...
They generally assume the "normal" attribute resolution process; more specialized or deployer-triggered resolution processes (e.g., during authentication) will typically require additional customizations in order to locate the AttributeContext containing the data. As an example, using one of these predicates as an ActivationCondition guarding an AttributeDefinition or DataConnector will typically require the PreRequestedAttributes feature, and the use of the shibboleth.ChildLookup.PreRequestedAttributeContext lookup bean.
...
A subset of context functions rely first on locating a RelyingPartyContext, and then on to particular data. The default behavior of these functions is to locate a RelyingPartyContext as a direct child of the input ProfileRequestContext, which is overrideable using the relyingPartyContextLookupStrategy property of the bean to change the behavior.
...
shibboleth.MessageContextLookup.Inbound – a function that returns a ProfileRequestContext's inbound MessageContext
shibboleth.MessageContextLookup.Outbound – a function that returns a ProfileRequestContext's outbound MessageContext
shibboleth.ChildLookup.RelyingParty – RelyingPartyContext
shibboleth.ChildLookup.MultiRelyingParty – MultiRelyingPartyContext
shibboleth.ChildLookup.ProfileRequestContext – ProfileRequestContext
shibboleth.ChildLookup.AttributeContext – AttributeContext
shibboleth.ChildLookup.PreRequestedAttributeContext – AttributeContext (after PreRequestedAttributes resolution)
shibboleth.ChildLookup.AuthenticationContext – AuthenticationContext
shibboleth.ChildLookup.RequestedPrincipalContext – RequestedPrincipalContext
shibboleth.ChildLookup.MultiFactorAuthenticationContext – MultiFactorAuthenticationContext
shibboleth.ChildLookup.ExternalAuthenticationContext – ExternalAuthenticationContext
shibboleth.ChildLookup.SubjectContext – SubjectContext
shibboleth.ChildLookup.SubjectCanonicalizationContext – SubjectCanonicalizationContext
shibboleth.ChildLookup.SessionContext – SessionContext
shibboleth.ChildLookup.LogoutContext – LogoutContext
shibboleth.ChildLookup.SecurityParameters – SecurityParametersContext
shibboleth.ChildLookup.EncryptionParameters – EncryptionContext
shibboleth.ChildLookup.SAMLBindingContext – SAMLBindingContext
shibboleth.ChildLookup.SAMLProtocolContext – SAMLProtocolContext
shibboleth.ChildLookup.SAMLPeerEntityContext – SAMLPeerEntityContext
shibboleth.ChildLookup.SAMLMetadataContext – SAMLMetadataContext
shibboleth.ChildLookupOrCreate.AttributeContext - AttributeContext
shibboleth.ChildLookupOrCreate.AttributeFilterContext – AttributeFilterContext
shibboleth.ChildLookupOrCreate.RelyingPartyUIContext – RelyingPartyUIContext
shibboleth.ChildLookupOrCreate.SAMLMessageInfoContext – SAMLMessageInfoContext
shibboleth.ChildLookupOrCreate.SecurityParameters – SecurityParametersContext
...
shibboleth.Pair – a parent bean for creating objects of type net.shibboleth.shared.collection.Pair
shibboleth.CommaDelimStringArray – a utility bean for converting a comma-delimited string into an array of strings (the input is provided as a constructor argument)
shibboleth.HttpServletRequestSupplier – an automated way of injecting a request's HttpServletRequest object into another bean (via a Supplier)
shibboleth.HttpServletResponseSupplier– an automated way of injecting a request's HttpServletResponse object into another bean (via a Supplier)
shibboleth.SAML2AuthnContextClassRef – a parent bean for defining a SAML 2.0 AuthnContextClassRef custom Principal object
shibboleth.SAML2AuthnContextDeclRef – a parent bean for defining a SAML 2.0 AuthnContextDeclRef custom Principal object (these are almost never used, but are present for completeness)
shibboleth.SAML1AuthenticationMethod – a parent bean for defining a SAML 1.1 AuthenticationMethod custom Principal object
...