Package swiss.trustbroker.federation.xmlconfig

Class AuthorizedApplication.AuthorizedApplicationBuilder

java.lang.Object

swiss.trustbroker.federation.xmlconfig.AuthorizedApplication.AuthorizedApplicationBuilder

Enclosing class:

AuthorizedApplication

public static class AuthorizedApplication.AuthorizedApplicationBuilder
extends Object

Method Summary

Modifier and Type	Method	Description
AuthorizedApplication.AuthorizedApplicationBuilder	applUrl(String applUrl)	If configured the value is sent as appUrl instead of sending app=name in the INTERACTIVE AccessRequest.
AuthorizedApplication	build()
AuthorizedApplication.AuthorizedApplicationBuilder	centralCICD(String centralCICD)	Optional request parameter added to URLs.
AuthorizedApplication.AuthorizedApplicationBuilder	clientId(String clientId)	If an RP contains multiple OIDC clients and AccessRequest configurations and the OIDC client_id or the applicationName (provided viy AuthnRequest.ProviderName) does not match the 'name', this attribute can be used to establish the relation.
AuthorizedApplication.AuthorizedApplicationBuilder	enableTrigger(Boolean enableTrigger)	AccessRequest can be triggered by calling application.
AuthorizedApplication.AuthorizedApplicationBuilder	endpointReferenceAddress(String endpointReferenceAddress)	Overrides the RP ID in requests sent by the AccessRequest.
AuthorizedApplication.AuthorizedApplicationBuilder	issuerId(String issuerId)	Overrides the global issuer.
AuthorizedApplication.AuthorizedApplicationBuilder	minQoa(Integer minQoa)	Matched against minimum QOA from SAML AuthnContextClassRef.
AuthorizedApplication.AuthorizedApplicationBuilder	mode(String mode)	Mode to be used for the AccessRequest, depending on the implementation.
AuthorizedApplication.AuthorizedApplicationBuilder	name(String name)	Required application name (usually corresponding to IDM).
AuthorizedApplication.AuthorizedApplicationBuilder	recipient(String recipient)	Overrides the global AccessRequest recipientId.
AuthorizedApplication.AuthorizedApplicationBuilder	redirectUrl(String redirectUrl)	URL to be redirected to after AccessRequest.
AuthorizedApplication.AuthorizedApplicationBuilder	serviceUrl(String serviceUrl)	Service URL to be called by AccessRequest.
String	toString()
AuthorizedApplication.AuthorizedApplicationBuilder	triggerRole(String triggerRole)	When the given role is missing after the IDM lookup phase (and before the profile selection phase) the access-request handling is initiated.
AuthorizedApplication.AuthorizedApplicationBuilder	url(String url)	The application can be selected via HTTP Referer matching by configuring the Origin URL in this attribute.
AuthorizedApplication.AuthorizedApplicationBuilder	validateAssertion(Boolean validateAssertion)	Validate assertions in responses to requests sent by the AccessRequest.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, wait, wait, wait

Method Details

name

public AuthorizedApplication.AuthorizedApplicationBuilder name(String name)

Required application name (usually corresponding to IDM).

Returns:

this.

clientId

public AuthorizedApplication.AuthorizedApplicationBuilder clientId(String clientId)

If an RP contains multiple OIDC clients and AccessRequest configurations and the OIDC client_id or the applicationName (provided viy AuthnRequest.ProviderName) does not match the 'name', this attribute can be used to establish the relation.

Returns:

this.

url

public AuthorizedApplication.AuthorizedApplicationBuilder url(String url)

The application can be selected via HTTP Referer matching by configuring the Origin URL in this attribute.

Returns:

this.

applUrl

public AuthorizedApplication.AuthorizedApplicationBuilder applUrl(String applUrl)

If configured the value is sent as appUrl instead of sending app=name in the INTERACTIVE AccessRequest.

Returns:

this.

Since:

1.12.0

minQoa

public AuthorizedApplication.AuthorizedApplicationBuilder minQoa(Integer minQoa)

Matched against minimum QOA from SAML AuthnContextClassRef. When an RP has multiple applications, and they cannot be differentiated via HTTP Referer, the minimum AuthnContextClassRef in the AuthnRequest can be used to select the application.
Optional, not recommended.

Returns:

this.

mode

public AuthorizedApplication.AuthorizedApplicationBuilder mode(String mode)

Mode to be used for the AccessRequest, depending on the implementation.

Returns:

this.

enableTrigger

public AuthorizedApplication.AuthorizedApplicationBuilder enableTrigger(Boolean enableTrigger)

AccessRequest can be triggered by calling application.

Returns:

this.

triggerRole

public AuthorizedApplication.AuthorizedApplicationBuilder triggerRole(String triggerRole)

When the given role is missing after the IDM lookup phase (and before the profile selection phase) the access-request handling is initiated.

Returns:

this.

serviceUrl

public AuthorizedApplication.AuthorizedApplicationBuilder serviceUrl(String serviceUrl)

Service URL to be called by AccessRequest.

Returns:

this.

recipient

public AuthorizedApplication.AuthorizedApplicationBuilder recipient(String recipient)

Overrides the global AccessRequest recipientId. Fallback to serviceUrl.

Returns:

this.

issuerId

public AuthorizedApplication.AuthorizedApplicationBuilder issuerId(String issuerId)

Overrides the global issuer.

Returns:

this.

centralCICD

public AuthorizedApplication.AuthorizedApplicationBuilder centralCICD(String centralCICD)

Optional request parameter added to URLs.

Returns:

this.

endpointReferenceAddress

public AuthorizedApplication.AuthorizedApplicationBuilder endpointReferenceAddress(String endpointReferenceAddress)

Overrides the RP ID in requests sent by the AccessRequest.

Returns:

this.

validateAssertion

public AuthorizedApplication.AuthorizedApplicationBuilder validateAssertion(Boolean validateAssertion)

Validate assertions in responses to requests sent by the AccessRequest.
Default: false

Returns:

this.

redirectUrl

public AuthorizedApplication.AuthorizedApplicationBuilder redirectUrl(String redirectUrl)

URL to be redirected to after AccessRequest.

Returns:

this.

build

public AuthorizedApplication build()

toString

public String toString()

Overrides:

toString in class Object