Package swiss.trustbroker.saml.dto

Class CpResponse

java.lang.Object
swiss.trustbroker.saml.dto.ResponseStatus
swiss.trustbroker.saml.dto.CpResponse
All Implemented Interfaces:
Serializable, swiss.trustbroker.api.sessioncache.dto.CpResponseData
public class CpResponse extends ResponseStatus implements swiss.trustbroker.api.sessioncache.dto.CpResponseData
This class implement the processing context which is the core of the XTB processing model according. The context is mapped from CP SAML response and/or stored as session state. Note that original attributes should not be used in scripting except may be for read-only debugging.
See Also:

  • Constructor Details

    • CpResponse

      protected CpResponse(CpResponse.CpResponseBuilder<?,?> b)

    • CpResponse

      public CpResponse()

    • CpResponse

      public CpResponse(String inResponseTo, String nameId, String originalNameId, String mappedNameId, String nameIdFormat, String subjectConfirmationMethod, String authStateInstant, List<String> contextClasses, String issuer, String homeName, String destination, String authLevel, String rpIssuer, String rpReferer, List<String> rpContextClasses, String rpDestination, String rpRecipient, String clientExtId, String clientName, String applicationName, String oidcClientId, Set<String> oidcScopes, String customIssuer, Map<String,String> rpContext, Map<Definition,List<String>> attributes, Map<Definition,List<String>> originalAttributes, IdmLookup idmLookup, Map<Definition,List<String>> userDetails, int originalUserDetailsCount, Map<Definition,List<String>> properties, int originalPropertiesCount, Map<Definition,List<String>> results, Map<String,Object> claims, Map<Object,Object> additionalIdmData, Set<String> queriedStores)
      Creates a new CpResponse instance.
      Parameters:
      inResponseTo - ID of the authentication request that lead to this CP response.
      nameId - Subject name ID.
      originalNameId - CP Response incoming subject name ID used for internal processing.
      mappedNameId - CP Response incoming subject name ID after CP side subject name mapping.
      nameIdFormat - Format of the subject name ID.
      subjectConfirmationMethod - Subject confirmation method.
      authStateInstant - Issuing instant of authentication statement.
      contextClasses - Authentication context classes.
      issuer - CP Response issuer also referred to as HomeRealm.
      homeName - HomeName used by IdmService to query IDM.
      destination - AuthnRequest.AssertionConsumerUrl from our AuthnRequest.
      authLevel - Declared QoA CP side.
      rpIssuer - Incoming issuer on RP side.
      rpReferer - Incoming HTTP referrer on RP side.
      rpContextClasses - Incoming context class requirements on RP side.
      rpDestination - Override SAML Response.Destination on RP side.
      rpRecipient - Override SAML SubjectConfirmationData.Recipient on RP side.
      clientExtId - Retrieved IDM primary reference for internal reference.
      clientName - RelyingParty ClientName as used in the IDM credential SAML federation Issuer NameID.
      applicationName - RP/OIDC context sending 'SAML clientId' in ProviderName.
      oidcClientId - Incoming OIDC client_id.
      oidcScopes - Incoming OIDC scopes.
      customIssuer - Override RP response issuer.
      rpContext - The HttpServletRequest params, some specific ones: username, Client_Network
      attributes - The attributes map contains these attributes:
      • CP SAML Response attributes extracted from the message
      • Derived attributes computed in ScriptService BeforeIdm hooks
      The names in this map are usually fully qualified as represented in the SAML response from the CP. This map is logged by the AuditService when SAML response comes in from CP.
      originalAttributes - Copy of Attributes before filtering. Necessary for SSO
      idmLookup - Contains the IdmLookup for the corresponding RP. The query list can originate from Groovy scripts.
      userDetails - IDM user data returned from IDM backends, filtered by RP setup.
      originalUserDetailsCount -
      properties - Properties contain computed values that can be sent as RP attributes based on incoming CP attributes and userdetails. They are selected by the PropertiesSelection configuration.
      originalPropertiesCount -
      results - The results map contains these SAML attributes:
      • CP SAML Response attributes extracted from the message (PassThrough Claims from CP)
      • Derived attributes computed in ScriptService BeforeIdm hooks (Computed CP claims)
      • IDM attributes retrieved from the IDMService
      • Derived attributes computed in ScriptService AfterIdm hooks (Computed IDM claims)
      The names in this map are usually fully qualified as represented in the SAML response from the CP. This map is logged by the AuditService when SAML response is sent to RP. Type system in SAML: Strings and List>String> only. Results are used for auditing only at the time being.
      claims - The claims map contains these OIDC claims:
      • Everything that was annotated with an oidcName in the configuration.
      • All well known OIDC claims of the openid scope declared in AttributeName (StandardClaims).
      • Everything added or removed in a OIDC OnToken groovy script hook.
      We use Object values because of nested collection support. Type system in SAML: Any object that supports JSONAware (json serialization) or a toString conversion otherwise. Claims are used for OIDC token generation as opposed to results (different type system).
      additionalIdmData - Additional exchanged between related API implementations.
      This data is not persisted.
      The map key indicates the source of the value item.
      queriedStores - Contains the stores of IDM lookups actually executed by the available IdmQueryService implementations - including those that did not find a result.
      Since:
      1.10.0, 1.12.0
      See Also:
      • SubjectNameMappings
      • IdmResult.getAdditionalData()
      • IdmProvisioningRequest.getAdditionalData()
      • ()
      • IdmProvisioningRequest.getQueriedStores()

  • Method Details

    • getAttributes

      public List<String> getAttributes(String name)
      Script hook: Get multi-valued CP/IDP claim
      Specified by:
      getAttributes in interface swiss.trustbroker.api.sessioncache.dto.CpResponseData

    • getAttribute

      public String getAttribute(String name)
      Script hook: Get single-valued CP/IDP claim
      Specified by:
      getAttribute in interface swiss.trustbroker.api.sessioncache.dto.CpResponseData

    • getAttributes

      public List<String> getAttributes(String name, String source)
      Script hook: Get multi-valued CP/IDP claim including source selector. Source CP and null are equivalent for the time being. Future extensions might add new sources.
      Since:
      1.11.0

    • getAttribute

      public String getAttribute(String name, String source)
      Script hook: Get single-valued CP/IDP claim including source selector. Source CP and null are equivalent for the time being. Future extensions might add new sources.
      Since:
      1.11.0

    • setAttribute

      public void setAttribute(String name, String value)
      Set single value attribute.

    • setAttribute

      public void setAttribute(String name, String namespaceUri, String value)
      Set single value attribute with namespace.

    • setAttributes

      public void setAttributes(String name, String namespaceUri, List<String> values)
      Set multi-value attribute with namespace.
      Since:
      1.11.0

    • setAttributes

      public void setAttributes(String name, List<String> values)
      Set multi-value attribute.

    • setAttributes

      public void setAttributes(Definition def, List<String> values)
      Set multi-value attribute with Definition key.

    • addAttribute

      public void addAttribute(String name, String value)
      Script hook: Add CP/IDP claim value to existing attribute or create entry.

    • removeAttributes

      public void removeAttributes(String name)
      Remove CP/IDP claim with name or FQ name.

    • getUserDetails

      public List<String> getUserDetails(String name)
      Script hook use: get all values using name or FQ name.
      Specified by:
      getUserDetails in interface swiss.trustbroker.api.sessioncache.dto.CpResponseData

    • getUserDetail

      public String getUserDetail(String name)
      Script hook use: Get first value using name or FQ name.
      Specified by:
      getUserDetail in interface swiss.trustbroker.api.sessioncache.dto.CpResponseData

    • getUserDetails

      public List<String> getUserDetails(String name, String source)
      Get values using name or FQ name with optional source.
      Specified by:
      getUserDetails in interface swiss.trustbroker.api.sessioncache.dto.CpResponseData

    • getUserDetail

      public String getUserDetail(String name, String source)
      Script hook use: Get first value using name or FQ name with optional source.
      Specified by:
      getUserDetail in interface swiss.trustbroker.api.sessioncache.dto.CpResponseData

    • removeUserDetails

      public List<String> removeUserDetails(String name)
      Script hook use: Remove entry by name or FQ name.

    • removeUserDetails

      public List<String> removeUserDetails(String name, String source)
      Script hook use: Remove entry by name or FQ name from the optional source.

    • setUserDetail

      public void setUserDetail(String name, String fqName, String value)
      Script hook use: Add entry with a single value and a FQ name for outbound mapping.

    • setUserDetail

      public void setUserDetail(String name, String value)
      Script hook use: Add user claim with a single value.
      Since:
      1.11.0

    • addUserDetail

      public void addUserDetail(String name, String fqName, String value)
      Script hook: Add value to existing user claim or create entry.

    • addUserDetail

      public void addUserDetail(String name, String value)
      Script hook: Add value to existing user claim or create entry.
      Since:
      1.11.0

    • addUserDetail

      public void addUserDetail(String name, String fqName, String value, String source)
      Script hook: Add value or create entry with optional source.

    • addUserDetailIfMissing

      public boolean addUserDetailIfMissing(String name, String fqName, String value)
      Add user details if not yet set.
      Returns:
      true if added

    • setUserDetails

      public void setUserDetails(String name, List<String> values)
      Script hook use: Set user claims with a list value.
      Since:
      1.11.0

    • setUserDetails

      public void setUserDetails(String name, String fqName, List<String> values)
      Script hook use: Set user claims with a list value and a FQ name.

    • setResult

      public void setResult(Definition definition, List<String> values)
      Set results with definition as key.

    • skipQuery

      public void skipQuery(String typeOrId)
      Script hook use: Skip a particular IDM query.

    • getProperties

      public List<String> getProperties(String name)
      Script hook use: Get property values by name or FQ name.
      Specified by:
      getProperties in interface swiss.trustbroker.api.sessioncache.dto.CpResponseData

    • getProperty

      public String getProperty(String name)
      Script hook use: Get first property value using name or FQ name.
      Specified by:
      getProperty in interface swiss.trustbroker.api.sessioncache.dto.CpResponseData

    • getProperties

      public List<String> getProperties(String name, String source)
      Script hook use: Get property values by name or FQ name with optional source. As source cannot be set directly on this class the default source CP used by ClaimsPartyService and null are equivalent.
      Specified by:
      getProperties in interface swiss.trustbroker.api.sessioncache.dto.CpResponseData

    • getProperty

      public String getProperty(String name, String source)
      Script hook use: Get first property value using name or FQ name with optional source. As source cannot be set directly on this class the default source CP used by ClaimsPartyService and null are equivalent.
      Specified by:
      getProperty in interface swiss.trustbroker.api.sessioncache.dto.CpResponseData

    • removeProperty

      public List<String> removeProperty(String name)
      Script hook use: Remove entry by name or FQ name.

    • setProperties

      public void setProperties(String name, String fqName, List<String> values)
      Script hook use: Add CP/IDP claims with a list value.using FQ name.

    • setProperties

      public void setProperties(String name, List<String> values)
      Script hook use: Add entry with a list value.
      Since:
      1.11.0

    • setProperty

      public void setProperty(String name, String value)
      Script hook use: Add entry with a single value
      Since:
      1.11.0

    • setProperty

      public void setProperty(String name, String fqName, String value)
      Script hook use: Add entry with a single value

    • addPropertyIfMissing

      public boolean addPropertyIfMissing(String name, String fqName, String value)
      Add property if not yet set.
      Returns:
      true if added

    • addProperty

      public void addProperty(String name, String value)
      Script hook use: Add value to an already available list value or create.
      Since:
      1.11.0

    • addProperty

      public void addProperty(String name, String fqName, String value)
      Script hook use: Add value to an already available list value or create.

    • addProperties

      public void addProperties(String name, String fqName, List<String> values)
      Script hook use: Add values to an already available list value or create.

    • getClaims

      public Object getClaims(String name)
      Get claims by name. null is returned as empty list.

    • getClaimList

      public List<Object> getClaimList(String name)
      Converts values to (possibly immutable) list if needed, empty list for null.

    • getClaim

      public Object getClaim(String name)
      Get single value of by name.

    • setClaim

      public void setClaim(String name, Object value)
      Set claim value or values.

    • setJsonClaim

      public void setJsonClaim(String name, Object value)
      Set claim value from collection or other value.

    • setClaims

      public void setClaims(String name, Object values)
      Set claim value or values.

    • setClaimList

      public void setClaimList(String name, Object values)
      Converts values to (possibly immutable) list if needed, empty list for null.

    • setJsonClaims

      public void setJsonClaims(String name, Object values)
      Set claim value from collection or other value.

    • addClaim

      public void addClaim(String name, Object value)
      Add claim.

    • addJsonClaim

      public void addJsonClaim(String name, Object value)
      Add claim.

    • addJsonClaim

      public void addJsonClaim(String parent, String name, Object value)
      Add claim with optional link to parent.

    • setParsedJsonAsClaim

      public void setParsedJsonAsClaim(String name, String value)
      Parse value as JSON and add.

    • addParsedJsonAsClaim

      public void addParsedJsonAsClaim(String parent, String name, String value)
      Parse value as JSON and add, with optional parent.

    • removeClaim

      public void removeClaim(String name)
      Remove claim.

    • getIssuerId

      public String getIssuerId()
      Specified by:
      getIssuerId in interface swiss.trustbroker.api.sessioncache.dto.CpResponseData

    • getAttributeMap

      public Map<swiss.trustbroker.api.sessioncache.dto.AttributeName,List<String>> getAttributeMap()
      Specified by:
      getAttributeMap in interface swiss.trustbroker.api.sessioncache.dto.CpResponseData

    • getPropertyMap

      public Map<swiss.trustbroker.api.sessioncache.dto.AttributeName,List<String>> getPropertyMap()
      Specified by:
      getPropertyMap in interface swiss.trustbroker.api.sessioncache.dto.CpResponseData

    • getUserDetailMap

      public Map<swiss.trustbroker.api.sessioncache.dto.AttributeName,List<String>> getUserDetailMap()
      Specified by:
      getUserDetailMap in interface swiss.trustbroker.api.sessioncache.dto.CpResponseData

    • hasOriginalNameId

      public boolean hasOriginalNameId()

    • getSsoSubjectFromCpResponse

      public String getSsoSubjectFromCpResponse(String ssoSubjectClaim)

    • cloneIdmLookup

      public void cloneIdmLookup(IdmLookup originalIdmLookup)

    • builder

      public static CpResponse.CpResponseBuilder<?,?> builder()

    • toBuilder

      public CpResponse.CpResponseBuilder<?,?> toBuilder()

    • getInResponseTo

      public String getInResponseTo()
      ID of the authentication request that lead to this CP response.

    • getNameId

      public String getNameId()
      Subject name ID.
      Specified by:
      getNameId in interface swiss.trustbroker.api.sessioncache.dto.CpResponseData

    • getOriginalNameId

      public String getOriginalNameId()
      CP Response incoming subject name ID used for internal processing.

    • getMappedNameId

      public String getMappedNameId()
      CP Response incoming subject name ID after CP side subject name mapping.
      Since:
      1.10.0
      See Also:

    • getNameIdFormat

      public String getNameIdFormat()
      Format of the subject name ID.

    • getSubjectConfirmationMethod

      public String getSubjectConfirmationMethod()
      Subject confirmation method.

    • getAuthStateInstant

      public String getAuthStateInstant()
      Issuing instant of authentication statement.

    • getContextClasses

      public List<String> getContextClasses()
      Authentication context classes.

    • getIssuer

      public String getIssuer()
      CP Response issuer also referred to as HomeRealm.

    • getHomeName

      public String getHomeName()
      HomeName used by IdmService to query IDM.
      Specified by:
      getHomeName in interface swiss.trustbroker.api.sessioncache.dto.CpResponseData

    • getDestination

      public String getDestination()
      AuthnRequest.AssertionConsumerUrl from our AuthnRequest.

    • getAuthLevel

      public String getAuthLevel()
      Declared QoA CP side.

    • getRpIssuer

      public String getRpIssuer()
      Incoming issuer on RP side.

    • getRpReferer

      public String getRpReferer()
      Incoming HTTP referrer on RP side.

    • getRpContextClasses

      public List<String> getRpContextClasses()
      Incoming context class requirements on RP side.

    • getRpDestination

      public String getRpDestination()
      Override SAML Response.Destination on RP side.

    • getRpRecipient

      public String getRpRecipient()
      Override SAML SubjectConfirmationData.Recipient on RP side.

    • getClientExtId

      public String getClientExtId()
      Retrieved IDM primary reference for internal reference.

    • getClientName

      public String getClientName()
      RelyingParty ClientName as used in the IDM credential SAML federation Issuer NameID.
      Specified by:
      getClientName in interface swiss.trustbroker.api.sessioncache.dto.CpResponseData

    • getApplicationName

      public String getApplicationName()
      RP/OIDC context sending 'SAML clientId' in ProviderName.

    • getOidcClientId

      public String getOidcClientId()
      Incoming OIDC client_id.

    • getOidcScopes

      public Set<String> getOidcScopes()
      Incoming OIDC scopes.

    • getCustomIssuer

      public String getCustomIssuer()
      Override RP response issuer.

    • getRpContext

      public Map<String,String> getRpContext()
      The HttpServletRequest params, some specific ones: username, Client_Network

    • getAttributes

      public Map<Definition,List<String>> getAttributes()
      The attributes map contains these attributes:
      • CP SAML Response attributes extracted from the message
      • Derived attributes computed in ScriptService BeforeIdm hooks
      The names in this map are usually fully qualified as represented in the SAML response from the CP. This map is logged by the AuditService when SAML response comes in from CP.

    • getOriginalAttributes

      public Map<Definition,List<String>> getOriginalAttributes()
      Copy of Attributes before filtering. Necessary for SSO

    • getIdmLookup

      public IdmLookup getIdmLookup()
      Contains the IdmLookup for the corresponding RP. The query list can originate from Groovy scripts.

    • getUserDetails

      public Map<Definition,List<String>> getUserDetails()
      IDM user data returned from IDM backends, filtered by RP setup.

    • getOriginalUserDetailsCount

      public int getOriginalUserDetailsCount()

    • getProperties

      public Map<Definition,List<String>> getProperties()
      Properties contain computed values that can be sent as RP attributes based on incoming CP attributes and userdetails. They are selected by the PropertiesSelection configuration.

    • getOriginalPropertiesCount

      public int getOriginalPropertiesCount()

    • getResults

      public Map<Definition,List<String>> getResults()
      The results map contains these SAML attributes:
      • CP SAML Response attributes extracted from the message (PassThrough Claims from CP)
      • Derived attributes computed in ScriptService BeforeIdm hooks (Computed CP claims)
      • IDM attributes retrieved from the IDMService
      • Derived attributes computed in ScriptService AfterIdm hooks (Computed IDM claims)
      The names in this map are usually fully qualified as represented in the SAML response from the CP. This map is logged by the AuditService when SAML response is sent to RP. Type system in SAML: Strings and List>String> only. Results are used for auditing only at the time being.

    • getClaims

      public Map<String,Object> getClaims()
      The claims map contains these OIDC claims:
      • Everything that was annotated with an oidcName in the configuration.
      • All well known OIDC claims of the openid scope declared in AttributeName (StandardClaims).
      • Everything added or removed in a OIDC OnToken groovy script hook.
      We use Object values because of nested collection support. Type system in SAML: Any object that supports JSONAware (json serialization) or a toString conversion otherwise. Claims are used for OIDC token generation as opposed to results (different type system).

    • getAdditionalIdmData

      public Map<Object,Object> getAdditionalIdmData()
      Additional exchanged between related API implementations.
      This data is not persisted.
      The map key indicates the source of the value item.
      See Also:
      • IdmResult.getAdditionalData()
      • IdmProvisioningRequest.getAdditionalData()

    • getQueriedStores

      public Set<String> getQueriedStores()
      Contains the stores of IDM lookups actually executed by the available IdmQueryService implementations - including those that did not find a result.
      Since:
      1.12.0
      See Also:
      • ()
      • IdmProvisioningRequest.getQueriedStores()

    • setInResponseTo

      public void setInResponseTo(String inResponseTo)
      ID of the authentication request that lead to this CP response.

    • setNameId

      public void setNameId(String nameId)
      Subject name ID.

    • setOriginalNameId

      public void setOriginalNameId(String originalNameId)
      CP Response incoming subject name ID used for internal processing.

    • setMappedNameId

      public void setMappedNameId(String mappedNameId)
      CP Response incoming subject name ID after CP side subject name mapping.
      Since:
      1.10.0
      See Also:

    • setNameIdFormat

      public void setNameIdFormat(String nameIdFormat)
      Format of the subject name ID.

    • setSubjectConfirmationMethod

      public void setSubjectConfirmationMethod(String subjectConfirmationMethod)
      Subject confirmation method.

    • setAuthStateInstant

      public void setAuthStateInstant(String authStateInstant)
      Issuing instant of authentication statement.

    • setContextClasses

      public void setContextClasses(List<String> contextClasses)
      Authentication context classes.

    • setIssuer

      public void setIssuer(String issuer)
      CP Response issuer also referred to as HomeRealm.

    • setHomeName

      public void setHomeName(String homeName)
      HomeName used by IdmService to query IDM.

    • setDestination

      public void setDestination(String destination)
      AuthnRequest.AssertionConsumerUrl from our AuthnRequest.

    • setAuthLevel

      public void setAuthLevel(String authLevel)
      Declared QoA CP side.

    • setRpIssuer

      public void setRpIssuer(String rpIssuer)
      Incoming issuer on RP side.

    • setRpReferer

      public void setRpReferer(String rpReferer)
      Incoming HTTP referrer on RP side.

    • setRpContextClasses

      public void setRpContextClasses(List<String> rpContextClasses)
      Incoming context class requirements on RP side.

    • setRpDestination

      public void setRpDestination(String rpDestination)
      Override SAML Response.Destination on RP side.

    • setRpRecipient

      public void setRpRecipient(String rpRecipient)
      Override SAML SubjectConfirmationData.Recipient on RP side.

    • setClientExtId

      public void setClientExtId(String clientExtId)
      Retrieved IDM primary reference for internal reference.

    • setClientName

      public void setClientName(String clientName)
      RelyingParty ClientName as used in the IDM credential SAML federation Issuer NameID.

    • setApplicationName

      public void setApplicationName(String applicationName)
      RP/OIDC context sending 'SAML clientId' in ProviderName.

    • setOidcClientId

      public void setOidcClientId(String oidcClientId)
      Incoming OIDC client_id.

    • setOidcScopes

      public void setOidcScopes(Set<String> oidcScopes)
      Incoming OIDC scopes.

    • setCustomIssuer

      public void setCustomIssuer(String customIssuer)
      Override RP response issuer.

    • setRpContext

      public void setRpContext(Map<String,String> rpContext)
      The HttpServletRequest params, some specific ones: username, Client_Network

    • setAttributes

      public void setAttributes(Map<Definition,List<String>> attributes)
      The attributes map contains these attributes:
      • CP SAML Response attributes extracted from the message
      • Derived attributes computed in ScriptService BeforeIdm hooks
      The names in this map are usually fully qualified as represented in the SAML response from the CP. This map is logged by the AuditService when SAML response comes in from CP.

    • setOriginalAttributes

      public void setOriginalAttributes(Map<Definition,List<String>> originalAttributes)
      Copy of Attributes before filtering. Necessary for SSO

    • setIdmLookup

      public void setIdmLookup(IdmLookup idmLookup)
      Contains the IdmLookup for the corresponding RP. The query list can originate from Groovy scripts.

    • setUserDetails

      public void setUserDetails(Map<Definition,List<String>> userDetails)
      IDM user data returned from IDM backends, filtered by RP setup.

    • setOriginalUserDetailsCount

      public void setOriginalUserDetailsCount(int originalUserDetailsCount)

    • setProperties

      public void setProperties(Map<Definition,List<String>> properties)
      Properties contain computed values that can be sent as RP attributes based on incoming CP attributes and userdetails. They are selected by the PropertiesSelection configuration.

    • setOriginalPropertiesCount

      public void setOriginalPropertiesCount(int originalPropertiesCount)

    • setResults

      public void setResults(Map<Definition,List<String>> results)
      The results map contains these SAML attributes:
      • CP SAML Response attributes extracted from the message (PassThrough Claims from CP)
      • Derived attributes computed in ScriptService BeforeIdm hooks (Computed CP claims)
      • IDM attributes retrieved from the IDMService
      • Derived attributes computed in ScriptService AfterIdm hooks (Computed IDM claims)
      The names in this map are usually fully qualified as represented in the SAML response from the CP. This map is logged by the AuditService when SAML response is sent to RP. Type system in SAML: Strings and List>String> only. Results are used for auditing only at the time being.

    • setClaims

      public void setClaims(Map<String,Object> claims)
      The claims map contains these OIDC claims:
      • Everything that was annotated with an oidcName in the configuration.
      • All well known OIDC claims of the openid scope declared in AttributeName (StandardClaims).
      • Everything added or removed in a OIDC OnToken groovy script hook.
      We use Object values because of nested collection support. Type system in SAML: Any object that supports JSONAware (json serialization) or a toString conversion otherwise. Claims are used for OIDC token generation as opposed to results (different type system).

    • setAdditionalIdmData

      public void setAdditionalIdmData(Map<Object,Object> additionalIdmData)
      Additional exchanged between related API implementations.
      This data is not persisted.
      The map key indicates the source of the value item.
      See Also:
      • IdmResult.getAdditionalData()
      • IdmProvisioningRequest.getAdditionalData()

    • setQueriedStores

      public void setQueriedStores(Set<String> queriedStores)
      Contains the stores of IDM lookups actually executed by the available IdmQueryService implementations - including those that did not find a result.
      Since:
      1.12.0
      See Also:
      • ()
      • IdmProvisioningRequest.getQueriedStores()

    • toString

      public String toString()
      Overrides:
      toString in class ResponseStatus

    • equals

      public boolean equals(Object o)
      Overrides:
      equals in class ResponseStatus

    • canEqual

      protected boolean canEqual(Object other)
      Overrides:
      canEqual in class ResponseStatus

    • hashCode

      public int hashCode()
      Overrides:
      hashCode in class ResponseStatus