public class LocalExtendedMetadataConfigurer extends ExtendedMetadataConfigurer
LocalExtendedMetadata bean.
Common strategy across most internal configurers is to first give priority to a Spring Bean if present in the
Context.
So if not LocalExtendedMetadata bean is defined, priority goes to a custom LocalExtendedMetadata provided explicitly
to this configurer through the constructor. And if not provided through the constructor, a default implementation is
instantiated that is configurable through the DSL methods.
This configurer also reads the values from SAMLSSOProperties#getLocalExtendedMetadata() if no custom Extended
Metadata is provided, for some DSL methods if they that are not used. In other words, the user is able to configure
the Extended Metadata for the local entity through the following properties:
saml.sso.local-extended-metadata.local
saml.sso.local-extended-metadata.alias
saml.sso.local-extended-metadata.idp-discovery-enabled
saml.sso.local-extended-metadata.idp-discovery-url
saml.sso.local-extended-metadata.idp-discovery-response-url
saml.sso.local-extended-metadata.ecp-enabled
saml.sso.local-extended-metadata.security-profile
saml.sso.local-extended-metadata.ssl-security-profile
saml.sso.local-extended-metadata.ssl-hostname-verification
saml.sso.local-extended-metadata.signing-key
saml.sso.local-extended-metadata.sign-metadata
saml.sso.local-extended-metadata.key-info-generator-name
saml.sso.local-extended-metadata.encryption-key
saml.sso.local-extended-metadata.tls-key
saml.sso.local-extended-metadata.trusted-keys
saml.sso.local-extended-metadata.require-logout-request-signed
saml.sso.local-extended-metadata.require-logout-response-signed
saml.sso.local-extended-metadata.require-artifact-resolve-signed
saml.sso.local-extended-metadata.support-unsolicited-response
extendedMetadata, extendedMetadataBean, extendedMetadataConfig, local| Constructor and Description |
|---|
LocalExtendedMetadataConfigurer() |
LocalExtendedMetadataConfigurer(org.springframework.security.saml.metadata.ExtendedMetadata extendedMetadata) |
| Modifier and Type | Method and Description |
|---|---|
protected org.springframework.security.saml.metadata.ExtendedMetadata |
createExtendedMetadata() |
void |
init(ServiceProviderBuilder builder) |
protected void |
shareExtendedMetadata(ServiceProviderBuilder builder) |
alias, configure, ecpEnabled, encryptionKey, idpDiscoveryEnabled, idpDiscoveryResponseURL, idpDiscoveryURL, keyInfoGeneratorName, local, requireArtifactResolveSigned, requireLogoutRequestSigned, requireLogoutResponseSigned, securityProfile, signingAlgorithm, signingKey, signMetadata, sslHostnameVerification, sslSecurityProfile, supportUnsolicitedResponse, tlsKey, trustedKeyspublic LocalExtendedMetadataConfigurer()
public LocalExtendedMetadataConfigurer(org.springframework.security.saml.metadata.ExtendedMetadata extendedMetadata)
public void init(ServiceProviderBuilder builder) throws Exception
init in interface org.springframework.security.config.annotation.SecurityConfigurer<Void,ServiceProviderBuilder>init in class ExtendedMetadataConfigurerExceptionprotected org.springframework.security.saml.metadata.ExtendedMetadata createExtendedMetadata()
createExtendedMetadata in class ExtendedMetadataConfigurerprotected void shareExtendedMetadata(ServiceProviderBuilder builder)
shareExtendedMetadata in class ExtendedMetadataConfigurerCopyright © 2018. All rights reserved.