Class IDPAuthnContextInfo

java.lang.Object
com.sun.identity.saml2.plugins.IDPAuthnContextInfo

@SupportedAll public class IDPAuthnContextInfo extends Object
The class IDPAuthnContextInfo consists of the mapping between AuthnContextClassRef and the actual authentication mechanism at the Identity Provider.
  • Constructor Details

    • IDPAuthnContextInfo

      public IDPAuthnContextInfo(AuthnContext authnContext, Set authnTypeAndValues, Integer authnLevel)
      The constructor.
      Parameters:
      authnContext - The AuthnContext that is returned to the requester.
      authnTypeAndValues - The set of authentication mechanism
      authnLevel - The Authentication Level associated to the Authentication context
    • IDPAuthnContextInfo

      public IDPAuthnContextInfo(AuthnContext authnContext, Set authnTypeAndValues, Integer authnLevel, boolean requiresRedirectToAuth)
      The constructor.
      Parameters:
      authnContext - The AuthnContext that is returned to the requester.
      authnTypeAndValues - The set of authentication mechanism
      authnLevel - The Authentication Level associated to the Authentication context
      requiresRedirectToAuth - whether this Authentication context requires that the IDP redirect to auth
  • Method Details

    • getAuthnContext

      public AuthnContext getAuthnContext()
      Returns the returning AuthnContext
      Returns:
      the returning AuthnContext
    • getAuthnTypeAndValues

      public Set getAuthnTypeAndValues()
      Returns the set of authentication mechanism
      Returns:
      the set of authentication mechanism
    • getAuthnTypeAndValuesAsMap

      public Map<String,String> getAuthnTypeAndValuesAsMap()
      Returns a map of the authentication mechanism.
    • getAuthnLevel

      public Integer getAuthnLevel()
      Returns the Authentication Level
      Returns:
      the Authentication level
    • requiresRedirectionToAuth

      public boolean requiresRedirectionToAuth()
      Whether the AuthnContextInfo requires AM to redirect to auth service. This is true if we have a service set directly on the remote SP, or we have a service specified via AuthnContext that has 'mustRun' set on the corresponding tree configuration.
      Returns:
      true if SAML should redirect the user to authenticate, otherwise false