbroker.saml.dto.CpResponse
-
Script hook use: Set user claims with a list value.
- setUserDetails(Map<Definition, List<String>>) - Method in class swiss.trustbroker.saml.dto.CpResponse
-
IDM user data returned from IDM backends, filtered by RP setup.
- setUserDetailsSelection(AttributesSelection) - Method in class swiss.trustbroker.federation.xmlconfig.IdmQuery
-
User details selection identifies the IDM attributes passed through to the RP side.
- setUserInfoEnabled(boolean) - Method in class swiss.trustbroker.config.dto.OidcProperties
-
Enable user info endpoint.
- setUserInfoEncryptionAlgorithms(List<String>) - Method in class swiss.trustbroker.config.dto.OidcProperties
-
Enabled UserInfo encryption algorithms.
- setUserInfoEncryptionMethods(List<String>) - Method in class swiss.trustbroker.config.dto.OidcProperties
-
Enabled UserInfo encryption methods.
- setUserinfoEndpoint(URI) - Method in class swiss.trustbroker.oidc.client.dto.OpenIdProviderConfiguration
- setUseSessionCookieForSso(boolean) - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
Use session cookie for SSO, should always be true.
- setUseSkinnyHrdScreen(boolean) - Method in class swiss.trustbroker.saml.dto.RpRequest
-
Allow to use a non-angular version of the HRD screen
Default: false - setValidateAcs(boolean) - Method in class swiss.trustbroker.config.dto.SecurityChecks
-
Check assertion consumer URL or HTTP Referer against configured whitelist.
- setValidateAssertion(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.AuthorizedApplication
-
Validate assertions in responses to requests sent by the AccessRequest.
- setValidateAssertionIssueInstant(boolean) - Method in class swiss.trustbroker.config.dto.SecurityChecks
-
Check IssueInstant attribute in Assertion
Default: true - setValidateAudience(boolean) - Method in class swiss.trustbroker.config.dto.SecurityChecks
-
Check audience restriction against issuer.
- setValidateAuthnRequest(boolean) - Method in class swiss.trustbroker.config.dto.SecurityChecks
-
Check incoming AuthnRequest at all.
- setValidateAuthnStatementIssueInstant(boolean) - Method in class swiss.trustbroker.config.dto.SecurityChecks
-
Check IssueInstant attribute in AuthnStatement
Default: true - setValidateHttpHeaders(boolean) - Method in class swiss.trustbroker.config.dto.SecurityChecks
-
Validate HTTP request headers.
- setValidateHttpHeaders(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.SecurityPolicies
-
Validate HTTP request headers.
- setValidateInResponseTo(boolean) - Method in class swiss.trustbroker.config.dto.SecurityChecks
-
Check response inResponseTo.
- setValidateLogoutRequest(boolean) - Method in class swiss.trustbroker.config.dto.SecurityChecks
-
Validate OID Logout request.
- setValidateRelayState(boolean) - Method in class swiss.trustbroker.config.dto.SecurityChecks
-
Relay must exist otherwise the SAML processing is stopped, if false response matching is done via SAML message.
- setValidateRequestCondition(boolean) - Method in class swiss.trustbroker.config.dto.SecurityChecks
-
Check Condition attribute in AuthnRequest
Default: true - setValidateRequestIssueInstant(boolean) - Method in class swiss.trustbroker.config.dto.SecurityChecks
-
Check IssueInstant attribute in AuthnRequest
Default: true - setValidateResponseIssueInstant(boolean) - Method in class swiss.trustbroker.config.dto.SecurityChecks
-
Check IssueInstant attribute in Response
Default: true - setValidateResponseIssuer(boolean) - Method in class swiss.trustbroker.config.dto.SecurityChecks
-
Check issuer in the CP response to match what the user has selected as a homeRealm in HRD.
- setValidateSecurityTokenRequest(boolean) - Method in class swiss.trustbroker.config.dto.SecurityChecks
-
Check incoming WSTrust SecurityTokenRequest on WSS4J level.
- setValidateSecurityTokenRequestAssertion(boolean) - Method in class swiss.trustbroker.config.dto.SecurityChecks
-
Check incoming WSTrust SecurityTokenRequest on XTB validator level.
- setValidateSubjectConfirmationInResponseTo(boolean) - Method in class swiss.trustbroker.config.dto.SecurityChecks
-
Check subject confirmation inResponseTo.
- setValidateSubjectConfirmationRecipient(boolean) - Method in class swiss.trustbroker.config.dto.SecurityChecks
-
Check subject confirmation recipient.
- setValidateSubjectConfirmationTimestamp(boolean) - Method in class swiss.trustbroker.config.dto.SecurityChecks
-
Check subject confirmation timestamp.
- setValidateXmlSchema(boolean) - Method in class swiss.trustbroker.config.dto.SecurityChecks
-
Check XML schema.
- setValidateXmlSchema(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.SecurityPolicies
-
Some claims providers are not sending well-formed valid XML and therefore are blocked by XTB.
- setValidationStatus(ValidationStatus) - Method in class swiss.trustbroker.federation.xmlconfig.CounterParty
- setValue(Object) - Method in class swiss.trustbroker.audit.dto.AuditDto.ResponseAttributeValue
- setValue(String) - Method in class swiss.trustbroker.federation.xmlconfig.AccountSource
- setValue(String) - Method in class swiss.trustbroker.federation.xmlconfig.Definition
-
Single value from constant configuration (we currently only use single valued in XML via ConstAttributes).
- setValue(String) - Method in class swiss.trustbroker.federation.xmlconfig.HomeName
-
The configuration is optional and provides a static value, when the e-id based CPs are not sending the attribute in the CP Attributes already or the value is computed from the CP SAML Response mainly for compatibility reasons, see
GeneralDeriveHomeName.groovyfor the special handling of this attribute. - setValues(String[]) - Method in class swiss.trustbroker.config.dto.CookieProperties
-
Optional cookie permitted values.
- setValues(String[]) - Method in class swiss.trustbroker.homerealmdiscovery.dto.CookieConfig
- setVelocityTemplatePath(String) - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
Development feature: Set this to
- setVersionedResourceMaxAgeDay(int) - Method in class swiss.trustbroker.config.dto.GuiProperties
-
Browser caching max-age in days for resources that have resource version in the path (a hash or version number).
- setVersionedResourcePaths(String[]) - Method in class swiss.trustbroker.config.dto.GuiProperties
-
Paths of resources that have resource version in the path (a hash or version number).
- setVersionInfo(String) - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
XTB version information for the GUI
- setWebDumpPathRegEx(String) - Method in class swiss.trustbroker.config.dto.Support
-
Extends debug support with web message dumping on configured servlet path
- setWriteListener(WriteListener) - Method in class swiss.trustbroker.oidc.tx.InMemoryServletOutputStream
- setWsBasePath(String) - Method in class swiss.trustbroker.config.dto.WsTrustConfig
-
Allow base path differing from SAML API.
- setWsfed(WsFedConfig) - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
WS-Fed protocol configuration.
- setWss4jChecks(String) - Method in class swiss.trustbroker.config.dto.SecurityChecks
-
WSS4J checks according to WSS4J actions.
- setWstrust(WsTrustConfig) - Method in class swiss.trustbroker.config.TrustBrokerProperties
-
WS-Trust protocol configuration.
- setWsTrust(WsTrust) - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsParty
-
WS-Trust protocol configuration for this CP.
- setWsTrust(WsTrust) - Method in class swiss.trustbroker.federation.xmlconfig.RelyingParty
-
WS-Trust protocol configuration for this RP.
- setWsTrustIssueNotBeforeToleranceSec(Long) - Method in class swiss.trustbroker.federation.xmlconfig.SecurityPolicies
-
WS-Trust ISSUE timestamp not before tolerance override.
- setWsTrustIssueNotOnOrAfterToleranceSec(Long) - Method in class swiss.trustbroker.federation.xmlconfig.SecurityPolicies
-
WS-Trust ISSUE timestamp not on or after tolerance override.
- setWsTrustIssueRequireSignedAssertion(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.SecurityPolicies
-
Deprecated.Transition feature
- setWsTrustIssueRequireSignedRequest(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.SecurityPolicies
-
Require signed request in WS-Trust ISSUE.
- setWsTrustIssueRequireTimestamp(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.SecurityPolicies
-
WS-Trust ISSUE requires timestamp.
- setWsTrustRequestValiditySeconds(int) - Method in class swiss.trustbroker.config.dto.AccessRequestConfig
-
Validity in seconds for WS-Trust expires.
- setWsTrustSoapProtocolVersion(String) - Method in class swiss.trustbroker.config.dto.AccessRequestConfig
-
WS-Trust SOAP protocl.
- shallowClone() - Method in class swiss.trustbroker.federation.xmlconfig.IdmLookup
- shortcut(String) - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsProvider.ClaimsProviderBuilder
-
A usually two-character code identifying the CP on small screens.
- shortcut(String) - Method in class swiss.trustbroker.saml.dto.SsoParticipant.SsoParticipantBuilder
- shortcut(String) - Method in class swiss.trustbroker.saml.dto.UiObject.UiObjectBuilder
-
A usually two-character code identifying the CP on small screens.
- shouldNotFilter(HttpServletRequest) - Method in class swiss.trustbroker.oidc.LogTokenRequestsFilter
- showAnnouncements(AnnouncementsRpData, String, Set<String>) - Method in class swiss.trustbroker.announcement.service.NoOpAnnouncementService
- showErrorPage() - Method in class swiss.trustbroker.federation.xmlconfig.Flow
- showErrorPage() - Method in class swiss.trustbroker.saml.dto.ResponseStatus
- side(String) - Method in class swiss.trustbroker.audit.dto.AuditDto.AuditDtoBuilder
- signature(Signature) - Method in class swiss.trustbroker.federation.xmlconfig.Saml.SamlBuilder
-
SAML signature configuration.
- Signature - Class in swiss.trustbroker.federation.xmlconfig
-
Cryptographic setup of SAML signing as supported by Apache XML-security configuration.
- Signature() - Constructor for class swiss.trustbroker.federation.xmlconfig.Signature
- Signature(String, String, String) - Constructor for class swiss.trustbroker.federation.xmlconfig.Signature
-
Creates a new
Signatureinstance. - Signature.SignatureBuilder - Class in swiss.trustbroker.federation.xmlconfig
- signatureContext(SignatureContext) - Method in class swiss.trustbroker.saml.dto.ResponseData.ResponseDataBuilder
- signatureMethodAlgorithm(String) - Method in class swiss.trustbroker.config.dto.AccessRequestConfig.AccessRequestConfigBuilder
-
Access Request signature algorithm.
- signatureMethodAlgorithm(String) - Method in class swiss.trustbroker.federation.xmlconfig.Signature.SignatureBuilder
-
Signature algorithm.
- signatureValidated(boolean) - Method in class swiss.trustbroker.saml.util.AssertionValidator.MessageValidationResult.MessageValidationResultBuilder
- signedAuthnRequest(Boolean) - Method in class swiss.trustbroker.sessioncache.dto.StateData.StateDataBuilder
- signer(Saml2X509Credential) - Method in class swiss.trustbroker.config.dto.OidcIdpCredential.OidcIdpCredentialBuilder
- signercert(KeystoreProperties) - Method in class swiss.trustbroker.config.dto.AccessRequestConfig.AccessRequestConfigBuilder
-
Signer for outbound messages.
- signercert(KeystoreProperties) - Method in class swiss.trustbroker.config.dto.IdmConfig.IdmConfigBuilder
-
Security token signer.
- signerKeystore(SignerKeystore) - Method in class swiss.trustbroker.federation.xmlconfig.Certificates.CertificatesBuilder
-
Keystore for signing.
- signerKeystore(SignerKeystore) - Method in class swiss.trustbroker.federation.xmlconfig.SloResponse.SloResponseBuilder
-
Override RPs signer for SAML2 LogoutRequest notifications(the LogoutResponse is always signed with RPs signer).
- SignerKeystore - Class in swiss.trustbroker.federation.xmlconfig
-
Keystore configuration.
- SignerKeystore() - Constructor for class swiss.trustbroker.federation.xmlconfig.SignerKeystore
- SignerKeystore(String, String, String, String, String) - Constructor for class swiss.trustbroker.federation.xmlconfig.SignerKeystore
-
Creates a new
SignerKeystoreinstance. - SignerKeystore(SignerKeystore.SignerKeystoreBuilder<?, ?>) - Constructor for class swiss.trustbroker.federation.xmlconfig.SignerKeystore
- SignerKeystore.SignerKeystoreBuilder<C,
B> - Class in swiss.trustbroker.federation.xmlconfig - SignerKeystoreBuilder() - Constructor for class swiss.trustbroker.federation.xmlconfig.SignerKeystore.SignerKeystoreBuilder
- SignerStore - Class in swiss.trustbroker.federation.xmlconfig
-
Keystore/truststore configuration.
- SignerStore() - Constructor for class swiss.trustbroker.federation.xmlconfig.SignerStore
- SignerStore(String, String) - Constructor for class swiss.trustbroker.federation.xmlconfig.SignerStore
- SignerStore(SignerStore.SignerStoreBuilder<?, ?>) - Constructor for class swiss.trustbroker.federation.xmlconfig.SignerStore
- SignerStore.SignerStoreBuilder<C,
B> - Class in swiss.trustbroker.federation.xmlconfig - SignerStoreBuilder() - Constructor for class swiss.trustbroker.federation.xmlconfig.SignerStore.SignerStoreBuilder
- signerTruststore(KeystoreProperties) - Method in class swiss.trustbroker.config.dto.AccessRequestConfig.AccessRequestConfigBuilder
-
Truststore for validating inbound messages.
- signerTruststore(SignerTruststore) - Method in class swiss.trustbroker.federation.xmlconfig.Certificates.CertificatesBuilder
-
Truststore for signature verification.
- SignerTruststore - Class in swiss.trustbroker.federation.xmlconfig
-
Truststore configuration.
- SignerTruststore() - Constructor for class swiss.trustbroker.federation.xmlconfig.SignerTruststore
- SignerTruststore(String, String, String, String, String) - Constructor for class swiss.trustbroker.federation.xmlconfig.SignerTruststore
-
Creates a new
SignerTruststoreinstance. - SignerTruststore(SignerTruststore.SignerTruststoreBuilder<?, ?>) - Constructor for class swiss.trustbroker.federation.xmlconfig.SignerTruststore
- SignerTruststore.SignerTruststoreBuilder<C,
B> - Class in swiss.trustbroker.federation.xmlconfig - SignerTruststoreBuilder() - Constructor for class swiss.trustbroker.federation.xmlconfig.SignerTruststore.SignerTruststoreBuilder
- SilenceRules - Class in swiss.trustbroker.waf
- SILENT - Enum constant in enum class swiss.trustbroker.federation.xmlconfig.ProfileSelectionMode
-
Profile selection is done silently.
- silentServiceUrl(String) - Method in class swiss.trustbroker.config.dto.AccessRequestConfig.AccessRequestConfigBuilder
-
Global default for silent Access Request service URL
- singleQoaResponse(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.Qoa.QoaBuilder
-
Send single QoA in response (to RP).
- SKI - Enum constant in enum class swiss.trustbroker.federation.xmlconfig.EncryptionKeyInfo
-
Include
X509SKIinKeyInfo. - skinnyAssertionStyle(String) - Method in class swiss.trustbroker.saml.dto.ResponseParameters.ResponseParametersBuilder
- SkinnyHrdService - Class in swiss.trustbroker.saml.service
- SkinnyHrdService(TrustBrokerProperties, VelocityEngine, ApiSupport) - Constructor for class swiss.trustbroker.saml.service.SkinnyHrdService
- skipCpAuthentication() - Method in enum class swiss.trustbroker.sso.service.SsoService.SsoSessionOperation
- skipCpAuthentication(ClaimsParty, RelyingParty, StateData, StateData) - Method in class swiss.trustbroker.sso.service.SsoService
- skipHrdWithSsoSession() - Method in class swiss.trustbroker.federation.xmlconfig.Sso
- skipHrdWithSsoSession(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.Sso.SsoBuilder
-
If an RP already is logged in with the first CP, the HRD screen can be skipped leading to the second participant automatically joining the detected SSO session for that CP.
- skipQuery(String) - Method in class swiss.trustbroker.saml.dto.CpResponse
-
Script hook use: Skip a particular IDM query.
- skipUiFeaturesForAdminAndMonitoringClients(HttpServletRequest, TrustBrokerProperties) - Static method in class swiss.trustbroker.homerealmdiscovery.util.OperationalUtil
- skipUserFeatures(RpRequest, HttpServletRequest, TrustBrokerProperties) - Static method in class swiss.trustbroker.homerealmdiscovery.util.OperationalUtil
- SloMode - Enum Class in swiss.trustbroker.federation.xmlconfig
-
Operation mode for single (global) logout.
- SloNotification - Class in swiss.trustbroker.sso.dto
-
Combines static configuration from SloUrl with dynamic SLO notification information
- SloNotification(SloResponse) - Constructor for class swiss.trustbroker.sso.dto.SloNotification
- sloNotifications(Set<SsoSessionParticipant>) - Method in class swiss.trustbroker.sso.service.SsoService.SloState.SloStateBuilder
- SloProtocol - Enum Class in swiss.trustbroker.federation.xmlconfig
-
Single logout (SLO) protocol.
- sloResponse(List<SloResponse>) - Method in class swiss.trustbroker.federation.xmlconfig.Sso.SsoBuilder
- SloResponse - Class in swiss.trustbroker.federation.xmlconfig
-
Single logout (SLO) configurations for an RP.
- SloResponse() - Constructor for class swiss.trustbroker.federation.xmlconfig.SloResponse
- SloResponse(SloMode, SloProtocol, SamlBinding, String, Boolean, Boolean, String, Boolean, SignerKeystore, Credential) - Constructor for class swiss.trustbroker.federation.xmlconfig.SloResponse
-
Creates a new
SloResponseinstance. - SloResponse.SloResponseBuilder - Class in swiss.trustbroker.federation.xmlconfig
- SloResponseParameters - Record Class in swiss.trustbroker.sso.dto
-
Contains parameters required for rendering an SLO Logout response.
- SloResponseParameters(Map<String, Object>, boolean, String) - Constructor for record class swiss.trustbroker.sso.dto.SloResponseParameters
-
Creates an instance of a
SloResponseParametersrecord class. - sloSigner(Credential) - Method in class swiss.trustbroker.federation.xmlconfig.SloResponse.SloResponseBuilder
- sloUrl(String) - Method in class swiss.trustbroker.federation.xmlconfig.Sso.SsoBuilder
-
Shortcut for
- SOAP_1_1 - Enum constant in enum class swiss.trustbroker.config.dto.WsTrustConfig.SoapVersionConfig
- SOAP_1_2 - Enum constant in enum class swiss.trustbroker.config.dto.WsTrustConfig.SoapVersionConfig
- SOAP_1_X - Enum constant in enum class swiss.trustbroker.config.dto.WsTrustConfig.SoapVersionConfig
- soapHeadersToConsider(List<String>) - Method in class swiss.trustbroker.config.dto.WsTrustConfig.WsTrustConfigBuilder
-
SOAP headers considered by the WS-Trust implementation.
- soapVersion(WsTrustConfig.SoapVersionConfig) - Method in class swiss.trustbroker.config.dto.WsTrustConfig.WsTrustConfigBuilder
-
SOAP version.
- sort(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.ProfileSelection.ProfileSelectionBuilder
-
Apply sorting on profiles and roles.
- sortByName(boolean) - Method in class swiss.trustbroker.federation.xmlconfig.IdmQuery.IdmQueryBuilder
- source(String) - Method in class swiss.trustbroker.federation.xmlconfig.Definition.DefinitionBuilder
-
Source of the definition Compound primary key member in attribute maps using Definition(De)Serializer.
- source(String) - Method in class swiss.trustbroker.federation.xmlconfig.SubjectName.SubjectNameBuilder
-
Matched against the CP/CP:issuer/IDM/IDM:IDMQuery.name/PROPS
- source(AuditDto.AttributeSource) - Method in class swiss.trustbroker.audit.dto.AuditDto.ResponseAttributeValue.ResponseAttributeValueBuilder
- sourceId(String) - Method in class swiss.trustbroker.federation.xmlconfig.ArtifactBinding.ArtifactBindingBuilder
-
Default expected sourceId is
- sourceIdEncoded(String) - Method in class swiss.trustbroker.federation.xmlconfig.ArtifactBinding.ArtifactBindingBuilder
-
Overriding sourceId with encoded value directly in case it is not calculated in the expected way.
- spLogoutMetadataEnabled(boolean) - Method in class swiss.trustbroker.config.dto.SamlProperties.SamlPropertiesBuilder
-
SAML CP-side logout support could be enabled but CPs need to be added as RPs.
- spMetadataEnabled(boolean) - Method in class swiss.trustbroker.config.dto.SamlProperties.SamlPropertiesBuilder
-
SAML SP-side metadata can be hidden setting this feature flag to false.
- spNameFormats(List<String>) - Method in class swiss.trustbroker.config.dto.SamlProperties.SamlPropertiesBuilder
-
RP-side supported name formats
- SPRING_OAUTH2 - Static variable in class swiss.trustbroker.util.ApiSupport
- SPRING_OAUTH2_AUTHORIZE_CTXPATH - Static variable in class swiss.trustbroker.util.ApiSupport
- SPRING_SAML_AUTHENTICATE_CTXPATH - Static variable in class swiss.trustbroker.util.ApiSupport
- SPRING_SAML_FEDERATION_CTXPATH - Static variable in class swiss.trustbroker.util.ApiSupport
- SPRING_SAML_LOGIN_CTXPATH - Static variable in class swiss.trustbroker.util.ApiSupport
- springSecObjectMapper() - Static method in class swiss.trustbroker.oidc.jackson.ObjectMapperFactory
- SpringSessionRegistry - Class in swiss.trustbroker.oidc.session
-
SessionRegistry that used to integrate Spring auth server OIDC session with XTB SSO Session.
- SpringSessionRegistry() - Constructor for class swiss.trustbroker.oidc.session.SpringSessionRegistry
- spStateData(StateData) - Method in class swiss.trustbroker.sessioncache.dto.StateData.StateDataBuilder
- sso(Sso) - Method in class swiss.trustbroker.federation.xmlconfig.RelyingParty.RelyingPartyBuilder
-
SSO configuration for this RP.
- Sso - Class in swiss.trustbroker.federation.xmlconfig
-
XTB Single Sign On (SSO, SLO) configuration for an RP.
- Sso() - Constructor for class swiss.trustbroker.federation.xmlconfig.Sso
- Sso(boolean, String, Boolean, Boolean, FingerprintCheck, String, Boolean, Boolean, List<SloResponse>) - Constructor for class swiss.trustbroker.federation.xmlconfig.Sso
-
Creates a new
Ssoinstance. - SSO - Enum constant in enum class swiss.trustbroker.federation.xmlconfig.SubjectNameScope
-
Use SubjectNameId for SSO
- SSO_GROUP_URL - Static variable in class swiss.trustbroker.util.ApiSupport
- SSO_PARTICIPANTS_URL - Static variable in class swiss.trustbroker.util.ApiSupport
- SSO_PREFIX - Static variable in enum class swiss.trustbroker.config.dto.SsoSessionIdPolicy
- SSO_RP_URL - Static variable in class swiss.trustbroker.util.ApiSupport
- SSO_URL - Static variable in class swiss.trustbroker.util.ApiSupport
- Sso.SsoBuilder - Class in swiss.trustbroker.federation.xmlconfig
- SsoConfig - Class in swiss.trustbroker.config.dto
-
SSO feature configuration.
- SsoConfig() - Constructor for class swiss.trustbroker.config.dto.SsoConfig
- SsoConfig(boolean) - Constructor for class swiss.trustbroker.config.dto.SsoConfig
-
Creates a new
SsoConfiginstance. - SsoConfig.SsoConfigBuilder - Class in swiss.trustbroker.config.dto
- SsoController - Class in swiss.trustbroker.sso.controller
-
SSO services
- SsoController(TrustBrokerProperties, SamlValidator, SsoService, ApiSupport) - Constructor for class swiss.trustbroker.sso.controller.SsoController
- ssoEstablished(StateData, String) - Method in class swiss.trustbroker.sessioncache.service.StateCacheService
- ssoEstablishedTime(Timestamp) - Method in class swiss.trustbroker.audit.dto.AuditDto.AuditDtoBuilder
- ssoEstablishedTime(Timestamp) - Method in class swiss.trustbroker.saml.dto.SsoParticipants.SsoParticipantsBuilder
- ssoEstablishedTime(Timestamp) - Method in class swiss.trustbroker.sessioncache.dto.Lifecycle.LifecycleBuilder
- SsoGroup - Class in swiss.trustbroker.federation.xmlconfig
-
SSO groups are defined per CP as the XTB Single Sign On (SSO, SLO) mechanism separates SSO logins per identity.
- SsoGroup() - Constructor for class swiss.trustbroker.federation.xmlconfig.SsoGroup
- SsoGroup(String, int, int, int, String) - Constructor for class swiss.trustbroker.federation.xmlconfig.SsoGroup
-
Creates a new
SsoGroupinstance. - SsoGroup.SsoGroupBuilder - Class in swiss.trustbroker.federation.xmlconfig
- ssoGroupName(String) - Method in class swiss.trustbroker.audit.dto.AuditDto.AuditDtoBuilder
- ssoGroupName(String) - Method in class swiss.trustbroker.saml.dto.SsoParticipants.SsoParticipantsBuilder
- ssoGroupName(String) - Method in class swiss.trustbroker.sessioncache.dto.SsoState.SsoStateBuilder
- ssoGroups(List<SsoGroup>) - Method in class swiss.trustbroker.federation.xmlconfig.SsoGroupSetup.SsoGroupSetupBuilder
-
List of SSO groups.
- ssoGroupSetup(SsoGroupSetup) - Method in class swiss.trustbroker.config.dto.RelyingPartyDefinitions.RelyingPartyDefinitionsBuilder
- SsoGroupSetup - Class in swiss.trustbroker.federation.xmlconfig
-
All SSO groups are configured in this list.
- SsoGroupSetup() - Constructor for class swiss.trustbroker.federation.xmlconfig.SsoGroupSetup
- SsoGroupSetup(List<SsoGroup>) - Constructor for class swiss.trustbroker.federation.xmlconfig.SsoGroupSetup
-
Creates a new
SsoGroupSetupinstance. - SsoGroupSetup.SsoGroupSetupBuilder - Class in swiss.trustbroker.federation.xmlconfig
- ssoMinQoaLevel(Integer) - Method in class swiss.trustbroker.federation.xmlconfig.SecurityPolicies.SecurityPoliciesBuilder
-
If CP returns AuthnContext of value less than that, no SSO session is created.
- SSOONLY - Enum constant in enum class swiss.trustbroker.config.dto.SsoSessionIdPolicy
-
Generate SSO session ID in SSO case only.
- SsoParticipant - Class in swiss.trustbroker.saml.dto
- SsoParticipant() - Constructor for class swiss.trustbroker.saml.dto.SsoParticipant
- SsoParticipant(String, String, String, String, String) - Constructor for class swiss.trustbroker.saml.dto.SsoParticipant
- SsoParticipant.SsoParticipantBuilder - Class in swiss.trustbroker.saml.dto
- ssoParticipantCount(Integer) - Method in class swiss.trustbroker.audit.dto.AuditDto.AuditDtoBuilder
- ssoParticipants(Set<SsoSessionParticipant>) - Method in class swiss.trustbroker.sessioncache.dto.SsoState.SsoStateBuilder
- SsoParticipants - Class in swiss.trustbroker.saml.dto
- SsoParticipants() - Constructor for class swiss.trustbroker.saml.dto.SsoParticipants
- SsoParticipants(String, String, Timestamp, Timestamp, Set<SsoParticipant>) - Constructor for class swiss.trustbroker.saml.dto.SsoParticipants
- SsoParticipants.SsoParticipantsBuilder - Class in swiss.trustbroker.saml.dto
- ssoQoa(String) - Method in class swiss.trustbroker.audit.dto.AuditDto.AuditDtoBuilder
- ssoQoa(String) - Method in class swiss.trustbroker.sessioncache.dto.SsoState.SsoStateBuilder
- SsoService - Class in swiss.trustbroker.sso.service
- SsoService(RelyingPartyDefinitions, RelyingPartySetupService, AuditService, QoaMappingService, StateCacheService, TrustBrokerProperties, Clock) - Constructor for class swiss.trustbroker.sso.service.SsoService
- SsoService.SloState - Class in swiss.trustbroker.sso.service
- SsoService.SloState.SloStateBuilder - Class in swiss.trustbroker.sso.service
- SsoService.SsoCookieNameParams - Class in swiss.trustbroker.sso.service
- SsoService.SsoSessionOperation - Enum Class in swiss.trustbroker.sso.service
- SsoService.StateWithCookies - Class in swiss.trustbroker.sso.service
- ssoSessionId(String) - Method in class swiss.trustbroker.audit.dto.AuditDto.AuditDtoBuilder
- ssoSessionId(String) - Method in class swiss.trustbroker.audit.dto.OidcAuditData.OidcAuditDataBuilder
- ssoSessionId(String) - Method in class swiss.trustbroker.sessioncache.dto.StateData.StateDataBuilder
- SsoSessionIdPolicy - Enum Class in swiss.trustbroker.config.dto
-
SSO session ID generation policy.
- SsoSessionParticipant - Class in swiss.trustbroker.sessioncache.dto
- SsoSessionParticipant() - Constructor for class swiss.trustbroker.sessioncache.dto.SsoSessionParticipant
- SsoSessionParticipant(String, String, String, String, String) - Constructor for class swiss.trustbroker.sessioncache.dto.SsoSessionParticipant
- SsoSessionParticipant.SsoSessionParticipantBuilder - Class in swiss.trustbroker.sessioncache.dto
- ssoState(SsoState) - Method in class swiss.trustbroker.sessioncache.dto.StateData.StateDataBuilder
- SsoState - Class in swiss.trustbroker.sessioncache.dto
- SsoState() - Constructor for class swiss.trustbroker.sessioncache.dto.SsoState
- SsoState(String, boolean, String, int, int, int, String, Set<SsoSessionParticipant>) - Constructor for class swiss.trustbroker.sessioncache.dto.SsoState
- SsoState.SsoStateBuilder - Class in swiss.trustbroker.sessioncache.dto
- ssoStateValidForDeviceInfo(ClaimsParty, RelyingParty, StateData, StateData, String, String) - Method in class swiss.trustbroker.sso.service.SsoService
- ssoStateValidForJoin(ClaimsParty, RelyingParty, StateData, StateData, String, String) - Method in class swiss.trustbroker.sso.service.SsoService
- ssoSubject(String) - Method in class swiss.trustbroker.saml.dto.SsoParticipants.SsoParticipantsBuilder
- ssoUrl(String) - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsParty.ClaimsPartyBuilder
-
SAML POST endpoint on the CP.
- startInternal() - Method in class swiss.trustbroker.oidc.session.TomcatSessionManager
- state(AccessRequestState) - Method in class swiss.trustbroker.sessioncache.dto.AccessRequestSessionState.AccessRequestSessionStateBuilder
- StateCacheHealthIndicator - Class in swiss.trustbroker.monitoring.service
-
Checks access to the StateCache DB via a dummy query.
- StateCacheHealthIndicator(StateCacheRepository) - Constructor for class swiss.trustbroker.monitoring.service.StateCacheHealthIndicator
- StateCacheProperties - Class in swiss.trustbroker.config.dto
-
Configuration for DB state cache.
- StateCacheProperties() - Constructor for class swiss.trustbroker.config.dto.StateCacheProperties
- StateCacheProperties(int, int, String, int, int, int, int, int, boolean) - Constructor for class swiss.trustbroker.config.dto.StateCacheProperties
-
Creates a new
StateCachePropertiesinstance. - StateCacheProperties.StateCachePropertiesBuilder - Class in swiss.trustbroker.config.dto
- StateCacheRepository - Interface in swiss.trustbroker.sessioncache.repo
- StateCacheService - Class in swiss.trustbroker.sessioncache.service
- StateCacheService(StateCacheRepository, TrustBrokerProperties, GlobalExceptionHandler, Clock, MetricsService) - Constructor for class swiss.trustbroker.sessioncache.service.StateCacheService
- StateData - Class in swiss.trustbroker.sessioncache.dto
- StateData() - Constructor for class swiss.trustbroker.sessioncache.dto.StateData
- StateData(String, Lifecycle) - Constructor for class swiss.trustbroker.sessioncache.dto.StateData
- StateData(String, Lifecycle, String, String, String, StateData, String, String, String, List<String>, QoaComparison, String, List<String>, CpResponse, String, Boolean, Boolean, List<String>, String, String, String, SamlBinding, SamlBinding, String, SsoState, String, String, String, String, String, int, String, AccessRequestSessionState, String, Timestamp, Map<String, String>) - Constructor for class swiss.trustbroker.sessioncache.dto.StateData
- StateData.StateDataBuilder - Class in swiss.trustbroker.sessioncache.dto
- StateEntity - Class in swiss.trustbroker.sessioncache.dto
-
DB entity.
- StateEntity() - Constructor for class swiss.trustbroker.sessioncache.dto.StateEntity
- status(String) - Method in class swiss.trustbroker.audit.dto.AuditDto.AuditDtoBuilder
- status(ConfigStatus) - Method in class swiss.trustbroker.federation.dto.ConfigStatusData.ConfigStatusDataBuilder
- status(Status) - Method in class swiss.trustbroker.monitoring.dto.MonitoringResponse.MonitoringResponseBuilder
- Status - Enum Class in swiss.trustbroker.monitoring.dto
- STATUS_LABEL - Static variable in class swiss.trustbroker.metrics.service.MetricsService
- statusCode - Variable in class swiss.trustbroker.saml.dto.ResponseStatus
-
Usually urn:oasis:names:tc:SAML:2.0:status:Responder
- statusCode(String) - Method in class swiss.trustbroker.saml.dto.ResponseStatus.ResponseStatusBuilder
-
Usually urn:oasis:names:tc:SAML:2.0:status:Responder
- statusMessage - Variable in class swiss.trustbroker.saml.dto.ResponseStatus
-
E.g.
- statusMessage() - Method in class swiss.trustbroker.saml.dto.ResponseStatus
- statusMessage(String) - Method in class swiss.trustbroker.audit.dto.AuditDto.AuditDtoBuilder
- statusMessage(String) - Method in class swiss.trustbroker.saml.dto.ResponseStatus.ResponseStatusBuilder
-
E.g.
- statusMessage(SamlProperties) - Method in class swiss.trustbroker.saml.dto.ResponseStatus
- statusNestedCode - Variable in class swiss.trustbroker.saml.dto.ResponseStatus
-
E.g.
- statusNestedCode(String) - Method in class swiss.trustbroker.saml.dto.ResponseStatus.ResponseStatusBuilder
-
E.g.
- statusPolicy(StatusPolicy) - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsParty.ClaimsPartyBuilder
-
This status policy determines the handling of users that are not found in the IDM: BLOCK_UNKNOWN_USER, ALLOW_UNKNOWN_USER.
- statusPolicy(StatusPolicy) - Method in class swiss.trustbroker.federation.xmlconfig.IdmQuery.IdmQueryBuilder
-
Handling of the user status in IDM.
- StatusPolicy - Enum Class in swiss.trustbroker.federation.xmlconfig
-
Policy for handling if the user returned by the CP is not found or not active in the IDM.
- statusPolicyWithDefault() - Method in class swiss.trustbroker.federation.xmlconfig.IdmQuery
- STEPUP - Enum constant in enum class swiss.trustbroker.sso.service.SsoService.SsoSessionOperation
- stopInternal() - Method in class swiss.trustbroker.oidc.session.TomcatSessionManager
- store(String) - Method in class swiss.trustbroker.federation.xmlconfig.IdmLookup.IdmLookupBuilder
-
Used to select an IdmService implementation
- store(String) - Method in class swiss.trustbroker.federation.xmlconfig.IdmQuery.IdmQueryBuilder
-
Used to select an IdmService implementation
- STRICT - Enum constant in enum class swiss.trustbroker.federation.xmlconfig.FingerprintCheck
-
Fingerprint must match completely.
- STRICT_TRANSPORT_SECURITY - Static variable in class swiss.trustbroker.util.HeaderBuilder
- STRING - Enum constant in enum class swiss.trustbroker.federation.xmlconfig.ClaimsMapper
- STRING - Enum constant in enum class swiss.trustbroker.federation.xmlconfig.Multivalued
-
List transformed to space-separated string.
- StringListAdapter - Class in swiss.trustbroker.federation.xmlconfig
- StringListAdapter() - Constructor for class swiss.trustbroker.federation.xmlconfig.StringListAdapter
- strongestPossible(String) - Method in class swiss.trustbroker.config.dto.QualityOfAuthenticationConfig.QualityOfAuthenticationConfigBuilder
-
QoA value for strongest possible authentication level.
- strongestPossibleAuthLevel(String) - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsParty.ClaimsPartyBuilder
-
This attribute allows to map a QoA of
- subject(String) - Method in class swiss.trustbroker.sessioncache.dto.SsoState.SsoStateBuilder
- subjectConfirmationMethod(String) - Method in class swiss.trustbroker.saml.dto.CpResponse.CpResponseBuilder
-
Subject confirmation method.
- SubjectName - Class in swiss.trustbroker.federation.xmlconfig
-
The SubjectName map allows to pick an attribute as a mapped subject nameId from the following sources in this order: AttributesSelection >UserDetailsSelection PropertiesSelection If the issuer is defined, the picking is done per CP.
- SubjectName() - Constructor for class swiss.trustbroker.federation.xmlconfig.SubjectName
- SubjectName(String, String, String, SubjectNameScope) - Constructor for class swiss.trustbroker.federation.xmlconfig.SubjectName
-
Creates a new
SubjectNameinstance. - SubjectName.SubjectNameBuilder - Class in swiss.trustbroker.federation.xmlconfig
- subjectNameId(String) - Method in class swiss.trustbroker.federation.xmlconfig.IdmQuery.IdmQueryBuilder
-
Subject Name ID as filtering parameter for the IDM.
- subjectNameId(String) - Method in class swiss.trustbroker.sessioncache.dto.StateData.StateDataBuilder
- subjectNameMappings(SubjectNameMappings) - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsParty.ClaimsPartyBuilder
-
Subject Name ID mappings for this CP.
- subjectNameMappings(SubjectNameMappings) - Method in class swiss.trustbroker.federation.xmlconfig.RelyingParty.RelyingPartyBuilder
-
Subject Name ID mappings for this RP.
- SubjectNameMappings - Class in swiss.trustbroker.federation.xmlconfig
-
Subject Name ID mappings.
- SubjectNameMappings() - Constructor for class swiss.trustbroker.federation.xmlconfig.SubjectNameMappings
- SubjectNameMappings(Boolean, List<SubjectName>) - Constructor for class swiss.trustbroker.federation.xmlconfig.SubjectNameMappings
-
Creates a new
SubjectNameMappingsinstance. - SubjectNameMappings.SubjectNameMappingsBuilder - Class in swiss.trustbroker.federation.xmlconfig
- SubjectNameScope - Enum Class in swiss.trustbroker.federation.xmlconfig
- subjects(List<SubjectName>) - Method in class swiss.trustbroker.federation.xmlconfig.SubjectNameMappings.SubjectNameMappingsBuilder
-
List of mapping
- subjectTokenMaxAgeSec(Integer) - Method in class swiss.trustbroker.federation.xmlconfig.OidcSecurityPolicies.OidcSecurityPoliciesBuilder
-
Restrict Token Exchange subject_token age
Default: 60 - subjectTokenMaxUseCount(Integer) - Method in class swiss.trustbroker.federation.xmlconfig.OidcSecurityPolicies.OidcSecurityPoliciesBuilder
-
Maximum number a subject_token can be used
Default: 1 - subjectTokenNotBeforeToleranceSec(Integer) - Method in class swiss.trustbroker.federation.xmlconfig.OidcSecurityPolicies.OidcSecurityPoliciesBuilder
-
subject_token tolerance NTP drift tolerance.
- subjectTokenNotOnOrAfterToleranceSec(Integer) - Method in class swiss.trustbroker.federation.xmlconfig.OidcSecurityPolicies.OidcSecurityPoliciesBuilder
-
subject_token timestamp clock/transfer tolerance.
- subjectValiditySeconds(long) - Method in class swiss.trustbroker.saml.dto.ResponseParameters.ResponseParametersBuilder
- subPath(String) - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsProviderSetup.ClaimsProviderSetupBuilder
- subPath(String) - Method in class swiss.trustbroker.federation.xmlconfig.CounterParty.CounterPartyBuilder
- subPath(String) - Method in class swiss.trustbroker.federation.xmlconfig.RelyingPartySetup.RelyingPartySetupBuilder
- subResource(String) - Method in class swiss.trustbroker.federation.xmlconfig.IdmQuery.IdmQueryBuilder
-
Sub resource parameter for the IDM (baseDN in case of LDAP).
- Support - Class in swiss.trustbroker.config.dto
-
Support configuration.
- Support() - Constructor for class swiss.trustbroker.config.dto.Support
- Support(boolean, String, String, String, String, List<String>, Map<String, String>, int) - Constructor for class swiss.trustbroker.config.dto.Support
-
Creates a new
Supportinstance. - SUPPORT_FLAG - Static variable in class swiss.trustbroker.federation.xmlconfig.Flow
- Support.SupportBuilder - Class in swiss.trustbroker.config.dto
- SUPPORTED - Enum constant in enum class swiss.trustbroker.federation.xmlconfig.ArtifactBindingMode
-
Outbound: If inbound from RP used Artifact Binding it is also used for the request to CP and/or for the response to RP.
- supportedBindings(List<SamlBinding>) - Method in class swiss.trustbroker.federation.xmlconfig.Saml.SamlBuilder
-
List of supported inbound SAML bindings.
- supportedBindings(List<WsTrustBinding>) - Method in class swiss.trustbroker.federation.xmlconfig.WsTrust.WsTrustBuilder
-
List of supported inbound WS-Trust bindings.
- supportedFrameAncestors() - Method in class swiss.trustbroker.oidc.OidcFrameAncestorHandler
- supportedFrameAncestors() - Method in interface swiss.trustbroker.util.FrameAncestorHandler
- supportEmail(String) - Method in class swiss.trustbroker.federation.xmlconfig.Flow.FlowBuilder
-
Show (application specific) support e-mail address on the error page.
- supportInfo(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.Flow.FlowBuilder
-
Show error page including a support info section.
- SupportInfo - Class in swiss.trustbroker.homerealmdiscovery.dto
- SupportInfo.SupportInfoBuilder - Class in swiss.trustbroker.homerealmdiscovery.dto
- supportPhone(String) - Method in class swiss.trustbroker.federation.xmlconfig.Flow.FlowBuilder
-
Show (application specific) support phone number on the error page.
- supports(Class<?>) - Method in class swiss.trustbroker.oidc.CustomOAuth2TokenExchangeAuthenticationProvider
- supports(Class<?>) - Method in class swiss.trustbroker.oidc.CustomTokenIntrospectionAuthenticationProvider
- supports(Class<?>) - Method in class swiss.trustbroker.oidc.CustomTokenRevocationAuthenticationProvider
- supports(Class<?>) - Method in class swiss.trustbroker.oidc.CustomUserInfoAuthenticationProvider
- supports(Class<?>) - Method in class swiss.trustbroker.oidc.opensaml5.OpenSaml5AuthenticationProvider
- supports(Class<?>) - Method in class swiss.trustbroker.oidc.pkce.PublicClientRefreshTokenAuthenticationProvider
- suppressAttribute(String, AuditDto.ResponseAttributeValue) - Method in interface swiss.trustbroker.audit.service.AuditLogFilter
- suppressField(String, Object) - Method in interface swiss.trustbroker.audit.service.AuditLogFilter
- SWISS_SOCIAL_SECURITY_NO - Enum constant in enum class swiss.trustbroker.federation.xmlconfig.ClaimsMapper
- swiss.trustbroker - package swiss.trustbroker
- swiss.trustbroker.accessrequest.service - package swiss.trustbroker.accessrequest.service
- swiss.trustbroker.announcement.controller - package swiss.trustbroker.announcement.controller
- swiss.trustbroker.announcement.service - package swiss.trustbroker.announcement.service
- swiss.trustbroker.audit.dto - package swiss.trustbroker.audit.dto
- swiss.trustbroker.audit.service - package swiss.trustbroker.audit.service
- swiss.trustbroker.config - package swiss.trustbroker.config
- swiss.trustbroker.config.controller - package swiss.trustbroker.config.controller
- swiss.trustbroker.config.dto - package swiss.trustbroker.config.dto
- swiss.trustbroker.exception - package swiss.trustbroker.exception
- swiss.trustbroker.federation.controller - package swiss.trustbroker.federation.controller
- swiss.trustbroker.federation.dto - package swiss.trustbroker.federation.dto
- swiss.trustbroker.federation.service - package swiss.trustbroker.federation.service
- swiss.trustbroker.federation.xmlconfig - package swiss.trustbroker.federation.xmlconfig
-
Classes for the XML based configuration.
- swiss.trustbroker.gui - package swiss.trustbroker.gui
- swiss.trustbroker.homerealmdiscovery.controller - package swiss.trustbroker.homerealmdiscovery.controller
- swiss.trustbroker.homerealmdiscovery.dto - package swiss.trustbroker.homerealmdiscovery.dto
- swiss.trustbroker.homerealmdiscovery.service - package swiss.trustbroker.homerealmdiscovery.service
- swiss.trustbroker.homerealmdiscovery.util - package swiss.trustbroker.homerealmdiscovery.util
- swiss.trustbroker.mapping.dto - package swiss.trustbroker.mapping.dto
- swiss.trustbroker.mapping.service - package swiss.trustbroker.mapping.service
- swiss.trustbroker.mapping.util - package swiss.trustbroker.mapping.util
- swiss.trustbroker.metrics.config - package swiss.trustbroker.metrics.config
- swiss.trustbroker.metrics.service - package swiss.trustbroker.metrics.service
- swiss.trustbroker.monitoring.controller - package swiss.trustbroker.monitoring.controller
- swiss.trustbroker.monitoring.dto - package swiss.trustbroker.monitoring.dto
- swiss.trustbroker.monitoring.service - package swiss.trustbroker.monitoring.service
- swiss.trustbroker.oidc - package swiss.trustbroker.oidc
- swiss.trustbroker.oidc.cache.service - package swiss.trustbroker.oidc.cache.service
- swiss.trustbroker.oidc.client.controller - package swiss.trustbroker.oidc.client.controller
- swiss.trustbroker.oidc.client.dto - package swiss.trustbroker.oidc.client.dto
- swiss.trustbroker.oidc.client.service - package swiss.trustbroker.oidc.client.service
- swiss.trustbroker.oidc.jackson - package swiss.trustbroker.oidc.jackson
- swiss.trustbroker.oidc.opensaml5 - package swiss.trustbroker.oidc.opensaml5
- swiss.trustbroker.oidc.pkce - package swiss.trustbroker.oidc.pkce
- swiss.trustbroker.oidc.session - package swiss.trustbroker.oidc.session
- swiss.trustbroker.oidc.sso.controller - package swiss.trustbroker.oidc.sso.controller
- swiss.trustbroker.oidc.tx - package swiss.trustbroker.oidc.tx
- swiss.trustbroker.profileselection.controller - package swiss.trustbroker.profileselection.controller
- swiss.trustbroker.profileselection.service - package swiss.trustbroker.profileselection.service
- swiss.trustbroker.saml.controller - package swiss.trustbroker.saml.controller
- swiss.trustbroker.saml.dto - package swiss.trustbroker.saml.dto
- swiss.trustbroker.saml.service - package swiss.trustbroker.saml.service
- swiss.trustbroker.saml.util - package swiss.trustbroker.saml.util
- swiss.trustbroker.script.service - package swiss.trustbroker.script.service
- swiss.trustbroker.sessioncache.dto - package swiss.trustbroker.sessioncache.dto
- swiss.trustbroker.sessioncache.repo - package swiss.trustbroker.sessioncache.repo
- swiss.trustbroker.sessioncache.service - package swiss.trustbroker.sessioncache.service
- swiss.trustbroker.sso.controller - package swiss.trustbroker.sso.controller
- swiss.trustbroker.sso.dto - package swiss.trustbroker.sso.dto
- swiss.trustbroker.sso.service - package swiss.trustbroker.sso.service
- swiss.trustbroker.util - package swiss.trustbroker.util
- swiss.trustbroker.waf - package swiss.trustbroker.waf
- swiss.trustbroker.wstrustclient.dto - package swiss.trustbroker.wstrustclient.dto
- swiss.trustbroker.wstrustclient.service - package swiss.trustbroker.wstrustclient.service
- swiss.trustbroker.wstrustclient.xml - package swiss.trustbroker.wstrustclient.xml
- syncSchedule(String) - Method in class swiss.trustbroker.config.dto.AnnouncementConfig.AnnouncementConfigBuilder
-
Schedule for fetching current announcements.
T
- taggedResourceMaxAgeSec(int) - Method in class swiss.trustbroker.config.dto.GuiProperties.GuiPropertiesBuilder
-
Browser caching max-age in seconds for resources that have are tagged with an ETAG (a hash or version number).
- targetMaxEntries(int) - Method in class swiss.trustbroker.config.dto.StateCacheProperties.StateCachePropertiesBuilder
-
If the session DB runs full (more than targetMaxEntries), XTB starts garbage collecting sessions, that might expire anyway soon to make room for new sessions and prevent storage issues.
- techuser(TechUserProperties) - Method in class swiss.trustbroker.config.dto.IdmConfig.IdmConfigBuilder
-
Technical user for accessing the IDM.
- TechUserProperties - Class in swiss.trustbroker.config.dto
-
Technical user configuration for IDM.
- TechUserProperties() - Constructor for class swiss.trustbroker.config.dto.TechUserProperties
- TechUserProperties(String, String, Set<String>) - Constructor for class swiss.trustbroker.config.dto.TechUserProperties
-
Creates a new
TechUserPropertiesinstance. - TechUserProperties.TechUserPropertiesBuilder - Class in swiss.trustbroker.config.dto
- testNetworkHeader(String) - Method in class swiss.trustbroker.config.dto.NetworkConfig.NetworkConfigBuilder
-
HTTP header for simulating the client network.
- THEME - Enum constant in enum class swiss.trustbroker.config.dto.GuiButtons
-
Enable theme selector.
- themeAssets(String) - Method in class swiss.trustbroker.config.dto.GuiProperties.GuiPropertiesBuilder
-
Resource path where theme assets are stored.
- themeCookie(CookieProperties) - Method in class swiss.trustbroker.config.dto.GuiProperties.GuiPropertiesBuilder
-
Attributes for the cookie that stores the user's theme (if there is a theme selector).
- themeCookie(CookieConfig) - Method in class swiss.trustbroker.homerealmdiscovery.dto.GuiConfig.GuiConfigBuilder
- themeFilter(TrustBrokerProperties) - Method in class swiss.trustbroker.gui.WebFilterConfig
- ThemeFilter - Class in swiss.trustbroker.gui
-
Filter that sets the cookie with the UI theme for the Angular application, if missing.
- ThemeFilter(TrustBrokerProperties) - Constructor for class swiss.trustbroker.gui.ThemeFilter
- themeFilterRegistrationBean(TrustBrokerProperties) - Method in class swiss.trustbroker.gui.WebFilterConfig
- throwError(String, String, OAuth2AuthorizationCodeRequestAuthenticationToken, RegisteredClient) - Static method in class swiss.trustbroker.oidc.OidcExceptionHelper
- throwError(OAuth2Error, String, OAuth2AuthorizationCodeRequestAuthenticationToken, RegisteredClient) - Static method in class swiss.trustbroker.oidc.OidcExceptionHelper
- tiles(List<UiObject>) - Method in class swiss.trustbroker.saml.dto.UiObjects.UiObjectsBuilder
-
Tiles for CPs.
- TIME_EPOCH - Enum constant in enum class swiss.trustbroker.federation.xmlconfig.ClaimsMapper
- TIME_ISO - Enum constant in enum class swiss.trustbroker.federation.xmlconfig.ClaimsMapper
- timedAspect(MeterRegistry) - Method in class swiss.trustbroker.metrics.config.TimedConfig
- TimedConfig - Class in swiss.trustbroker.metrics.config
- TimedConfig() - Constructor for class swiss.trustbroker.metrics.config.TimedConfig
- title(String) - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsProvider.ClaimsProviderBuilder
-
Title for the CP tile and help item.
- title(String) - Method in class swiss.trustbroker.saml.dto.UiObject.UiObjectBuilder
-
Title for the CP tile and help item.
- TLS_CLIENT_AUTH - Enum constant in enum class swiss.trustbroker.federation.xmlconfig.ClientAuthenticationMethod
- tlsProtocol(String) - Method in class swiss.trustbroker.config.dto.IdmConfig.IdmConfigBuilder
-
TLS protocol to use for the connection.
- TMP_PREFIX - Static variable in enum class swiss.trustbroker.config.dto.SsoSessionIdPolicy
- toBuilder() - Method in class swiss.trustbroker.federation.xmlconfig.Definition
- toBuilder() - Method in class swiss.trustbroker.oidc.client.dto.OpenIdProviderConfiguration
- toBuilder() - Method in class swiss.trustbroker.saml.dto.CpResponse
- toBuilder() - Method in class swiss.trustbroker.sessioncache.dto.Lifecycle
- toBuilder() - Method in class swiss.trustbroker.sessioncache.dto.StateData
- TOKEN_EXCHANGE - Enum constant in enum class swiss.trustbroker.federation.xmlconfig.AuthorizationGrantType
- tokenClaimToStringList(Object) - Static method in enum class swiss.trustbroker.federation.xmlconfig.ClaimsMapper
- tokenCustomizer(JWKSource<SecurityContext>) - Method in class swiss.trustbroker.oidc.OidcSecurityConfiguration
- tokenEndpoint(URI) - Method in class swiss.trustbroker.oidc.client.dto.OpenIdProviderConfiguration.OpenIdProviderConfigurationBuilder
- TokenExchangeResponseCustomizer - Class in swiss.trustbroker.oidc
- TokenExchangeResponseCustomizer(RelyingPartyDefinitions, TrustBrokerProperties, JWKSource<SecurityContext>, OidcAuditService) - Constructor for class swiss.trustbroker.oidc.TokenExchangeResponseCustomizer
- tokenLifetimeSec(long) - Method in class swiss.trustbroker.config.dto.SecurityChecks.SecurityChecksBuilder
-
Used for Condition.notOnOrAfterSeconds and SubjectConfirmationData.notOnOrAfterSeconds.
- tokenRequestParams(Map<String, String>) - Method in class swiss.trustbroker.audit.dto.AuditDto.AuditDtoBuilder
- tokenTimeToLiveMin(Integer) - Method in class swiss.trustbroker.federation.xmlconfig.OidcSecurityPolicies.OidcSecurityPoliciesBuilder
-
Token validity in minutes.
- toKeystoreProperties(SignerStore) - Static method in class swiss.trustbroker.util.CertificateUtil
- TOLERANCE_NOT_AFTER_SEC - Static variable in class swiss.trustbroker.config.dto.SecurityChecks
- TOLERANCE_NOT_BEFORE_SEC - Static variable in class swiss.trustbroker.config.dto.SecurityChecks
- tomcatContextCustomizer(TrustBrokerProperties) - Method in class swiss.trustbroker.config.TrustBrokerConfiguration
- TomcatSession - Class in swiss.trustbroker.oidc.session
- TomcatSession(TomcatSessionManager) - Constructor for class swiss.trustbroker.oidc.session.TomcatSession
- tomcatSessionManager(StateCacheService, SsoService, RelyingPartyDefinitions, TrustBrokerProperties, CustomOAuth2AuthorizationService) - Method in class swiss.trustbroker.config.WebConfiguration
- TomcatSessionManager - Class in swiss.trustbroker.oidc.session
-
Inspired by (but not copied from) hazelcast-tomcat-sessionmanager
- TomcatSessionManager(StateCacheService, SsoService, RelyingPartyDefinitions, TrustBrokerProperties, TomcatSessionMode, CustomOAuth2AuthorizationService) - Constructor for class swiss.trustbroker.oidc.session.TomcatSessionManager
- TomcatSessionMode - Enum Class in swiss.trustbroker.config.dto
-
Mode for Tomcat session.
- toOidcErrorCode(OidcProperties, String, String, String, String) - Static method in class swiss.trustbroker.saml.util.SamlStatusCode
- toSignerKeystore(KeystoreProperties) - Static method in class swiss.trustbroker.util.CertificateUtil
- toSignerTruststore(KeystoreProperties) - Static method in class swiss.trustbroker.util.CertificateUtil
- toString() - Method in class swiss.trustbroker.audit.dto.AuditDto.AuditDtoBuilder
- toString() - Method in class swiss.trustbroker.audit.dto.AuditDto.ResponseAttributeValue.ResponseAttributeValueBuilder
- toString() - Method in class swiss.trustbroker.audit.dto.AuditDto.ResponseAttributeValue
- toString() - Method in class swiss.trustbroker.audit.dto.AuditDto.ResponseAttributeValues
- toString() - Method in class swiss.trustbroker.audit.dto.AuditDto
- toString() - Method in class swiss.trustbroker.audit.dto.OidcAuditData.OidcAuditDataBuilder
- toString() - Method in class swiss.trustbroker.audit.dto.OidcAuditData
- toString() - Method in class swiss.trustbroker.audit.service.AuditLogBuilder
- toString() - Method in class swiss.trustbroker.config.dto.AccessRequestConfig.AccessRequestConfigBuilder
- toString() - Method in class swiss.trustbroker.config.dto.AccessRequestConfig
- toString() - Method in class swiss.trustbroker.config.dto.AdminAction
- toString() - Method in class swiss.trustbroker.config.dto.AnnouncementConfig.AnnouncementConfigBuilder
- toString() - Method in class swiss.trustbroker.config.dto.AnnouncementConfig
- toString() - Method in class swiss.trustbroker.config.dto.ArtifactResolution.ArtifactResolutionBuilder
- toString() - Method in class swiss.trustbroker.config.dto.ArtifactResolution
- toString() - Method in class swiss.trustbroker.config.dto.AttributeConfig.AttributeConfigBuilder
- toString() - Method in class swiss.trustbroker.config.dto.AttributeConfig
- toString() - Method in class swiss.trustbroker.config.dto.AttributeProperties.AttributePropertiesBuilder
- toString() - Method in class swiss.trustbroker.config.dto.AttributeProperties
- toString() - Method in class swiss.trustbroker.config.dto.AuditConfig
- toString() - Method in class swiss.trustbroker.config.dto.Banner.BannerBuilder
- toString() - Method in class swiss.trustbroker.config.dto.Banner
- toString() - Method in class swiss.trustbroker.config.dto.ContentSecurityPolicies.ContentSecurityPoliciesBuilder
- toString() - Method in class swiss.trustbroker.config.dto.ContentSecurityPolicies
- toString() - Method in class swiss.trustbroker.config.dto.CookieProperties.CookiePropertiesBuilder
- toString() - Method in class swiss.trustbroker.config.dto.CookieProperties
- toString() - Method in class swiss.trustbroker.config.dto.CorsPolicies.CorsPoliciesBuilder
- toString() - Method in class swiss.trustbroker.config.dto.CorsPolicies
- toString() - Method in class swiss.trustbroker.config.dto.FrameOptionsPolicies.FrameOptionsPoliciesBuilder
- toString() - Method in class swiss.trustbroker.config.dto.FrameOptionsPolicies
- toString() - Method in class swiss.trustbroker.config.dto.GuiProperties.GuiPropertiesBuilder
- toString() - Method in class swiss.trustbroker.config.dto.GuiProperties
- toString() - Method in class swiss.trustbroker.config.dto.IdmConfig.IdmConfigBuilder
- toString() - Method in class swiss.trustbroker.config.dto.IdmConfig
- toString() - Method in class swiss.trustbroker.config.dto.LdapStoreConfig
- toString() - Method in class swiss.trustbroker.config.dto.MonitoringConfig.MonitoringConfigBuilder
- toString() - Method in class swiss.trustbroker.config.dto.MonitoringConfig
- toString() - Method in class swiss.trustbroker.config.dto.NetworkConfig.NetworkConfigBuilder
- toString() - Method in class swiss.trustbroker.config.dto.NetworkConfig
- toString() - Method in class swiss.trustbroker.config.dto.OidcIdentityProvider
- toString() - Method in class swiss.trustbroker.config.dto.OidcIdpCredential.OidcIdpCredentialBuilder
- toString() - Method in class swiss.trustbroker.config.dto.OidcIdpCredential
- toString() - Method in class swiss.trustbroker.config.dto.OidcProperties
- toString() - Method in class swiss.trustbroker.config.dto.OpsAuditConfig
- toString() - Method in class swiss.trustbroker.config.dto.ProfileSelectionConfig.ProfileSelectionConfigBuilder
- toString() - Method in class swiss.trustbroker.config.dto.ProfileSelectionConfig
- toString() - Method in class swiss.trustbroker.config.dto.QualityOfAuthenticationConfig.QualityOfAuthenticationConfigBuilder
- toString() - Method in class swiss.trustbroker.config.dto.QualityOfAuthenticationConfig
- toString() - Method in class swiss.trustbroker.config.dto.RelyingPartyDefinitions.RelyingPartyDefinitionsBuilder
- toString() - Method in class swiss.trustbroker.config.dto.RelyingPartyDefinitions
- toString() - Method in class swiss.trustbroker.config.dto.SamlNamespace.SamlNamespaceBuilder
- toString() - Method in class swiss.trustbroker.config.dto.SamlNamespace
- toString() - Method in class swiss.trustbroker.config.dto.SamlProperties.SamlPropertiesBuilder
- toString() - Method in class swiss.trustbroker.config.dto.SamlProperties
- toString() - Method in class swiss.trustbroker.config.dto.SecToken.SecTokenBuilder
- toString() - Method in class swiss.trustbroker.config.dto.SecToken
- toString() - Method in class swiss.trustbroker.config.dto.SecurityChecks.SecurityChecksBuilder
- toString() - Method in class swiss.trustbroker.config.dto.SecurityChecks
- toString() - Method in class swiss.trustbroker.config.dto.SsoConfig.SsoConfigBuilder
- toString() - Method in class swiss.trustbroker.config.dto.SsoConfig
- toString() - Method in class swiss.trustbroker.config.dto.StateCacheProperties.StateCachePropertiesBuilder
- toString() - Method in class swiss.trustbroker.config.dto.StateCacheProperties
- toString() - Method in class swiss.trustbroker.config.dto.Support.SupportBuilder
- toString() - Method in class swiss.trustbroker.config.dto.Support
- toString() - Method in class swiss.trustbroker.config.dto.TechUserProperties.TechUserPropertiesBuilder
- toString() - Method in class swiss.trustbroker.config.dto.TechUserProperties
- toString() - Method in class swiss.trustbroker.config.dto.VersionInfo
- toString() - Method in class swiss.trustbroker.config.dto.WsFedConfig
- toString() - Method in class swiss.trustbroker.config.dto.WsFedConfig.WsFedConfigBuilder
- toString() - Method in class swiss.trustbroker.config.dto.WsTrustConfig
- toString() - Method in class swiss.trustbroker.config.dto.WsTrustConfig.WsTrustConfigBuilder
- toString() - Method in class swiss.trustbroker.config.TrustBrokerProperties
- toString() - Method in class swiss.trustbroker.federation.dto.ConfigElementStatus.ConfigElementStatusBuilder
- toString() - Method in class swiss.trustbroker.federation.dto.ConfigElementStatus
- toString() - Method in class swiss.trustbroker.federation.dto.ConfigStatusData.ConfigStatusDataBuilder
- toString() - Method in class swiss.trustbroker.federation.dto.ConfigStatusData
- toString() - Method in class swiss.trustbroker.federation.xmlconfig.AccessRequest.AccessRequestBuilder
- toString() - Method in class swiss.trustbroker.federation.xmlconfig.AccessRequest
- toString() - Method in class swiss.trustbroker.federation.xmlconfig.AcClass.AcClassBuilder
- toString() - Method in class swiss.trustbroker.federation.xmlconfig.AcClass
- toString() - Method in class swiss.trustbroker.federation.xmlconfig.AccountSource.AccountSourceBuilder
- toString() - Method in class swiss.trustbroker.federation.xmlconfig.AccountSource
- toString() - Method in class swiss.trustbroker.federation.xmlconfig.AcWhitelist.AcWhitelistBuilder
- toString() - Method in class swiss.trustbroker.federation.xmlconfig.AcWhitelist
- toString() - Method in class swiss.trustbroker.federation.xmlconfig.AnnouncementRpConfig.AnnouncementRpConfigBuilder
- toString() - Method in class swiss.trustbroker.federation.xmlconfig.AnnouncementRpConfig
- toString() - Method in class swiss.trustbroker.federation.xmlconfig.ArtifactBinding.ArtifactBindingBuilder
- toString() - Method in class swiss.trustbroker.federation.xmlconfig.ArtifactBinding
- toString() - Method in class swiss.trustbroker.federation.xmlconfig.AttributesSelection.AttributesSelectionBuilder
- toString() - Method in class swiss.trustbroker.federation.xmlconfig.AttributesSelection
- toString() - Method in class swiss.trustbroker.federation.xmlconfig.Audiences.AudiencesBuilder
- toString() - Method in class swiss.trustbroker.federation.xmlconfig.Audiences
- toString() - Method in class swiss.trustbroker.federation.xmlconfig.AuthorizationGrantTypes.AuthorizationGrantTypesBuilder
- toString() - Method in class swiss.trustbroker.federation.xmlconfig.AuthorizationGrantTypes
- toString() - Method in class swiss.trustbroker.federation.xmlconfig.AuthorizedApplication.AuthorizedApplicationBuilder
- toString() - Method in class swiss.trustbroker.federation.xmlconfig.AuthorizedApplication
- toString() - Method in class swiss.trustbroker.federation.xmlconfig.AuthorizedApplications.AuthorizedApplicationsBuilder
- toString() - Method in class swiss.trustbroker.federation.xmlconfig.AuthorizedApplications
- toString() - Method in class swiss.trustbroker.federation.xmlconfig.Certificates.CertificatesBuilder
- toString() - Method in class swiss.trustbroker.federation.xmlconfig.Certificates
- toString() - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsParty.ClaimsPartyBuilder
- toString() - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsParty
- toString() - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsProvider.ClaimsProviderBuilder
- toString() - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsProvider
- toString() - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsProviderDefinitions.ClaimsProviderDefinitionsBuilder
- toString() - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsProviderDefinitions
- toString() - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsProviderMappings.ClaimsProviderMappingsBuilder
- toString() - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsProviderMappings
- toString() - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsProviderSetup.ClaimsProviderSetupBuilder
- toString() - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsProviderSetup
- toString() - Method in class swiss.trustbroker.federation.xmlconfig.ClientAuthenticationMethods.ClientAuthenticationMethodsBuilder
- toString() - Method in class swiss.trustbroker.federation.xmlconfig.ClientAuthenticationMethods
- toString() - Method in class swiss.trustbroker.federation.xmlconfig.ConstAttributes.ConstAttributesBuilder
- toString() - Method in class swiss.trustbroker.federation.xmlconfig.ConstAttributes
- toString() - Method in class swiss.trustbroker.federation.xmlconfig.CounterParty.CounterPartyBuilder
- toString() - Method in class swiss.trustbroker.federation.xmlconfig.CounterParty
- toString() - Method in class swiss.trustbroker.federation.xmlconfig.Definition.DefinitionBuilder
- toString() - Method in class swiss.trustbroker.federation.xmlconfig.Definition
- toString() - Method in class swiss.trustbroker.federation.xmlconfig.Encryption.EncryptionBuilder
- toString() - Method in class swiss.trustbroker.federation.xmlconfig.Encryption
- toString() - Method in class swiss.trustbroker.federation.xmlconfig.Flow.FlowBuilder
- toString() - Method in class swiss.trustbroker.federation.xmlconfig.Flow
- toString() - Method in class swiss.trustbroker.federation.xmlconfig.FlowPolicies.FlowPoliciesBuilder
- toString() - Method in class swiss.trustbroker.federation.xmlconfig.FlowPolicies
- toString() - Method in class swiss.trustbroker.federation.xmlconfig.HomeName.HomeNameBuilder
- toString() - Method in class swiss.trustbroker.federation.xmlconfig.HomeName
- toString() - Method in class swiss.trustbroker.federation.xmlconfig.IdmLookup.IdmLookupBuilder
- toString() - Method in class swiss.trustbroker.federation.xmlconfig.IdmLookup
- toString() - Method in class swiss.trustbroker.federation.xmlconfig.IdmQuery.IdmQueryBuilder
- toString() - Method in class swiss.trustbroker.federation.xmlconfig.IdmQuery
- toString() - Method in class swiss.trustbroker.federation.xmlconfig.Oidc.OidcBuilder
- toString() - Method in class swiss.trustbroker.federation.xmlconfig.Oidc
- toString() - Method in class swiss.trustbroker.federation.xmlconfig.OidcClaimsSources.OidcClaimsSourcesBuilder
- toString() - Method in class swiss.trustbroker.federation.xmlconfig.OidcClaimsSources
- toString() - Method in class swiss.trustbroker.federation.xmlconfig.OidcClient.OidcClientBuilder
- toString() - Method in class swiss.trustbroker.federation.xmlconfig.OidcClient
- toString() - Method in class swiss.trustbroker.federation.xmlconfig.OidcSecurityPolicies.OidcSecurityPoliciesBuilder
- toString() - Method in class swiss.trustbroker.federation.xmlconfig.OidcSecurityPolicies
- toString() - Method in class swiss.trustbroker.federation.xmlconfig.ProfileSelection.ProfileSelectionBuilder
- toString() - Method in class swiss.trustbroker.federation.xmlconfig.ProfileSelection
- toString() - Method in class swiss.trustbroker.federation.xmlconfig.ProtocolEndpoints.ProtocolEndpointsBuilder
- toString() - Method in class swiss.trustbroker.federation.xmlconfig.ProtocolEndpoints
- toString() - Method in class swiss.trustbroker.federation.xmlconfig.Provisioning.ProvisioningBuilder
- toString() - Method in class swiss.trustbroker.federation.xmlconfig.Provisioning
- toString() - Method in class swiss.trustbroker.federation.xmlconfig.Qoa.QoaBuilder
- toString() - Method in class swiss.trustbroker.federation.xmlconfig.Qoa
- toString() - Method in class swiss.trustbroker.federation.xmlconfig.RelyingParty.RelyingPartyBuilder
- toString() - Method in class swiss.trustbroker.federation.xmlconfig.RelyingParty
- toString() - Method in class swiss.trustbroker.federation.xmlconfig.RelyingPartySetup.RelyingPartySetupBuilder
- toString() - Method in class swiss.trustbroker.federation.xmlconfig.RelyingPartySetup
- toString() - Method in class swiss.trustbroker.federation.xmlconfig.Resources.ResourcesBuilder
- toString() - Method in class swiss.trustbroker.federation.xmlconfig.Resources
- toString() - Method in class swiss.trustbroker.federation.xmlconfig.Saml.SamlBuilder
- toString() - Method in class swiss.trustbroker.federation.xmlconfig.Saml
- toString() - Method in class swiss.trustbroker.federation.xmlconfig.Scopes.ScopesBuilder
- toString() - Method in class swiss.trustbroker.federation.xmlconfig.Scopes
- toString() - Method in class swiss.trustbroker.federation.xmlconfig.Script.ScriptBuilder
- toString() - Method in class swiss.trustbroker.federation.xmlconfig.Script
- toString() - Method in class swiss.trustbroker.federation.xmlconfig.Scripts.ScriptsBuilder
- toString() - Method in class swiss.trustbroker.federation.xmlconfig.Scripts
- toString() - Method in class swiss.trustbroker.federation.xmlconfig.SecurityPolicies.SecurityPoliciesBuilder
- toString() - Method in class swiss.trustbroker.federation.xmlconfig.SecurityPolicies
- toString() - Method in class swiss.trustbroker.federation.xmlconfig.Signature.SignatureBuilder
- toString() - Method in class swiss.trustbroker.federation.xmlconfig.Signature
- toString() - Method in class swiss.trustbroker.federation.xmlconfig.SignerKeystore.SignerKeystoreBuilder
- toString() - Method in class swiss.trustbroker.federation.xmlconfig.SignerKeystore
- toString() - Method in class swiss.trustbroker.federation.xmlconfig.SignerStore.SignerStoreBuilder
- toString() - Method in class swiss.trustbroker.federation.xmlconfig.SignerStore
- toString() - Method in class swiss.trustbroker.federation.xmlconfig.SignerTruststore.SignerTruststoreBuilder
- toString() - Method in class swiss.trustbroker.federation.xmlconfig.SignerTruststore
- toString() - Method in class swiss.trustbroker.federation.xmlconfig.SloResponse.SloResponseBuilder
- toString() - Method in class swiss.trustbroker.federation.xmlconfig.SloResponse
- toString() - Method in class swiss.trustbroker.federation.xmlconfig.Sso.SsoBuilder
- toString() - Method in class swiss.trustbroker.federation.xmlconfig.Sso
- toString() - Method in class swiss.trustbroker.federation.xmlconfig.SsoGroup.SsoGroupBuilder
- toString() - Method in class swiss.trustbroker.federation.xmlconfig.SsoGroup
- toString() - Method in class swiss.trustbroker.federation.xmlconfig.SsoGroupSetup.SsoGroupSetupBuilder
- toString() - Method in class swiss.trustbroker.federation.xmlconfig.SsoGroupSetup
- toString() - Method in class swiss.trustbroker.federation.xmlconfig.SubjectName.SubjectNameBuilder
- toString() - Method in class swiss.trustbroker.federation.xmlconfig.SubjectName
- toString() - Method in class swiss.trustbroker.federation.xmlconfig.SubjectNameMappings.SubjectNameMappingsBuilder
- toString() - Method in class swiss.trustbroker.federation.xmlconfig.SubjectNameMappings
- toString() - Method in class swiss.trustbroker.federation.xmlconfig.ValidationStatus
- toString() - Method in class swiss.trustbroker.federation.xmlconfig.WsTrust
- toString() - Method in class swiss.trustbroker.federation.xmlconfig.WsTrust.WsTrustBuilder
- toString() - Method in class swiss.trustbroker.homerealmdiscovery.dto.CookieConfig.CookieConfigBuilder
- toString() - Method in class swiss.trustbroker.homerealmdiscovery.dto.CookieConfig
- toString() - Method in class swiss.trustbroker.homerealmdiscovery.dto.GuiConfig.GuiConfigBuilder
- toString() - Method in class swiss.trustbroker.homerealmdiscovery.dto.GuiConfig
- toString() - Method in class swiss.trustbroker.homerealmdiscovery.dto.ProfileRequest
- toString() - Method in class swiss.trustbroker.homerealmdiscovery.dto.SessionRequest
- toString() - Method in class swiss.trustbroker.homerealmdiscovery.dto.SupportInfo.SupportInfoBuilder
- toString() - Method in class swiss.trustbroker.homerealmdiscovery.dto.SupportInfo
- toString() - Method in class swiss.trustbroker.mapping.dto.CustomQoa
- toString() - Method in record class swiss.trustbroker.mapping.dto.QoaConfig
-
Returns a string representation of this record class.
- toString() - Method in record class swiss.trustbroker.mapping.dto.QoaSpec
-
Returns a string representation of this record class.
- toString() - Method in class swiss.trustbroker.monitoring.dto.MonitoringResponse.MonitoringResponseBuilder
- toString() - Method in class swiss.trustbroker.monitoring.dto.MonitoringResponse
- toString() - Method in class swiss.trustbroker.oidc.client.dto.AuthorizationCodeFlowRequest.AuthorizationCodeFlowRequestBuilder
- toString() - Method in record class swiss.trustbroker.oidc.client.dto.AuthorizationCodeFlowRequest
-
Returns a string representation of this record class.
- toString() - Method in class swiss.trustbroker.oidc.client.dto.OpenIdProviderConfiguration.OpenIdProviderConfigurationBuilder
- toString() - Method in class swiss.trustbroker.oidc.client.dto.OpenIdProviderConfiguration
- toString() - Method in class swiss.trustbroker.oidc.OidcEncryptionKeystoreService.EncryptionParams.EncryptionParamsBuilder
- toString() - Method in class swiss.trustbroker.oidc.session.HttpExchangeSupport
- toString() - Method in class swiss.trustbroker.oidc.session.SessionPrincipal
- toString() - Method in class swiss.trustbroker.saml.dto.CpResponse.CpResponseBuilder
- toString() - Method in class swiss.trustbroker.saml.dto.CpResponse
- toString() - Method in class swiss.trustbroker.saml.dto.DeviceInfoReq
- toString() - Method in class swiss.trustbroker.saml.dto.ResponseData.ResponseDataBuilder
- toString() - Method in class swiss.trustbroker.saml.dto.ResponseData
- toString() - Method in class swiss.trustbroker.saml.dto.ResponseParameters.ResponseParametersBuilder
- toString() - Method in class swiss.trustbroker.saml.dto.ResponseParameters
- toString() - Method in class swiss.trustbroker.saml.dto.ResponseStatus.ResponseStatusBuilder
- toString() - Method in class swiss.trustbroker.saml.dto.ResponseStatus
- toString() - Method in class swiss.trustbroker.saml.dto.RpRequest.RpRequestBuilder
- toString() - Method in class swiss.trustbroker.saml.dto.RpRequest
- toString() - Method in class swiss.trustbroker.saml.dto.SsoParticipant.SsoParticipantBuilder
- toString() - Method in class swiss.trustbroker.saml.dto.SsoParticipant
- toString() - Method in class swiss.trustbroker.saml.dto.SsoParticipants.SsoParticipantsBuilder
- toString() - Method in class swiss.trustbroker.saml.dto.SsoParticipants
- toString() - Method in class swiss.trustbroker.saml.dto.UiBanner
- toString() - Method in class swiss.trustbroker.saml.dto.UiBanner.UiBannerBuilder
- toString() - Method in class swiss.trustbroker.saml.dto.UiObject
- toString() - Method in class swiss.trustbroker.saml.dto.UiObject.UiObjectBuilder
- toString() - Method in class swiss.trustbroker.saml.dto.UiObjects
- toString() - Method in class swiss.trustbroker.saml.dto.UiObjects.UiObjectsBuilder
- toString() - Method in class swiss.trustbroker.saml.util.AssertionValidator.ExpectedAssertionValues.ExpectedAssertionValuesBuilder
- toString() - Method in class swiss.trustbroker.saml.util.AssertionValidator.ExpectedAssertionValues
- toString() - Method in class swiss.trustbroker.saml.util.AssertionValidator.MessageValidationResult.MessageValidationResultBuilder
- toString() - Method in class swiss.trustbroker.saml.util.AssertionValidator.MessageValidationResult
- toString() - Method in class swiss.trustbroker.sessioncache.dto.AccessRequestSessionState.AccessRequestSessionStateBuilder
- toString() - Method in class swiss.trustbroker.sessioncache.dto.AccessRequestSessionState
- toString() - Method in class swiss.trustbroker.sessioncache.dto.ArtifactCacheEntity
- toString() - Method in class swiss.trustbroker.sessioncache.dto.Lifecycle.LifecycleBuilder
- toString() - Method in class swiss.trustbroker.sessioncache.dto.Lifecycle
- toString() - Method in class swiss.trustbroker.sessioncache.dto.SsoSessionParticipant.SsoSessionParticipantBuilder
- toString() - Method in class swiss.trustbroker.sessioncache.dto.SsoSessionParticipant
- toString() - Method in class swiss.trustbroker.sessioncache.dto.SsoState.SsoStateBuilder
- toString() - Method in class swiss.trustbroker.sessioncache.dto.SsoState
- toString() - Method in class swiss.trustbroker.sessioncache.dto.StateData.StateDataBuilder
- toString() - Method in class swiss.trustbroker.sessioncache.dto.StateData
- toString() - Method in class swiss.trustbroker.sso.dto.SloNotification
- toString() - Method in record class swiss.trustbroker.sso.dto.SloResponseParameters
-
Returns a string representation of this record class.
- toString() - Method in class swiss.trustbroker.sso.service.SsoService.SloState.SloStateBuilder
- toString() - Method in class swiss.trustbroker.sso.service.SsoService.SloState
- toString() - Method in class swiss.trustbroker.sso.service.SsoService.SsoCookieNameParams
- toString() - Method in class swiss.trustbroker.sso.service.SsoService.StateWithCookies
- toString() - Method in class swiss.trustbroker.wstrustclient.dto.WsTrustRstRequest
- toString() - Method in class swiss.trustbroker.wstrustclient.dto.WsTrustRstRequest.WsTrustRstRequestBuilder
- toString() - Method in class swiss.trustbroker.wstrustclient.service.WsTrustSoapClientBase.MarshallingInfo
- toUiErrorCode(String) - Static method in class swiss.trustbroker.saml.util.SamlStatusCode
- traceId(String) - Method in class swiss.trustbroker.audit.dto.AuditDto.AuditDtoBuilder
- traceIdHeader(String) - Method in class swiss.trustbroker.config.dto.IdmConfig.IdmConfigBuilder
-
HTTP trace header supported by service to correlate calls from XTB.
- tracingEnabled(boolean) - Method in class swiss.trustbroker.config.dto.NetworkConfig.NetworkConfigBuilder
-
Allow disabling OpenTelemetry traceparent propagation to backends that might block use otherwise.
- translationAttributes(List<String>) - Method in class swiss.trustbroker.federation.xmlconfig.ProfileSelection.ProfileSelectionBuilder
-
Names of attributes that should be translated.
- translations(String) - Method in class swiss.trustbroker.config.dto.GuiProperties.GuiPropertiesBuilder
-
Resource path where UI language support files in JSON format are stored.
- TRANSLATIONS_URL - Static variable in class swiss.trustbroker.util.ApiSupport
- triggerAccessRequest(AccessRequestHttpData, RelyingPartyConfig, SessionState) - Method in class swiss.trustbroker.accessrequest.service.NoOpAccessRequestService
- triggerMonitoring(HttpServletRequest, HttpServletResponse, RelyingParty, String) - Method in class swiss.trustbroker.monitoring.service.MonitoringService
- triggerRefreshConfigurations() - Method in class swiss.trustbroker.oidc.cache.service.OidcMetadataCacheService
- triggerRole(String) - Method in class swiss.trustbroker.federation.xmlconfig.AuthorizedApplication.AuthorizedApplicationBuilder
-
When the given role is missing after the IDM lookup phase (and before the profile selection phase) the access-request handling is initiated.
- TRUE - Enum constant in enum class swiss.trustbroker.federation.xmlconfig.FeatureEnum
-
Enabled
- TRUE - Enum constant in enum class swiss.trustbroker.federation.xmlconfig.ProvisioningMode
-
Detect and apply provisioning.
- truncateNamespace(String) - Static method in class swiss.trustbroker.homerealmdiscovery.util.DefinitionUtil
- trust(Saml2X509Credential) - Method in class swiss.trustbroker.config.dto.OidcIdpCredential.OidcIdpCredentialBuilder
- TrustBrokerConfiguration - Class in swiss.trustbroker.config
- TrustBrokerConfiguration() - Constructor for class swiss.trustbroker.config.TrustBrokerConfiguration
- TrustbrokerCookieProcessor - Class in swiss.trustbroker.config
-
Extension of Tomcat Rfc6265CookieProcessor to implement dynamic sameSite attributes.
- TrustbrokerCookieProcessor(TrustBrokerProperties) - Constructor for class swiss.trustbroker.config.TrustbrokerCookieProcessor
- TrustbrokerHealthIndicator - Class in swiss.trustbroker.monitoring.service
- TrustbrokerHealthIndicator() - Constructor for class swiss.trustbroker.monitoring.service.TrustbrokerHealthIndicator
- trustBrokerProperties - Variable in class swiss.trustbroker.saml.controller.AbstractSamlController
- TrustBrokerProperties - Class in swiss.trustbroker.config
-
The root of the XTB configuration.
- TrustBrokerProperties() - Constructor for class swiss.trustbroker.config.TrustBrokerProperties
- truststore(KeystoreProperties) - Method in class swiss.trustbroker.config.dto.AccessRequestConfig.AccessRequestConfigBuilder
-
Keystore for outbound requests.
- truststore(KeystoreProperties) - Method in class swiss.trustbroker.config.dto.ArtifactResolution.ArtifactResolutionBuilder
-
Default truststore for artifact resolution.
- truststore(KeystoreProperties) - Method in class swiss.trustbroker.config.dto.IdmConfig.IdmConfigBuilder
-
Truststore for accessing the IDM.
- truststorePassword(String) - Method in class swiss.trustbroker.config.dto.AnnouncementConfig.AnnouncementConfigBuilder
-
Password for the truststore.
- truststorePath(String) - Method in class swiss.trustbroker.config.dto.AnnouncementConfig.AnnouncementConfigBuilder
-
TLS truststore used to establish HTTPS connection.
- tryInvalidate(StateData, String) - Method in class swiss.trustbroker.sessioncache.service.StateCacheService
- tryInvalidate(StateEntity, String) - Method in class swiss.trustbroker.sessioncache.service.StateCacheService
- txCommitDelay(int) - Method in class swiss.trustbroker.config.dto.StateCacheProperties.StateCachePropertiesBuilder
-
Delay before transaction commit in milliseconds.
- txRetryCount(int) - Method in class swiss.trustbroker.config.dto.StateCacheProperties.StateCachePropertiesBuilder
-
Number of retries doubling the txRetryDelayMs on every try.
- txRetryDelayMs(int) - Method in class swiss.trustbroker.config.dto.StateCacheProperties.StateCachePropertiesBuilder
-
Delay before transaction retry in milliseconds (negative values indicate no retry).
- type(String) - Method in class swiss.trustbroker.config.dto.WsTrustConfig.WsTrustConfigBuilder
-
Keystore type.
- type(String) - Method in class swiss.trustbroker.federation.xmlconfig.Script.ScriptBuilder
-
Script types as listed above.
- TYPE_LABEL - Static variable in class swiss.trustbroker.metrics.service.MetricsService
- TYPE_LOCAL_NAME - Static variable in interface swiss.trustbroker.wstrustclient.xml.ClaimType
- TYPE_NAME - Static variable in interface swiss.trustbroker.wstrustclient.xml.ClaimType
U
- UiBanner - Class in swiss.trustbroker.saml.dto
-
Banner for HRD.
- UiBanner() - Constructor for class swiss.trustbroker.saml.dto.UiBanner
- UiBanner(String, String, List<String>, boolean, Integer) - Constructor for class swiss.trustbroker.saml.dto.UiBanner
-
Creates a new
UiBannerinstance. - UiBanner.UiBannerBuilder - Class in swiss.trustbroker.saml.dto
- UiDisableReason - Enum Class in swiss.trustbroker.saml.dto
-
Reason for disabling an HRD UI object.
- uiErrorCode() - Method in class swiss.trustbroker.saml.dto.ResponseStatus
- uiFlags() - Method in class swiss.trustbroker.federation.xmlconfig.Flow
- uiFlags() - Method in class swiss.trustbroker.saml.dto.ResponseStatus
- UiObject - Class in swiss.trustbroker.saml.dto
- UiObject() - Constructor for class swiss.trustbroker.saml.dto.UiObject
- UiObject(String, UiDisableReason, Integer, String, String, String, String, String, String, Integer, List<String>) - Constructor for class swiss.trustbroker.saml.dto.UiObject
-
Creates a new
UiObjectinstance. - UiObject.UiObjectBuilder - Class in swiss.trustbroker.saml.dto
- uiObjects(UiObjects) - Method in class swiss.trustbroker.saml.dto.RpRequest.RpRequestBuilder
-
UI objects for the HRD screen.
- UiObjects - Class in swiss.trustbroker.saml.dto
-
UI Objects for HRD: Tiles and banners.
- UiObjects() - Constructor for class swiss.trustbroker.saml.dto.UiObjects
- UiObjects(List<UiObject>, List<UiBanner>) - Constructor for class swiss.trustbroker.saml.dto.UiObjects
-
Creates a new
UiObjectsinstance. - UiObjects.UiObjectsBuilder - Class in swiss.trustbroker.saml.dto
- unaliasedId(String) - Method in class swiss.trustbroker.federation.xmlconfig.RelyingParty.RelyingPartyBuilder
- UNAVAILABLE - Enum constant in enum class swiss.trustbroker.saml.dto.UiDisableReason
-
CP not available.
- UNDEFINED - Static variable in class swiss.trustbroker.saml.dto.SsoParticipants
- UNDEFINED_QOA - Static variable in class swiss.trustbroker.mapping.dto.CustomQoa
- UNDEFINED_QOA_ORDER - Static variable in class swiss.trustbroker.mapping.dto.CustomQoa
- unfilteredClaimsParties(List<ClaimsParty>) - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsProviderSetup.ClaimsProviderSetupBuilder
- unfilteredRelyingParties(List<RelyingParty>) - Method in class swiss.trustbroker.federation.xmlconfig.RelyingPartySetup.RelyingPartySetupBuilder
- UnknownUserPolicyService - Class in swiss.trustbroker.saml.service
- UnknownUserPolicyService() - Constructor for class swiss.trustbroker.saml.service.UnknownUserPolicyService
- unload() - Method in class swiss.trustbroker.oidc.session.TomcatSessionManager
- unmarshal(String) - Method in class swiss.trustbroker.federation.xmlconfig.StringListAdapter
- unvalidated() - Static method in class swiss.trustbroker.saml.util.AssertionValidator.MessageValidationResult
- UP - Enum constant in enum class swiss.trustbroker.monitoring.dto.Status
- UP - Static variable in class swiss.trustbroker.monitoring.dto.MonitoringResponse
- update(String, String, String, Long) - Method in class swiss.trustbroker.sessioncache.service.ArtifactStorageService
- updateContextExpiration(String, Long) - Method in class swiss.trustbroker.sessioncache.service.ArtifactStorageService
- updateExpiration(String, String, Long) - Method in class swiss.trustbroker.sessioncache.service.ArtifactStorageService
- updateIdmQueries(List<IdmQuery>) - Method in class swiss.trustbroker.federation.xmlconfig.IdmLookup
- updateMetrics() - Method in class swiss.trustbroker.config.AppConfigService
- updateWithVersion(long, String, String, String, Long) - Method in class swiss.trustbroker.sessioncache.service.ArtifactStorageService
- URI_ATTRIB_NAME - Static variable in interface swiss.trustbroker.wstrustclient.xml.ClaimType
- url(String) - Method in class swiss.trustbroker.audit.dto.AuditDto.AuditDtoBuilder
- url(String) - Method in class swiss.trustbroker.federation.xmlconfig.AuthorizedApplication.AuthorizedApplicationBuilder
-
The application can be selected via HTTP Referer matching by configuring the Origin URL in this attribute.
- url(String) - Method in class swiss.trustbroker.federation.xmlconfig.SloResponse.SloResponseBuilder
-
Valid settings are: An absolute URL (used as is) A relative URL (path) that is appended to the HTTP referrer or ACUrl URL
- urn(String) - Method in class swiss.trustbroker.saml.dto.UiObject.UiObjectBuilder
-
id uniquely identifies a tile.
- useArtifactBinding(SamlBinding, SamlBinding) - Method in class swiss.trustbroker.federation.xmlconfig.ArtifactBinding
- useClaimsFromSource(OidcClaimsSource) - Method in class swiss.trustbroker.federation.xmlconfig.OidcClient
- useClaimsFromSourceThat(Predicate<OidcClaimsSource>) - Method in class swiss.trustbroker.federation.xmlconfig.OidcClient
- useDefault(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.AcWhitelist.AcWhitelistBuilder
-
Use the first entry as default if the RP does not send an ACS URL.
- useHttpGet() - Method in record class swiss.trustbroker.sso.dto.SloResponseParameters
-
Returns the value of the
useHttpGetrecord component. - usePepQoa(String) - Method in class swiss.trustbroker.federation.xmlconfig.OidcClient.OidcClientBuilder
-
Legacy Policy Enforcement Point (PEP) QOA mapping policy.
- user(String) - Method in class swiss.trustbroker.config.dto.TechUserProperties.TechUserPropertiesBuilder
-
User ID in IDM.
- userDetails(Map<Definition, List<String>>) - Method in class swiss.trustbroker.saml.dto.CpResponse.CpResponseBuilder
-
IDM user data returned from IDM backends, filtered by RP setup.
- userDetailsSelection(AttributesSelection) - Method in class swiss.trustbroker.federation.xmlconfig.IdmQuery.IdmQueryBuilder
-
User details selection identifies the IDM attributes passed through to the RP side.
- USERINFO - Enum constant in enum class swiss.trustbroker.federation.xmlconfig.OidcClaimsSource
-
Use claims from userinfo endpoint.
- USERINFO_JWT - Enum constant in enum class swiss.trustbroker.federation.xmlconfig.OidcClaimsSource
-
Use claims from userinfo endpoint, accepting signed JWT token responses only.
- userinfoEndpoint(URI) - Method in class swiss.trustbroker.oidc.client.dto.OpenIdProviderConfiguration.OpenIdProviderConfigurationBuilder
- USERNAME - Static variable in class swiss.trustbroker.util.WebSupport
- userNotActive(String, String, String) - Method in class swiss.trustbroker.homerealmdiscovery.util.DefaultIdmStatusPolicyCallback
- useSingleQoaInResponse() - Method in class swiss.trustbroker.federation.xmlconfig.Qoa
- useSkinnyHrdScreen(boolean) - Method in class swiss.trustbroker.saml.dto.RpRequest.RpRequestBuilder
-
Allow to use a non-angular version of the HRD screen
Default: false - useSkinnyUiForLegacyClients(RpRequest, HttpServletRequest, TrustBrokerProperties) - Static method in class swiss.trustbroker.homerealmdiscovery.util.OperationalUtil
V
- validate(Jwt) - Method in class swiss.trustbroker.oidc.CustomJwtAudValidator
- validate(Jwt) - Method in class swiss.trustbroker.oidc.CustomJwtTimestampValidator
- validateAcrs(JWTClaimsSet, ClaimsParty, RelyingParty, OidcClient, TrustBrokerProperties) - Static method in class swiss.trustbroker.oidc.OidcClaimValidatorService
- validateAcs(boolean) - Method in class swiss.trustbroker.config.dto.SecurityChecks.SecurityChecksBuilder
-
Check assertion consumer URL or HTTP Referer against configured whitelist.
- validateArtifactResolve(ArtifactResolve, TrustBrokerProperties, List<Credential>, List<String>) - Static method in class swiss.trustbroker.saml.util.AssertionValidator
- validateAssertion() - Method in class swiss.trustbroker.federation.xmlconfig.AuthorizedApplication
- validateAssertion(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.AuthorizedApplication.AuthorizedApplicationBuilder
-
Validate assertions in responses to requests sent by the AccessRequest.
- validateAssertion(Assertion, Instant, List<Credential>, List<String>, TrustBrokerProperties, ClaimsParty, Qoa, AssertionValidator.ExpectedAssertionValues) - Static method in class swiss.trustbroker.saml.util.AssertionValidator
- validateAssertionId(Assertion) - Static method in class swiss.trustbroker.saml.util.AssertionValidator
- validateAssertionIssueInstant(boolean) - Method in class swiss.trustbroker.config.dto.SecurityChecks.SecurityChecksBuilder
-
Check IssueInstant attribute in Assertion
Default: true - validateAssertionIssuer(Assertion, String, TrustBrokerProperties) - Static method in class swiss.trustbroker.saml.util.AssertionValidator
- validateAudience(boolean) - Method in class swiss.trustbroker.config.dto.SecurityChecks.SecurityChecksBuilder
-
Check audience restriction against issuer.
- validateAuthnRequest(boolean) - Method in class swiss.trustbroker.config.dto.SecurityChecks.SecurityChecksBuilder
-
Check incoming AuthnRequest at all.
- validateAuthnRequest(AuthnRequest, HttpServletRequest, SignatureContext, SecurityPolicies) - Method in class swiss.trustbroker.saml.service.AssertionConsumerService
- validateAuthnRequest(AuthnRequest, List<Credential>, List<String>, AcWhitelist, TrustBrokerProperties, SecurityPolicies, SignatureContext, Qoa) - Static method in class swiss.trustbroker.saml.util.AssertionValidator
-
the check 'require signed AuthnRequest' is based on signatureContext (not SecurityPolicies)
- validateAuthnStatementIssueInstant(boolean) - Method in class swiss.trustbroker.config.dto.SecurityChecks.SecurityChecksBuilder
-
Check IssueInstant attribute in AuthnStatement
Default: true - validateClaims(JWTClaimsSet, ClaimsParty, OidcClient, String, String) - Method in class swiss.trustbroker.oidc.OidcClaimValidatorService
- validateClaimsProviderMapping(RelyingParty, ClaimsParty, String) - Static method in class swiss.trustbroker.oidc.OidcValidator
- validateContextClass(QoaComparison, List<String>, QoaConfig, String, QoaConfig, String, Map<String, Integer>, boolean) - Static method in class swiss.trustbroker.mapping.util.QoaMappingUtil
- validateHttpHeaders(boolean) - Method in class swiss.trustbroker.config.dto.SecurityChecks.SecurityChecksBuilder
-
Validate HTTP request headers.
- validateHttpHeaders(boolean) - Method in class swiss.trustbroker.federation.xmlconfig.CounterParty
- validateHttpHeaders(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.SecurityPolicies.SecurityPoliciesBuilder
-
Validate HTTP request headers.
- validateInputParams(OidcClient, RegisteredClient, String, OAuth2TokenExchangeAuthenticationToken, String) - Static method in class swiss.trustbroker.oidc.OidcValidator
- validateInResponseTo(boolean) - Method in class swiss.trustbroker.config.dto.SecurityChecks.SecurityChecksBuilder
-
Check response inResponseTo.
- validateLogoutRequest(boolean) - Method in class swiss.trustbroker.config.dto.SecurityChecks.SecurityChecksBuilder
-
Validate OID Logout request.
- validateProfileRequestId(String) - Static method in class swiss.trustbroker.saml.util.SamlValidationUtil
- validateProtocolRestrictions(CounterParty, String, HttpServletRequest, TrustBrokerProperties) - Static method in class swiss.trustbroker.oidc.OidcValidator
-
Validate protocol restrictions on OIDC RP/CP: - party enabled (with option to override) - OIDC allowed
- validateProtocolRestrictions(CounterParty, String, TrustBrokerProperties) - Static method in class swiss.trustbroker.oidc.OidcValidator
-
Validate restrictions on OIDC RP/CP: - OIDC allowed
- validateProtocolRestrictions(CounterParty, SamlBinding, HttpServletRequest, TrustBrokerProperties, boolean) - Static method in class swiss.trustbroker.saml.util.SamlValidationUtil
- validateQoaComparison(QoaConfig, QoaComparison, Set<Integer>, Set<Integer>) - Static method in class swiss.trustbroker.mapping.util.QoaMappingUtil
- validateQoaLevelsKnown(List<String>, QoaConfig, Map<String, Integer>, Boolean) - Static method in class swiss.trustbroker.mapping.util.QoaMappingUtil
- validateQoaRequirement(String, QoaConfig, QoaComparison, List<String>, Map<String, Integer>, String) - Static method in class swiss.trustbroker.saml.util.AssertionValidator
- validateRelayState(boolean) - Method in class swiss.trustbroker.config.dto.SecurityChecks.SecurityChecksBuilder
-
Relay must exist otherwise the SAML processing is stopped, if false response matching is done via SAML message.
- validateRelayState(ResponseData<?>) - Static method in class swiss.trustbroker.saml.util.SamlValidationUtil
- validateRequestCondition(boolean) - Method in class swiss.trustbroker.config.dto.SecurityChecks.SecurityChecksBuilder
-
Check Condition attribute in AuthnRequest
Default: true - validateRequestIssueInstant(boolean) - Method in class swiss.trustbroker.config.dto.SecurityChecks.SecurityChecksBuilder
-
Check IssueInstant attribute in AuthnRequest
Default: true - validateRequestSignature(RequestAbstractType, List<Credential>, List<String>, TrustBrokerProperties, SignatureContext) - Static method in class swiss.trustbroker.saml.util.AssertionValidator
- validateRequiredDefinitions(AttributesSelection, Map<Definition, List<String>>) - Static method in class swiss.trustbroker.homerealmdiscovery.util.RelyingPartyUtil
- validateResponse(ResponseData<?>) - Static method in class swiss.trustbroker.saml.util.SamlValidationUtil
- validateResponse(ResponseData<Response>, List<Assertion>, List<Credential>, List<String>, TrustBrokerProperties, ClaimsParty, Qoa, AssertionValidator.ExpectedAssertionValues) - Static method in class swiss.trustbroker.saml.util.AssertionValidator
- validateResponseIssueInstant(boolean) - Method in class swiss.trustbroker.config.dto.SecurityChecks.SecurityChecksBuilder
-
Check IssueInstant attribute in Response
Default: true - validateResponseIssuer(boolean) - Method in class swiss.trustbroker.config.dto.SecurityChecks.SecurityChecksBuilder
-
Check issuer in the CP response to match what the user has selected as a homeRealm in HRD.
- validateRpContextClasses(QoaConfig, List<String>, AuthnContextComparisonTypeEnumeration, Map<String, Integer>) - Static method in class swiss.trustbroker.mapping.util.QoaMappingUtil
- validateRpQoaRequirement(StateData, CpResponse) - Method in class swiss.trustbroker.saml.service.RelyingPartyService
- validateRstAssertion(Assertion, TrustBrokerProperties, ClaimsParty, SecurityPolicies, Instant, AssertionValidator.ExpectedAssertionValues, Optional<List<Credential>>, List<String>) - Static method in class swiss.trustbroker.saml.util.AssertionValidator
-
RST case of WSTrust service: The header assertion is already checked by
wss4j. - validateSamlIssuer(SAMLObject) - Method in class swiss.trustbroker.saml.controller.AbstractSamlController
- validateSamlMessage(SAMLObject, SecurityPolicies) - Method in class swiss.trustbroker.saml.controller.AbstractSamlController
- validateSamlSchema(SAMLObject) - Method in class swiss.trustbroker.util.SamlValidator
- validateSamlSchema(SAMLObject, SecurityPolicies) - Method in class swiss.trustbroker.saml.controller.AbstractSamlController
- validateScripts(ClaimsProviderSetup) - Method in class swiss.trustbroker.config.AppConfigService
- validateScripts(CounterParty, ScriptService) - Static method in class swiss.trustbroker.homerealmdiscovery.util.RelyingPartySetupUtil
- validateSecurityTokenRequest(boolean) - Method in class swiss.trustbroker.config.dto.SecurityChecks.SecurityChecksBuilder
-
Check incoming WSTrust SecurityTokenRequest on WSS4J level.
- validateSecurityTokenRequestAssertion(boolean) - Method in class swiss.trustbroker.config.dto.SecurityChecks.SecurityChecksBuilder
-
Check incoming WSTrust SecurityTokenRequest on XTB validator level.
- validateSelectedCp(StateData, String) - Method in class swiss.trustbroker.saml.service.AssertionConsumerService
- validateSubAudAzp(JWTClaimsSet, String, OidcClient, String, boolean) - Static method in class swiss.trustbroker.oidc.OidcClaimValidatorService
- validateSubjectConfirmationInResponseTo(boolean) - Method in class swiss.trustbroker.config.dto.SecurityChecks.SecurityChecksBuilder
-
Check subject confirmation inResponseTo.
- validateSubjectConfirmationRecipient(boolean) - Method in class swiss.trustbroker.config.dto.SecurityChecks.SecurityChecksBuilder
-
Check subject confirmation recipient.
- validateSubjectConfirmationTimestamp(boolean) - Method in class swiss.trustbroker.config.dto.SecurityChecks.SecurityChecksBuilder
-
Check subject confirmation timestamp.
- validateSubjectTokenIatExpNbf(JWTClaimsSet, OidcClient, TrustBrokerProperties, String) - Static method in class swiss.trustbroker.oidc.OidcValidator
- validateTokenAssertion(ClaimsParty, Assertion, TrustBrokerProperties) - Static method in class swiss.trustbroker.saml.util.AssertionValidator
- validateXmlSchema(boolean) - Method in class swiss.trustbroker.config.dto.SecurityChecks.SecurityChecksBuilder
-
Check XML schema.
- validateXmlSchema(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.SecurityPolicies.SecurityPoliciesBuilder
-
Some claims providers are not sending well-formed valid XML and therefore are blocked by XTB.
- validationStatus(ValidationStatus) - Method in class swiss.trustbroker.federation.xmlconfig.CounterParty.CounterPartyBuilder
- ValidationStatus - Class in swiss.trustbroker.federation.xmlconfig
-
Status for an XML config element that is validated and disabled if invalid.
- ValidationStatus() - Constructor for class swiss.trustbroker.federation.xmlconfig.ValidationStatus
- validCpSession(StateData) - Static method in class swiss.trustbroker.saml.util.AssertionValidator
- validExpirationLifeTime(Date, long, int) - Static method in class swiss.trustbroker.oidc.OidcValidator
- validIat(Integer, String, Date, long, String) - Static method in class swiss.trustbroker.oidc.OidcValidator
- validInboundBinding(SamlBinding) - Method in class swiss.trustbroker.federation.xmlconfig.ArtifactBinding
- validNotOnOrAfter(Date, long) - Method in class swiss.trustbroker.oidc.OidcClaimValidatorService
- validNotOnOrAfter(Date, long, long) - Static method in class swiss.trustbroker.oidc.OidcValidator
- value() - Element in annotation interface swiss.trustbroker.federation.xmlconfig.Default
- value(Object) - Method in class swiss.trustbroker.audit.dto.AuditDto.ResponseAttributeValue.ResponseAttributeValueBuilder
- value(String) - Method in class swiss.trustbroker.federation.xmlconfig.AccountSource.AccountSourceBuilder
- value(String) - Method in class swiss.trustbroker.federation.xmlconfig.Definition.DefinitionBuilder
-
Single value from constant configuration (we currently only use single valued in XML via ConstAttributes).
- value(String) - Method in class swiss.trustbroker.federation.xmlconfig.HomeName.HomeNameBuilder
-
The configuration is optional and provides a static value, when the e-id based CPs are not sending the attribute in the CP Attributes already or the value is computed from the CP SAML Response mainly for compatibility reasons, see
GeneralDeriveHomeName.groovyfor the special handling of this attribute. - valueOf(String) - Static method in enum class swiss.trustbroker.audit.dto.AuditDto.AttributeSource
-
Returns the enum constant of this class with the specified name.
- valueOf(String) - Static method in enum class swiss.trustbroker.audit.dto.EventType
-
Returns the enum constant of this class with the specified name.
- valueOf(String) - Static method in enum class swiss.trustbroker.config.dto.AllowPrivateNetworkAccess
-
Returns the enum constant of this class with the specified name.
- valueOf(String) - Static method in enum class swiss.trustbroker.config.dto.GuiButtons
-
Returns the enum constant of this class with the specified name.
- valueOf(String) - Static method in enum class swiss.trustbroker.config.dto.GuiFeatures
-
Returns the enum constant of this class with the specified name.
- valueOf(String) - Static method in enum class swiss.trustbroker.config.dto.SsoSessionIdPolicy
-
Returns the enum constant of this class with the specified name.
- valueOf(String) - Static method in enum class swiss.trustbroker.config.dto.TomcatSessionMode
-
Returns the enum constant of this class with the specified name.
- valueOf(String) - Static method in enum class swiss.trustbroker.config.dto.WsTrustConfig.SoapVersionConfig
-
Returns the enum constant of this class with the specified name.
- valueOf(String) - Static method in enum class swiss.trustbroker.federation.dto.ConfigStatus
-
Returns the enum constant of this class with the specified name.
- valueOf(String) - Static method in enum class swiss.trustbroker.federation.xmlconfig.ArtifactBindingMode
-
Returns the enum constant of this class with the specified name.
- valueOf(String) - Static method in enum class swiss.trustbroker.federation.xmlconfig.AuthorizationGrantType
-
Returns the enum constant of this class with the specified name.
- valueOf(String) - Static method in enum class swiss.trustbroker.federation.xmlconfig.ClaimsMapper
-
Returns the enum constant of this class with the specified name.
- valueOf(String) - Static method in enum class swiss.trustbroker.federation.xmlconfig.ClientAuthenticationMethod
-
Returns the enum constant of this class with the specified name.
- valueOf(String) - Static method in enum class swiss.trustbroker.federation.xmlconfig.EncryptionKeyInfo
-
Returns the enum constant of this class with the specified name.
- valueOf(String) - Static method in enum class swiss.trustbroker.federation.xmlconfig.EncryptionKeyPlacement
-
Returns the enum constant of this class with the specified name.
- valueOf(String) - Static method in enum class swiss.trustbroker.federation.xmlconfig.FeatureEnum
-
Returns the enum constant of this class with the specified name.
- valueOf(String) - Static method in enum class swiss.trustbroker.federation.xmlconfig.FingerprintCheck
-
Returns the enum constant of this class with the specified name.
- valueOf(String) - Static method in enum class swiss.trustbroker.federation.xmlconfig.MultiResultPolicy
-
Returns the enum constant of this class with the specified name.
- valueOf(String) - Static method in enum class swiss.trustbroker.federation.xmlconfig.Multivalued
-
Returns the enum constant of this class with the specified name.
- valueOf(String) - Static method in enum class swiss.trustbroker.federation.xmlconfig.OidcClaimsSource
-
Returns the enum constant of this class with the specified name.
- valueOf(String) - Static method in enum class swiss.trustbroker.federation.xmlconfig.ProfileSelectionMode
-
Returns the enum constant of this class with the specified name.
- valueOf(String) - Static method in enum class swiss.trustbroker.federation.xmlconfig.ProvisioningMode
-
Returns the enum constant of this class with the specified name.
- valueOf(String) - Static method in enum class swiss.trustbroker.federation.xmlconfig.QoaComparison
-
Returns the enum constant of this class with the specified name.
- valueOf(String) - Static method in enum class swiss.trustbroker.federation.xmlconfig.ResponseMode
-
Returns the enum constant of this class with the specified name.
- valueOf(String) - Static method in enum class swiss.trustbroker.federation.xmlconfig.SloMode
-
Returns the enum constant of this class with the specified name.
- valueOf(String) - Static method in enum class swiss.trustbroker.federation.xmlconfig.SloProtocol
-
Returns the enum constant of this class with the specified name.
- valueOf(String) - Static method in enum class swiss.trustbroker.federation.xmlconfig.StatusPolicy
-
Returns the enum constant of this class with the specified name.
- valueOf(String) - Static method in enum class swiss.trustbroker.federation.xmlconfig.SubjectNameScope
-
Returns the enum constant of this class with the specified name.
- valueOf(String) - Static method in enum class swiss.trustbroker.federation.xmlconfig.WsTrustBinding
-
Returns the enum constant of this class with the specified name.
- valueOf(String) - Static method in enum class swiss.trustbroker.monitoring.dto.Status
-
Returns the enum constant of this class with the specified name.
- valueOf(String) - Static method in enum class swiss.trustbroker.saml.dto.ClaimSource
-
Returns the enum constant of this class with the specified name.
- valueOf(String) - Static method in enum class swiss.trustbroker.saml.dto.UiDisableReason
-
Returns the enum constant of this class with the specified name.
- valueOf(String) - Static method in enum class swiss.trustbroker.sessioncache.dto.AccessRequestState
-
Returns the enum constant of this class with the specified name.
- valueOf(String) - Static method in enum class swiss.trustbroker.sessioncache.dto.LifecycleState
-
Returns the enum constant of this class with the specified name.
- valueOf(String) - Static method in enum class swiss.trustbroker.sso.service.SsoService.SsoSessionOperation
-
Returns the enum constant of this class with the specified name.
- valueOfIgnoreCase(Object) - Static method in enum class swiss.trustbroker.federation.xmlconfig.ClientAuthenticationMethod
- values() - Static method in enum class swiss.trustbroker.audit.dto.AuditDto.AttributeSource
-
Returns an array containing the constants of this enum class, in the order they are declared.
- values() - Static method in enum class swiss.trustbroker.audit.dto.EventType
-
Returns an array containing the constants of this enum class, in the order they are declared.
- values() - Static method in enum class swiss.trustbroker.config.dto.AllowPrivateNetworkAccess
-
Returns an array containing the constants of this enum class, in the order they are declared.
- values() - Static method in enum class swiss.trustbroker.config.dto.GuiButtons
-
Returns an array containing the constants of this enum class, in the order they are declared.
- values() - Static method in enum class swiss.trustbroker.config.dto.GuiFeatures
-
Returns an array containing the constants of this enum class, in the order they are declared.
- values() - Static method in enum class swiss.trustbroker.config.dto.SsoSessionIdPolicy
-
Returns an array containing the constants of this enum class, in the order they are declared.
- values() - Static method in enum class swiss.trustbroker.config.dto.TomcatSessionMode
-
Returns an array containing the constants of this enum class, in the order they are declared.
- values() - Static method in enum class swiss.trustbroker.config.dto.WsTrustConfig.SoapVersionConfig
-
Returns an array containing the constants of this enum class, in the order they are declared.
- values() - Static method in enum class swiss.trustbroker.federation.dto.ConfigStatus
-
Returns an array containing the constants of this enum class, in the order they are declared.
- values() - Static method in enum class swiss.trustbroker.federation.xmlconfig.ArtifactBindingMode
-
Returns an array containing the constants of this enum class, in the order they are declared.
- values() - Static method in enum class swiss.trustbroker.federation.xmlconfig.AuthorizationGrantType
-
Returns an array containing the constants of this enum class, in the order they are declared.
- values() - Static method in enum class swiss.trustbroker.federation.xmlconfig.ClaimsMapper
-
Returns an array containing the constants of this enum class, in the order they are declared.
- values() - Static method in enum class swiss.trustbroker.federation.xmlconfig.ClientAuthenticationMethod
-
Returns an array containing the constants of this enum class, in the order they are declared.
- values() - Static method in enum class swiss.trustbroker.federation.xmlconfig.EncryptionKeyInfo
-
Returns an array containing the constants of this enum class, in the order they are declared.
- values() - Static method in enum class swiss.trustbroker.federation.xmlconfig.EncryptionKeyPlacement
-
Returns an array containing the constants of this enum class, in the order they are declared.
- values() - Static method in enum class swiss.trustbroker.federation.xmlconfig.FeatureEnum
-
Returns an array containing the constants of this enum class, in the order they are declared.
- values() - Static method in enum class swiss.trustbroker.federation.xmlconfig.FingerprintCheck
-
Returns an array containing the constants of this enum class, in the order they are declared.
- values() - Static method in enum class swiss.trustbroker.federation.xmlconfig.MultiResultPolicy
-
Returns an array containing the constants of this enum class, in the order they are declared.
- values() - Static method in enum class swiss.trustbroker.federation.xmlconfig.Multivalued
-
Returns an array containing the constants of this enum class, in the order they are declared.
- values() - Static method in enum class swiss.trustbroker.federation.xmlconfig.OidcClaimsSource
-
Returns an array containing the constants of this enum class, in the order they are declared.
- values() - Static method in enum class swiss.trustbroker.federation.xmlconfig.ProfileSelectionMode
-
Returns an array containing the constants of this enum class, in the order they are declared.
- values() - Static method in enum class swiss.trustbroker.federation.xmlconfig.ProvisioningMode
-
Returns an array containing the constants of this enum class, in the order they are declared.
- values() - Static method in enum class swiss.trustbroker.federation.xmlconfig.QoaComparison
-
Returns an array containing the constants of this enum class, in the order they are declared.
- values() - Static method in enum class swiss.trustbroker.federation.xmlconfig.ResponseMode
-
Returns an array containing the constants of this enum class, in the order they are declared.
- values() - Static method in enum class swiss.trustbroker.federation.xmlconfig.SloMode
-
Returns an array containing the constants of this enum class, in the order they are declared.
- values() - Static method in enum class swiss.trustbroker.federation.xmlconfig.SloProtocol
-
Returns an array containing the constants of this enum class, in the order they are declared.
- values() - Static method in enum class swiss.trustbroker.federation.xmlconfig.StatusPolicy
-
Returns an array containing the constants of this enum class, in the order they are declared.
- values() - Static method in enum class swiss.trustbroker.federation.xmlconfig.SubjectNameScope
-
Returns an array containing the constants of this enum class, in the order they are declared.
- values() - Static method in enum class swiss.trustbroker.federation.xmlconfig.WsTrustBinding
-
Returns an array containing the constants of this enum class, in the order they are declared.
- values() - Static method in enum class swiss.trustbroker.monitoring.dto.Status
-
Returns an array containing the constants of this enum class, in the order they are declared.
- values() - Static method in enum class swiss.trustbroker.saml.dto.ClaimSource
-
Returns an array containing the constants of this enum class, in the order they are declared.
- values() - Static method in enum class swiss.trustbroker.saml.dto.UiDisableReason
-
Returns an array containing the constants of this enum class, in the order they are declared.
- values() - Static method in enum class swiss.trustbroker.sessioncache.dto.AccessRequestState
-
Returns an array containing the constants of this enum class, in the order they are declared.
- values() - Static method in enum class swiss.trustbroker.sessioncache.dto.LifecycleState
-
Returns an array containing the constants of this enum class, in the order they are declared.
- values() - Static method in enum class swiss.trustbroker.sso.service.SsoService.SsoSessionOperation
-
Returns an array containing the constants of this enum class, in the order they are declared.
- values(String[]) - Method in class swiss.trustbroker.config.dto.CookieProperties.CookiePropertiesBuilder
-
Optional cookie permitted values.
- values(String[]) - Method in class swiss.trustbroker.homerealmdiscovery.dto.CookieConfig.CookieConfigBuilder
- velocityEngine(TrustBrokerProperties) - Static method in class swiss.trustbroker.config.TrustBrokerConfiguration
- velocityParameters() - Method in record class swiss.trustbroker.sso.dto.SloResponseParameters
-
Returns the value of the
velocityParametersrecord component. - VERSION_API - Static variable in class swiss.trustbroker.util.ApiSupport
- versionedResourceMaxAgeDay(int) - Method in class swiss.trustbroker.config.dto.GuiProperties.GuiPropertiesBuilder
-
Browser caching max-age in days for resources that have resource version in the path (a hash or version number).
- versionedResourcePaths(String[]) - Method in class swiss.trustbroker.config.dto.GuiProperties.GuiPropertiesBuilder
-
Paths of resources that have resource version in the path (a hash or version number).
- VersionInfo - Class in swiss.trustbroker.config.dto
-
Holder of the current version.
- VersionInfo(String) - Constructor for class swiss.trustbroker.config.dto.VersionInfo
W
- WAITING_FOR_RESPONSE - Enum constant in enum class swiss.trustbroker.sessioncache.dto.AccessRequestState
- WARN - Enum constant in enum class swiss.trustbroker.federation.dto.ConfigStatus
- WEB_RESOURCE_PATH - Static variable in class swiss.trustbroker.util.ApiSupport
- WebConfiguration - Class in swiss.trustbroker.config
- WebConfiguration(TrustBrokerProperties) - Constructor for class swiss.trustbroker.config.WebConfiguration
- webDumpPathRegEx(String) - Method in class swiss.trustbroker.config.dto.Support.SupportBuilder
-
Extends debug support with web message dumping on configured servlet path
- WebFilterConfig - Class in swiss.trustbroker.gui
- WebFilterConfig() - Constructor for class swiss.trustbroker.gui.WebFilterConfig
- WebResourceController - Class in swiss.trustbroker.gui
-
Controller for web resources consumed by the GUI.
- WebResourceController(WebResourceProvider) - Constructor for class swiss.trustbroker.gui.WebResourceController
- WebResourceProvider - Class in swiss.trustbroker.homerealmdiscovery.service
-
Caching provider for web resources.
- WebResourceProvider(TrustBrokerProperties) - Constructor for class swiss.trustbroker.homerealmdiscovery.service.WebResourceProvider
- webSecurityCustomizer() - Method in class swiss.trustbroker.oidc.OidcSecurityConfiguration
- WebSupport - Class in swiss.trustbroker.util
-
Log-able web input (where we do not expected any StringUtil.
- withSource(String) - Method in class swiss.trustbroker.federation.xmlconfig.Definition
- write(int) - Method in class swiss.trustbroker.oidc.tx.InMemoryServletOutputStream
- writeToRealOutputStream(byte[]) - Method in class swiss.trustbroker.oidc.tx.OidcTxResponseWrapper
- WS_TRUST_LABEL - Static variable in class swiss.trustbroker.metrics.service.MetricsService
- wsBasePath(String) - Method in class swiss.trustbroker.config.dto.WsTrustConfig.WsTrustConfigBuilder
-
Allow base path differing from SAML API.
- WSFED_API - Static variable in class swiss.trustbroker.util.ApiSupport
- WsFedConfig - Class in swiss.trustbroker.config.dto
-
WS-Fed protocol configuration.
- WsFedConfig() - Constructor for class swiss.trustbroker.config.dto.WsFedConfig
- WsFedConfig(boolean) - Constructor for class swiss.trustbroker.config.dto.WsFedConfig
-
Creates a new
WsFedConfiginstance. - WsFedConfig.WsFedConfigBuilder - Class in swiss.trustbroker.config.dto
- wss4jChecks(String) - Method in class swiss.trustbroker.config.dto.SecurityChecks.SecurityChecksBuilder
-
WSS4J checks according to WSS4J actions.
- wsTrust(WsTrust) - Method in class swiss.trustbroker.federation.xmlconfig.ClaimsParty.ClaimsPartyBuilder
-
WS-Trust protocol configuration for this CP.
- wsTrust(WsTrust) - Method in class swiss.trustbroker.federation.xmlconfig.RelyingParty.RelyingPartyBuilder
-
WS-Trust protocol configuration for this RP.
- WsTrust - Class in swiss.trustbroker.federation.xmlconfig
-
WS-Trust configuration for RP.
- WsTrust() - Constructor for class swiss.trustbroker.federation.xmlconfig.WsTrust
- WsTrust(Boolean, Boolean, List<WsTrustBinding>) - Constructor for class swiss.trustbroker.federation.xmlconfig.WsTrust
-
Creates a new
WsTrustinstance. - WSTRUST_API - Static variable in class swiss.trustbroker.util.ApiSupport
- WsTrust.WsTrustBuilder - Class in swiss.trustbroker.federation.xmlconfig
- WsTrustBinding - Enum Class in swiss.trustbroker.federation.xmlconfig
-
Bindings for WS-Trust
- WsTrustConfig - Class in swiss.trustbroker.config.dto
-
WS-Trust protocol configuration.
- WsTrustConfig() - Constructor for class swiss.trustbroker.config.dto.WsTrustConfig
- WsTrustConfig(boolean, String, String, String, String, String, boolean, boolean, List<String>, boolean, boolean, boolean, boolean, boolean, boolean, boolean, long, WsTrustConfig.SoapVersionConfig, List<String>, List<String>, boolean, String, boolean) - Constructor for class swiss.trustbroker.config.dto.WsTrustConfig
-
Deprecated.use bindings
- WsTrustConfig.SoapVersionConfig - Enum Class in swiss.trustbroker.config.dto
- WsTrustConfig.WsTrustConfigBuilder - Class in swiss.trustbroker.config.dto
- wsTrustIssueNotBeforeToleranceSec(Long) - Method in class swiss.trustbroker.federation.xmlconfig.SecurityPolicies.SecurityPoliciesBuilder
-
WS-Trust ISSUE timestamp not before tolerance override.
- wsTrustIssueNotOnOrAfterToleranceSec(Long) - Method in class swiss.trustbroker.federation.xmlconfig.SecurityPolicies.SecurityPoliciesBuilder
-
WS-Trust ISSUE timestamp not on or after tolerance override.
- wsTrustIssueRequireSignedAssertion(boolean) - Method in class swiss.trustbroker.federation.xmlconfig.CounterParty
- wsTrustIssueRequireSignedAssertion(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.SecurityPolicies.SecurityPoliciesBuilder
-
Deprecated.Transition feature
- wsTrustIssueRequireSignedRequest(boolean) - Method in class swiss.trustbroker.federation.xmlconfig.CounterParty
- wsTrustIssueRequireSignedRequest(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.SecurityPolicies.SecurityPoliciesBuilder
-
Require signed request in WS-Trust ISSUE.
- wsTrustIssueRequireTimestamp(boolean) - Method in class swiss.trustbroker.federation.xmlconfig.CounterParty
- wsTrustIssueRequireTimestamp(Boolean) - Method in class swiss.trustbroker.federation.xmlconfig.SecurityPolicies.SecurityPoliciesBuilder
-
WS-Trust ISSUE requires timestamp.
- wsTrustRequestValiditySeconds(int) - Method in class swiss.trustbroker.config.dto.AccessRequestConfig.AccessRequestConfigBuilder
-
Validity in seconds for WS-Trust expires.
- WsTrustRstRequest - Class in swiss.trustbroker.wstrustclient.dto
- WsTrustRstRequest.WsTrustRstRequestBuilder - Class in swiss.trustbroker.wstrustclient.dto
- WsTrustSoapClientBase - Class in swiss.trustbroker.wstrustclient.service
- WsTrustSoapClientBase(KeystoreProperties, String) - Constructor for class swiss.trustbroker.wstrustclient.service.WsTrustSoapClientBase
- WsTrustSoapClientBase.MarshallingInfo - Class in swiss.trustbroker.wstrustclient.service
- wsTrustSoapProtocolVersion(String) - Method in class swiss.trustbroker.config.dto.AccessRequestConfig.AccessRequestConfigBuilder
-
WS-Trust SOAP protocl.
X
- XmlConfigController - Class in swiss.trustbroker.federation.controller
-
Controller for the config API.
- XmlConfigController(SchemaDefinitionService, XmlConfigStatusService) - Constructor for class swiss.trustbroker.federation.controller.XmlConfigController
- XmlConfigStatusService - Class in swiss.trustbroker.federation.service
-
Service for checking the configuration status.
- XmlConfigStatusService(RelyingPartyDefinitions) - Constructor for class swiss.trustbroker.federation.service.XmlConfigStatusService
- XmlConfigUtil - Class in swiss.trustbroker.homerealmdiscovery.util
-
Handles XML config parsing via JAXB.
- XTB_ALTERNATE_METADATA_ENDPOINT - Static variable in class swiss.trustbroker.util.ApiSupport
- XTB_COOKIE_PREFIX - Static variable in class swiss.trustbroker.sso.service.SsoService.SsoCookieNameParams
- XTB_LEGACY_ADFS_PATH - Static variable in class swiss.trustbroker.util.ApiSupport
- XTB_LEGACY_ENTRY_URL - Static variable in class swiss.trustbroker.util.ApiSupport
- XTB_LOWER_CASE_ALTERNATE_METADATA_ENDPOINT - Static variable in class swiss.trustbroker.util.ApiSupport
- XTB_OIDC_CONFIG_PATH - Static variable in class swiss.trustbroker.util.ApiSupport
-
OIDC support
All Classes and Interfaces|All Packages|Constant Field Values|Serialized Form