Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

The most important use of Predicates is in ActivationConditions, and the majority of the predefined beans are of this type.   They implement  Predicate<ProfileRequestContext>, and will be .  In the role of ActivationConditions they are called with the current Request context (when provided as a activation condition.

  • shibboleth.Conditions.BrowserProfile - return TRUE if the current profile is one which assumes browser interaction.
  • shibboleth.Conditions.RelyingPartyId  - return TRUE based on the EntityID of the relying party,
  • shibboleth.Conditions.Scripted
  • shibboleth.Conditions.Expression
  • shibboleth.Conditions.Predicate
  • shibboleth.Conditions.EntityDescriptor
  • shibboleth.Conditions.SubjectName
  • shibboleth.Conditions.AllowedSAMLPresenters
  • shibboleth.Conditions.IssuingDelegatedAssertion

Attribute Predicates

These class of predicates default to being an ActivationCondition (although complex configuration allow this to be changed).  Their task is to make a decision based on any attributes that have been resolved (so far).  All variants allow for either the filtered or unfiltered attributes to be consulted.  Obviously these predicates are only valid after attribute resolution has taken place.

None of these Predicates have names and so their FQ java class name has to be used.

Other useful Predicate classes

...

  • net.shibboleth.idp.profile.logic.SimpleAttributePredicate
  • org.opensaml.profile.logic.IPRangePredicate
  • net.shibboleth.utilities.java.support.logic.StrategyIndirectedPredicate
  • net.shibboleth.ext.spring.util.SpringExpressionFunction

See Also

Functions

All Function beans are implementation of the Function interface, that is to say they are given a "thing" and return "some othre thing". Whilst this may sound of limited utili

Context Functions

  • shibboleth.MessageContextLookup.Inbound
  • shibboleth.ContextFunctions.Scripted
  • shibboleth.ContextFunctions.Expression
  • shibboleth.MessageContextLookup.Inbound
  • shibboleth.MessageContextLookup.Outbound
  • shibboleth.MessageLookup.SAMLObject
  • shibboleth.MessageLookup.AuthnRequest

Other Functions


  • shibboleth.MessageContextLookup.Inbound
  • s


Other Beans

  • shibboleth.Pair
  • shibboleth.CommaDelimStringArray
  • shibboleth.NonFailFastValidator
  • shibboleth.HttpServletRequest
  • shibboleth.HttpServletResponse

...