#include <saml/base.h>
Namespaces | |
namespace | xmltooling |
namespace | opensaml |
Classes | |
class | opensaml::SecurityPolicyRule |
A rule that a protocol request and message must meet in order to be valid and secure. More... | |
Defines | |
#define | AUDIENCE_POLICY_RULE "Audience" |
SecurityPolicyRule for evaluation of SAML AudienceRestriction Conditions. | |
#define | DELEGATION_POLICY_RULE "Delegation" |
SecurityPolicyRule for evaluation of SAML DelegationRestriction Conditions. | |
#define | CLIENTCERTAUTH_POLICY_RULE "ClientCertAuth" |
SecurityPolicyRule for TLS client certificate authentication. | |
#define | CONDITIONS_POLICY_RULE "Conditions" |
SecurityPolicyRule for evaluation of SAML Conditions. | |
#define | IGNORE_POLICY_RULE "Ignore" |
SecurityPolicyRule for ignoring a SAML Condition. | |
#define | MESSAGEFLOW_POLICY_RULE "MessageFlow" |
SecurityPolicyRule for replay detection and freshness checking. | |
#define | NULLSECURITY_POLICY_RULE "NullSecurity" |
SecurityPolicyRule for disabling security. | |
#define | SIMPLESIGNING_POLICY_RULE "SimpleSigning" |
SecurityPolicyRule for protocol message "blob" signing. | |
#define | XMLSIGNING_POLICY_RULE "XMLSigning" |
SecurityPolicyRule for protocol message XML signing. | |
#define | SAML1BROWSERSSO_POLICY_RULE "SAML1BrowserSSO" |
SecurityPolicyRule for SAML 1.x Browser SSO profile validation. | |
#define | BEARER_POLICY_RULE "Bearer" |
SecurityPolicyRule for SAML 2.0 bearer SubjectConfirmation. | |
Functions | |
void | opensaml::registerSecurityPolicyRules () |
Registers SecurityPolicyRule plugins into the runtime. | |
Variables | |
XMLTOOL_API | xmltooling::GenericRequest |
XMLTOOL_API | xmltooling::XMLObject |
|
SecurityPolicyRule for SAML 2.0 bearer SubjectConfirmation. Optionally enforces message delivery requirements based on SubjectConfirmationData. The XML attributes "checkValidity", "checkRecipient", and "checkCorrelation" can be set "false" to disable checks of NotBefore/NotOnOrAfter, Recipient, and InResponseTo confirmation data respectively. |
|
SecurityPolicyRule for TLS client certificate authentication. Evaluates client certificates against the issuer's metadata. |
|
SecurityPolicyRule for replay detection and freshness checking. A ReplayCache instance must be available from the runtime, unless a "checkReplay" XML attribute is set to "0" or "false" when instantiating the policy rule. Messages must have been issued in the past, but no more than 60 seconds ago, or up to a number of seconds set by an "expires" XML attribute when instantiating the policy rule. |
|
SecurityPolicyRule for disabling security. Allows the message issuer to be authenticated regardless of the message or transport. Used mainly for debugging or in situations that I wouldn't care to comment on. |
|
SecurityPolicyRule for SAML 1.x Browser SSO profile validation. Enforces presence of time conditions and proper subject confirmation. |
|
SecurityPolicyRule for protocol message "blob" signing. Allows the message issuer to be authenticated using a non-XML digital signature over the message body. The transport layer is not considered. |
|
SecurityPolicyRule for protocol message XML signing. Allows the message issuer to be authenticated using an XML digital signature over the message. The transport layer is not considered. |