org.openliberty.xmltooling.ps.response

Class QueryString

java.lang.Object

org.opensaml.core.xml.AbstractXMLObject

org.opensaml.core.xml.schema.impl.XSStringImpl

org.openliberty.xmltooling.ps.response.QueryString

All Implemented Interfaces:

org.opensaml.core.xml.schema.XSString, org.opensaml.core.xml.XMLObject

public class QueryString
extends org.opensaml.core.xml.schema.impl.XSStringImpl

A PS provider may insert a QueryString in its AddEntityResponse or AddKnownEntityResponse. The invited Principal can present this artifact string to a certain provider.

The <QueryString> element enables an alternative model for invited user interaction which is expected to better defend against identity theft attacks in which a valid email is spoofed to fool users into clicking an embedded URL. The invitation received by the invited user will contain a string carrying a SAML artifact (and potentially relay state info) representing a SAML <samlp:AuthnRequest> message created by the PS provider. The invited user can, if they choose, present this artifact string to their identity provider - which can then use the SAML <samlp:ArtifactResolve> message to retrieve the original <samlp:AuthnRequest> message from the PS provider.

As the invited user visits their IDP by explicitly providing the address or using an existing bookmark, they can be more confident that the site is not spoofed. Once they are at their IDP and after presenting the SAML artifact , appropriate federations can be established for the invited user with the originating PS provider and SP.

     <!-- Declaration of QueryString -->
 
     <xs:element name="QueryString" type="QueryStringType"/>
 
     <!-- Definition of QueryStringType-->
 
     <xs:complexType name="QueryStringType">
         <xs:annotation>
             <xs:documentation>A PS provider may insert a QueryString in its AddEntityResponse or AddKnownEntityResponse. The invited Principal can present this artifact string to a certain provider.</xs:documentation>
         </xs:annotation>
         <xs:simpleContent>
             <xs:extension base="xs:string"/>
         </xs:simpleContent>
     </xs:complexType>
 

Nested Class Summary

Nested Classes

Modifier and Type	Class and Description
static class	QueryString.Builder Static Builder
static class	QueryString.Marshaller Static Marshaller
static class	QueryString.Unmarshaller Static Unmarshaller

Field Summary

Fields

Modifier and Type	Field and Description
static String	LOCAL_NAME

Fields inherited from interface org.opensaml.core.xml.schema.XSString

TYPE_LOCAL_NAME, TYPE_NAME

Constructor Summary

Constructors

Modifier	Constructor and Description
protected	QueryString(String namespaceURI, String elementLocalName, String namespacePrefix)

Method Summary

Methods inherited from class org.opensaml.core.xml.schema.impl.XSStringImpl

getOrderedChildren, getValue, setValue

Methods inherited from class org.opensaml.core.xml.AbstractXMLObject

detach, getDOM, getElementQName, getIDIndex, getNamespaceManager, getNamespaces, getNoNamespaceSchemaLocation, getObjectMetadata, getParent, getSchemaLocation, getSchemaType, hasChildren, hasParent, isNil, isNilXSBoolean, manageQualifiedAttributeNamespace, prepareAttributeValueForAssignment, prepareElementContentForAssignment, prepareForAssignment, prepareForAssignment, prepareForAssignment, registerOwnID, releaseChildrenDOM, releaseDOM, releaseParentDOM, releaseThisAndChildrenDOM, releaseThisandParentDOM, resolveID, resolveIDFromRoot, setDOM, setElementNamespacePrefix, setElementQName, setNil, setNil, setNoNamespaceSchemaLocation, setParent, setSchemaLocation, setSchemaType

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface org.opensaml.core.xml.XMLObject

detach, getDOM, getElementQName, getIDIndex, getNamespaceManager, getNamespaces, getNoNamespaceSchemaLocation, getObjectMetadata, getParent, getSchemaLocation, getSchemaType, hasChildren, hasParent, isNil, isNilXSBoolean, releaseChildrenDOM, releaseDOM, releaseParentDOM, resolveID, resolveIDFromRoot, setDOM, setNil, setNil, setNoNamespaceSchemaLocation, setParent, setSchemaLocation

Field Detail

LOCAL_NAME

public static final String LOCAL_NAME

See Also:

Constant Field Values

Constructor Detail

QueryString

protected QueryString(String namespaceURI,
           String elementLocalName,
           String namespacePrefix)