Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

The first two must define beans that derive from the RelyingPartyConfiguration class, but this is automatically done by inheriting (via the parent attribute) from the bean named RelyingParty.

...

The "default" RP bean applies to requests from peers that do not fit the conditions attached to any overrides, and are thus handled with default settings. By default, this relies on a variety of built-in settings, and activates a number of the usual profiles, though the exact list may vary over time with particular releases (things that used to be common may become rare).

The last bean is a List<RelyingPartyConfiguration> for any overrides. Those beans will generally be of special types that determine their applicability, or will generically contain an activationCondition property that determines whether one applies to a request or not.

...

Every relying party configuration (default or override) has a profileConfigurations property whose value is a list of ProfileConfiguration beans that determine which profiles can be used. Any profile not explicitly listed will be disabled and requests for it will fail internally with an error.

...

Expand
titleBeans

Beans defined in relying-party.xml and related system configuration follow:

Bean ID

Type

Function

shibboleth.UnverifiedRelyingParty

RelyingPartyConfiguration

Configures IdP behavior for unauthenticated/unverifiable requests

shibboleth.DefaultRelyingParty

RelyingPartyConfiguration

Configures default IdP behavior for authenticated/verified requests

shibboleth.RelyingPartyOverrides

List<RelyingPartyConfiguration>

Configures non-default IdP behavior for requests that meet activation conditions attached to overrides

RelyingParty

RelyingPartyConfiguration

A template bean for use in defining RelyingParty overrides by hand

RelyingPartyByName

RelyingPartyConfiguration

A template bean for defining RelyingParty overrides based on matching by name

RelyingPartyByGroup

RelyingPartyConfiguration

A template bean for defining RelyingParty overrides based on matching by <EntitiesDescriptor> groups or SAML metadata-based <AffiliationDescriptor> groups

RelyingPartyByEntitiesDescriptor

RelyingPartyConfiguration

A template bean for defining RelyingParty overrides based on matching by <EntitiesDescriptor> groups only

RelyingPartyByTag

RelyingPartyConfiguration

A template bean for defining RelyingParty overrides based on matching <EntityAttributes> extension content

RelyingPartyByMappedTag

RelyingPartyConfiguration

A template bean for defining RelyingParty overrides based on matching <EntityAttributes> extension content that has been mapped via the AttributeRegistryConfiguration

TagCandidate

EntityAttributesPredicate.Candidate

A template bean for defining EntityAttribute matching rules for injection into beans based on RelyingPartyByTag

Shibboleth.SSO

BrowserSSOProfileConfiguration

Default configuration for SAML 1.1 SSO profile

SAML1.AttributeQuery

AttributeQueryProfileConfiguration

Default configuration for SAML 1.1 Attribute Query profile

SAML1.ArtifactResolution

ArtifactResolutionProfileConfiguration

Default configuration for SAML 1.1 Artifact Resolution profile

SAML2.SSO

BrowserSSOProfileConfiguration

Default configuration for SAML 2.0 SSO profile

SAML2.ECP

ECPProfileConfiguration

Default configuration for SAML 2.0 Enhanced Client/Proxy profile

SAML2.Logout

SingleLogoutProfileConfiguration

Default configuration for SAML 2.0 Single Logout profile

SAML2.AttributeQuery

AttributeQueryProfileConfiguration

Default configuration for SAML 2.0 Attribute Query profile

SAML2.ArtifactResolution

ArtifactResolutionProfileConfiguration

Default configuration for SAML 2.0 Artifact Resolution profile

CAS.LoginConfiguration

LoginConfiguration

Default configuration for CAS login prototol

CAS.ProxyConfiguration

ProxyConfiguration

Default configuration for CAS proxy login protocol

CAS.ValidateConfiguration

ValidateConfiguration

Default configuration for CAS ticket validation protocol

shibboleth.DefaultArtifactConfiguration

BasicSAMLArtifactConfiguration

Default configuration for SAML Artifact usage, injected into artifact-supporting SAML profile beans

...