...
| Bean ID | Type | Default | Function |
|---|---|---|---|
| shibboleth.authn.IPAddress.Mappings | Map<String,List<IPRange>> | Empty Map | The entry values are a list of CIDR address range strings to map to the username in the entry key |
| shibboleth.authn.IPAddress.Transforms | List<Pair<String,String>> | Pairs of regular expressions and replacement expressions to apply to the username | |
| shibboleth.authn.IPAddress.resultCachingPredicate | Predicate<ProfileRequestContext> | An optional bean that can be defined to control whether to preserve the authentication result in an IdP session | |
| shibboleth.authn.IPAddress.addDefaultPrincipals3.2 | Boolean | true | Whether to add the content of the supportedPrincipals property of the underlying flow descriptor to the resulting Subject |
V2 Compatibility
The authn/IPAddress login flow is the replacement for the 2.x IPAddress login handler. Configuration of address range mappings in handler.xml need to be ported into conf/authn/ipaddress-authn-config.xml.
...