Uses of Annotation Interface
org.forgerock.openam.annotations.SupportedAll
Package
Description
Provides utility classes for use by other OpenAM SDK and custom
applications accessing OpenAM SDK.
XML parsing utility.
This package contains classes and interfaces that represent
methods to validate/update/destroy/persist/retrieve the internal session data
Exception classes for audit logging.
This package contains classes fro accessing the Single Sign On service and
representing a SSOToken(Single Sign On) which contains the information
related to session.
Provides interfaces and classes for writing a Remote Java client application
to authenticate to OpenAM.
Implementation of the Authentication Framework HOTP module and associated classes.
Provides interfaces and classes for writing a supplemental authentication
module to plug into OpenAM.
Defines classes and interfaces to work with entitlements.
Defines Federation Common Utils.
Provides classes for accessing the Identity Repository interfaces.
Defines classes to handle JAX-RPC.
Reverse SOAP Binding classes.
Provides interface to manage liberty security
Provides classes to manage Liberty SOAP Binding.
Provides the classes and interfaces of core logging and auditing facilities.
Provides means for plugging in support for authorization and other security
related aspects of logging.
Contains configuration SPI.
Contains data store plugin SPIs.
Contains Log SPI.
Contains session SPI.
Provides classes for policy administration and evaluation.
Deprecated interfaces for writing custom Policy plugins for Conditions,
Subjects, Referrals, ResponseProviders and Resources.
Classes to handle policies remotely.
Defines SAML assertion.
Defines common SAML 1.x utilities and constants.
Defines KeyProvider interface and default implementation class.
Defines SAMLv2 assertion.
Defines common SAMLv2 utilities and constants.
Defines classes for SAMLv2 ECP profile.
Defines SAMLv2 Plugin SPIs.
Wrappers for SAML Script bindings
SAMLv2 Protocol Classes.
Provides the classes to be used for performing privileged operations (like
getting the OpenAM administrator's DN and password).
Defines legacy debug logging classes.
Defines classes to handle JAX-RPC.
Defines classes to handle localization.
Defines classes to interact with statistics.
Defines classes for basic resource matching.
Provides classes for accessing the Service Management Service (SMS).
Validator classes for SMS.
Defines common WS-Federation utilities and constants.
Defines WS-Federation Plugin SPIs
Defines classes to handle XACML requests.
Defines common XACML Utilities and Constants
Defines XACML2 context classes
Defines XACML Context implementations.
Defines XACML Policy classes.
Defines XACML Policy implementations.
Defines XACML interfaces for SAMLv2
Defines XACML implementations for SAMLv2.
Defines the core classes to implement OAuth2 for OpenAM.
This package contains the exception classes that may be thrown by AM OAuth2 classes.
This package contains the API for writing OAuth2 plugins.
Contains annotations used by AM.
Annotations for defining SMS service configurations.
This package contains the API for writing authentication nodes.
This package contains the mapping interfaces and default implementations that are common for use by all
authentication modules.
Classes in this package provide plugin functionality for the oath module.
Provides classes for the OAuth 2.0 authentication module.
A collection of classes which support the authentication service.
Defines classes to handle entitlements.
Federation plugin root url classes.
This package contains utilities for HTTP connections.
Classes that provide AM's features as an OAuth 2.0 Authorization Server.
Defines the classes and supported interface that customers need to create their own
ResourceRegistrationFilter
.This package contains the API for writing AM plugins.
This package contains classes for the handling of REST request to CREST Resource endpoints with the concept of realms
in OpenAM built in.
The classes under this package do not support Localisation.
A package containing a set of script-friendly classes and functionality that are intended to simplify
use of the Secrets API from within a scripting context.
Contains classes for handling self service console configuration.
Contains self service configuration beans.
Service interface for sending email messages and default implementation.
Defines classes for the Push Notification service and framework.
Classes pertaining to the predicates used by the Push Service's Message Dispatcher.
Defines interfaces and classes for the Session Service.
This package contains url resource name utilities for use throughout the OpenAM codebase.
This package contains exception types for service management error scenarios.
Type adapters for converting a type to and from a set of strings, which is the underlying SMS
representation for configuration.
Base package for classes shared between the SOAP and REST STS.
Contains the classes which encapsulate the user-provided configuration state necessary to publish a STS instance.
Contains classes and interface definitions common to all token provider classes.
Classes related to producing OpenIdConnect tokens
Token validation occurs in three contexts in the sts:
1.
Contains the classes related to token operations.
This package contains classes defining OpenId Connect Token generation and claim mapping.
This package contains classes defining the interfaces consumed to obtain the various statements contituting SAML2
assertions.
This package contains classes related to creating the json payloads corresponding to REST-STS and TokenGenerationService
invocations.
Classes that support AM's UMA AS functionality.
Extension points for integrating with UMA functionality.
Defines interfaces and classes to perform OpenAM system upgrade.
This package contains general utilities for use throughout the OpenAM codebase.
Classes required for the AM OAuth2 OIDC implementation.
Package
Description
A collection of Guava interfaces that were previously packaged as "forgerock-guava".
Contains data store plugin SPIs.
Reverse SOAP Binding classes.
Classes to model realms within AM.
Federation plugin root url classes.
Provides interface to manage liberty security
Provides classes to manage Liberty SOAP Binding.
-
Uses of SupportedAll in com.iplanet.am.util
Modifier and TypeClassDescriptionclass
This class contains methods to retrieve Top Level Administrator information.class
This class which contains utilities to encrypt and decrypt attribute value of password type.class
This class provides functionality that allows single-point-of-access to all related system properties.class
This thread pool maintains a number of threads that run the tasks from a task queue one by one. -
Uses of SupportedAll in com.iplanet.dpro.parser
Modifier and TypeClassDescriptionclass
XMLParser provides a way for applications to handle a hook into applications and applications and its server. -
Uses of SupportedAll in com.iplanet.dpro.session.service
Modifier and TypeInterfaceDescriptioninterface
Interface to define the resulting behavior when the session quota is exhausted. -
Uses of SupportedAll in com.iplanet.log
Modifier and TypeClassDescriptionclass
Deprecated.class
Deprecated.class
Deprecated.class
Deprecated. -
Uses of SupportedAll in com.iplanet.sso
Modifier and TypeClassDescriptionclass
ThisSSOException
is thrown when there are single sign on token operation error.interface
TheSSOToken
class represents a "single sign on"(SSO) token.interface
TheSSOTokenEvent
is an interface that represents an SSO token event.The single sign on token event represents a change inSSOToken
.interface
TheSSOTokenID
is an interface that is used to identify a single sign on token object.interface
TheSSOTokenListener
interface needs to be implemented by the applications to receive SSO token events.class
ThisSSOTokenCannotBeObservedException
is thrown when callingSSOToken.addSSOTokenListener(SSOTokenListener)
on anSSOToken
type that does not generate lifecycle events. -
Uses of SupportedAll in com.sun.identity.authentication
Modifier and TypeClassDescriptionstatic class
The classIndexType
defines the possible kinds of "objects" or "resources" for which an authentication can be performed.static class
The classStatus
defines the possible authentication states during the login process. -
Uses of SupportedAll in com.sun.identity.authentication.modules.hotp
Modifier and TypeInterfaceDescriptioninterface
Defines the ability to send SMS (Short Message Service) and e-mail via a gateway implementation. -
Uses of SupportedAll in com.sun.identity.authentication.spi
Modifier and TypeInterfaceDescriptioninterface
TheAMAuthCallBack
interface should be implemented by external business logic code, in order to receive callbacks from the authentication framework when one of the following events happens : account lockout password change (via LDAP module)class
TheAMAuthCallBackException
is used to specify an exception related to an authentication framework callback.interface
TheAMPostAuthProcessInterface
interface needs to be implemented by services and applications to do post authentication processing.class
AuthenticationException
class is for handling Exception that is thrown when the user-entered tokens cause the authentication module to be authenticated to fail.class
HttpCallback
class implementsCallback
and is used by the authentication module with HTTP protocol based handshaking negotiation.class
Exception that is thrown when the user-entered password token causes the authentication module to be authenticated to fail.class
PagePropertiesCallback
class implementsCallback
and used for exchanging all UI related attributes information such as template name,errorState
to indicate whether a template is an error page, page header, image name , page timeout value, name of module.interface
An application implements aUserIDGenerator
interface and registers itself to the Core Authentication service so that authentication modules can retrieve a list of auto-generated user IDs.class
This class is for handling Exception that is thrown when the user name password validation plugin is failed or any invalid characters detected in user name. -
Uses of SupportedAll in com.sun.identity.entitlement
Modifier and TypeClassDescriptionclass
Class to representEntitlementCondition
evaluation match result and - if applicable - its advice.interface
Encapsulates a Strategy to decide if aPrivilege
applies to a given request.class
Entitlement related exception.interface
Encapsulates a Strategy to decide if aPrivilege
applies to a givenSubject
.interface
Encapsulates a Strategy to derive attributes to be returned with a particularEntitlement
when evaluatingPrivilege
s.class
Class to representEntitlementSubject
evaluation match result and - if applicable - its advices. -
Uses of SupportedAll in com.sun.identity.federation.common
-
Uses of SupportedAll in com.sun.identity.idm
Modifier and TypeInterfaceDescriptioninterface
interface
Represents the event listener interface that consumers of this API should implement and register with theIdentityStore
to receive notifications.class
The classIdOperation
defines the types of operations supported on managed identities, and provides static constants for these operation.class
This interface defines the methods which need to be implemented by plugins.class
An exception type thrown when anIdRepo
is asked to create an object with a name that is already used.class
The exception class whose instance is thrown if there is any error during the operation of objects of thecom.sun.identity.sms
package.interface
IdRepoFactory<T extends IdRepo>
Factory interface for creating instances ofIdRepo
.class
The exception class whose instance is thrown if there is any error during the operation of objects of thecom.sun.identity.sms
package.final class
Provides methods that can be called by IdRepo plugins to notify change events.class
The exception class whose instance is thrown if there is any error during the operation of objects of thecom.sun.identity.sms
package.final class
This is a helper class which is used in theIdentityStore
search method.final class
This is a helper class which can be in conjunction with theIdSearchControl
class to make simple modifications to the basic search performed by each plugin.class
This classIdSearchResults
provides to obtain the search results.class
The classIdType
defines the types of supported identities, and provides static constants for these identities.class
The exception class whose instance is thrown if there is any error related with password issue. -
Uses of SupportedAll in com.sun.identity.jaxrpc
Modifier and TypeClassDescriptionclass
AnSOAPClientException
is thrown when there are errors related to JAXRPC and SOAP methods. -
Uses of SupportedAll in com.sun.identity.liberty.ws.paos
Modifier and TypeInterfaceDescriptioninterface
This interface defines constants common to all PAOS elements.class
ThePAOSException
class represents a error while processing SOAP request and response.class
ThePAOSHeader
class is used by a web application on HTTP server side to parse aPAOS
header in an HTTP request from the user agent side.class
ThePAOSRequest
class is used by a web application on HTTP server side to construct aPAOS
request message and send it via an HTTP response to the user agent side. -
Uses of SupportedAll in com.sun.identity.liberty.ws.security
Modifier and TypeClassDescriptionclass
TheSecurityAssertion
class provides an extension toAssertion
class to supportID-WSF
ResourceAccessStatement
andSessionContextStatement
. -
Uses of SupportedAll in com.sun.identity.liberty.ws.soapbinding
Modifier and TypeClassDescriptionclass
TheConsentHeader
class representsConsent
element defined in SOAP binding schema.class
TheCorrelationHeader
class representsCorrelation
element defined in SOAP binding schema.class
TheMessage
class is used by web service client and server to construct request or response.class
TheSOAPBindingException
class represents a error while processing SOAP request and response.class
TheSOAPFault
class represents a SOAP Fault element.class
TheSOAPFaultDetail
class represents the 'Detail' child element of SOAP Fault element.class
TheSOAPFaultException
class represents a SOAP Fault while processing SOAP request.class
TheUsageDirectiveHeader
class represents 'UsageDirective' element defined in SOAP binding schema. -
Uses of SupportedAll in com.sun.identity.log
Modifier and TypeClassDescriptionclass
Deprecated.class
Deprecated.class
Deprecated.class
Deprecated.class
Deprecated. -
Uses of SupportedAll in com.sun.identity.log.spi
Modifier and TypeClassDescriptionclass
Deprecated.interface
Deprecated.interface
Deprecated. -
Uses of SupportedAll in com.sun.identity.plugin.configuration
Modifier and TypeInterfaceDescriptioninterface
TheConfigurationActionEvent
class represents Configuration event.class
AnConfigurationException
is thrown when there are errors related to service configuration operations.interface
ConfigurationInstance
is the interface that provides the operations on service configuration.interface
The interfaceConfigurationListener
needs to be implemented by applications in order to receive component data change notifications. -
Uses of SupportedAll in com.sun.identity.plugin.datastore
Modifier and TypeInterfaceDescriptioninterface
Interface used for storing & retrieving information.class
This class is to handle DataStoreProvider related exceptions.final class
This is a singleton class used to manage DataStore providers. -
Uses of SupportedAll in com.sun.identity.plugin.log
-
Uses of SupportedAll in com.sun.identity.plugin.session
Modifier and TypeClassDescriptionclass
This class is to handle Session related exceptions.interface
Interface used for session invalidation notification.interface
Interface used for creating sessions, and for accessing session information. -
Uses of SupportedAll in com.sun.identity.policy
Modifier and TypeClassDescriptionclass
Deprecated.class
Deprecated.As of OpenSSO Express 8.0, usecom.sun.identity.entitlement
instead asEntitlement
has replacedPolicy
.class
Exception thrown if a name of an object such as policy, rule or referral has invalid formatclass
Exception thrown if a name of an object such as policy, rule or referral is invalidclass
Exception thrown if any configured limit is exceededclass
Exception thrown if a name of an object such as policy, rule or referral already exists (used by another object of the same type)class
Exception thrown if an object such as policy, rule or referral for the given name does not exist.class
Exception thrown if a policy operation attempted could not be done due to insufficient permissionsclass
Exception thrown to indicate that an object you are trying to remove is in use and therefore can not be removed.class
Deprecated.As of OpenSSO Express 8.0, usecom.sun.identity.entitlement
instead asEntitlement
has replacedPolicy
.class
The classPolicyException
is the basic exception for the the policy component.class
Deprecated.As of OpenSSO Express 8.0, usecom.sun.identity.entitlement
instead asEntitlement
has replacedPolicy
.class
Deprecated.class
Deprecated.class
Deprecated.As of OpenSSO Express 8.0, usecom.sun.identity.entitlement
instead asEntitlement
has replacedPolicy
.class
Deprecated.As of OpenSSO Express 8.0, useResourceMatch
instead asEntitlement
has replacedPolicy
.class
Deprecated.As of OpenSSO Express 8.0, usecom.sun.identity.entitlement
instead asEntitlement
has replacedPolicy
.class
Deprecated.final class
Deprecated.As of OpenSSO Express 8.0, usecom.sun.identity.entitlement
instead asEntitlement
has replacedPolicy
.class
Deprecated.As of OpenSSO Express 8.0, usecom.sun.identity.entitlement
instead asEntitlement
has replacedPolicy
. -
Uses of SupportedAll in com.sun.identity.policy.interfaces
Modifier and TypeInterfaceDescriptioninterface
Deprecated.interface
Deprecated.interface
Deprecated.interface
Deprecated.interface
Deprecated.interface
Deprecated. -
Uses of SupportedAll in com.sun.identity.policy.remote
Modifier and TypeClassDescriptionclass
The classPolicyEvaluationException
is the exception for the error happening in policy request XML parsing and policy request evaluation. -
Uses of SupportedAll in com.sun.identity.saml.assertion
Modifier and TypeClassDescriptionclass
This class is designed forAction
element in SAML core assertion.class
TheAdvice
element contains additional information that the issuer wish to provide.class
TheAdvice
element contains additional information that the issuer wish to provide.class
This object stands forAssertion
element.class
This object stands forAssertion
element.An Assertion is a package of information that supplies one or moreStatement
made by an issuer.class
AssertionIDReference
element makes reference to a SAML assertion.class
TheAttribute
element specifies an attribute of the assertion subject.class
TheAttributeDesignator
element identifies an attribute name within an attribute namespace.class
TheAttributeStatement
element supplies a statement by the issuer that the specified subject is associated with the specified attributes.class
This is an implementation of the abstractCondition
class, which specifes that the assertion this AuthenticationCondition is part of, is addressed to one or more specific audience.class
TheAuthenticationStatement
element supplies a statement by the issuer that its subject was authenticated by a particular means at a particular time.class
TheAuthorityBinding
element may be used to indicate to a replying party receiving anAuthenticationStatement
that a SAML authority may be available to provide additional information about the subject of the statement.class
TheAuthorizationDecisionStatement
element supplies a statement by the issuer that the request for access by the specified subject to the specified resource has resulted in the specified decision on the basis of some optionally specified evidence.class
TheAuthorizationDecisionStatement
element supplies a statement by the issuer that the request for access by the specified subject to the specified resource has resulted in the specified decision on the basis of some optionally specified evidence.class
This is an abstract class which servers as an extension point for new conditions.class
ThisConditions
is a set ofCondition
.class
This is an implementation of the abstractCondition
class, which specifes that the assertion thisDoNotCacheCondition
is part of, is the new element in SAML 1.1, that allows an assertion party to express that an assertion should not be cached by the relying party for future use.class
TheEvidence
element specifies an assertion either by reference or by value.class
TheEvidence
element specifies an assertion either by reference or by value.class
The NameIdentifier element specifies aSubject
by a combination of a name and a security domain governing the name of theSubject
.class
TheStatement
element is an extension point that allows other assertion-based applications to reuse the SAML assertion framework.class
TheSubject
element specifies one or more subjects.class
TheSubjectConfirmation
element specifies a subject by specifying data that authenticates the subject.class
TheSubjectLocality
element specifies the DNS domain name and IP address for the system entity that performed the authentication.class
TheSubjectStatement
element is an extension point that allows other assertion-based applications to reuse the SAML assertion framework. -
Uses of SupportedAll in com.sun.identity.saml.common
Modifier and TypeClassDescriptionclass
This class is an extension point for all SAML related exceptions.class
This exception is thrown when the request could not be performed due to an error in the sender or in the request.class
This exception is thrown when the request could not be performed due to an error at the receiving end.class
This exception is thrown when the receiver could not process the request because the version was incorrect. -
Uses of SupportedAll in com.sun.identity.saml.xmlsig
Modifier and TypeInterfaceDescriptioninterface
The classKeyProvider
is an interface that is implemented to retrieve X509Certificates and Private Keys from user data store.interface
The classPasswordDecoder
is an interface that is implemented to decode password. -
Uses of SupportedAll in com.sun.identity.saml2.assertion
Modifier and TypeInterfaceDescriptioninterface
TheAction
element specifies an action on the specified resource for which permission is sought.interface
TheAdvice
contains any additional information that the SAML authority wishes to provide.interface
TheAssertion
element is a package of information that supplies one or moreStatement
made by an issuer.class
This is the factory class to obtain instances of the objects defined in assertion schema.interface
This class represents the AssertionIDRef element.interface
TheAttribute
element identifies an attribute by name and optionally includes its value(s).interface
TheAttributeStatement
element describes a statement by the SAML authority asserting that the assertion subject is associated with the specified attributes.interface
TheAudienceRestriction
specifies that the assertion is addressed to one or more specificAudience
s.interface
TheAuthnContext
element specifies the context of an authentication event.interface
TheAuthnStatement
element describes a statement by the SAML authority asserting that the assertion subject was authenticated by a particular means at a particular time.interface
TheAuthzDecisionStatement
element describes a statement by the SAML authority asserting that a request for access by the assertion subject tot he specified resource has resulted in the specified authorization decision on the basis of some optionally specified evidence.interface
TheBaseID
is an extension point that allows applications to add new kinds of identifiers.interface
TheBaseIDAbstract
is an abstract type usable only as the base of a derived type.interface
TheCondition
serves as an extension point for new conditions.interface
TheConditionAbstract
is abstract and is thus usable as the base of a derived classinterface
TheConditions
defines the SAML constructs that place constraints on the acceptable use if SAMLAssertion
s.interface
TheEncryptedAssertion
represents an assertion in encrypted fashion, as defined by the XML Encryption Syntax and Processing specification [XMLEnc].interface
TheEncryptedAttribute
element represents a SAML attribute in encrypted fashion.interface
TheEncryptedElement
carries the content of an unencrypted identifier in encrypted fasion.interface
TheEncryptedID
carries the content of an unencrypted identifier in encrypted fashion.interface
TheEvidence
element contains one or more assertions or assertion references that the SAML authority relied on in issuing the authorization decision.interface
TheIssuer
provides information about the issuer of a SAML assertion or protocol message.interface
TheKeyInfoConfirmationData
constrains aSubjectConfirmationData
element to contain one or moreds:KeyInfo
elements that identify cryptographic keys that are used in some way to authenticate an attesting entity.interface
TheNameID
is used in various SAML assertion constructs such asSubject
andSubjectConfirmation
elements, and in various protocol messages.interface
TheNameIDType
is used when an element serves to represent an entity by a string-valued name.interface
TheOneTimeUse
indicates that the assertion should be used immediately by the relying party and must not be retained for future use.interface
TheProxyRestriction
specifies limitations that the asserting party imposes on relying parties that in turn wish to act as asserting parties and issue subsequent assertions of their own on the basis of the information contained in the original assertion.interface
TheStatement
element is an extension point that allows other assertion-based applications to reuse the SAML assertion framework.interface
TheSubject
specifies the principal that is the subject of all of the statements in the assertion.interface
TheSubjectConfirmation
provides the means for a relying party to verify the correspondence of the subject of the assertion with the party with whom the relying party is communicating.interface
TheSubjectConfirmationData
specifies additional data that allows the subject to be confirmed or constrains the circumstances under which the act of subject confirmation can take place.interface
TheSubjectLocality
element specifies the DNS domain name and IP address for the system entity that performed the authentication. -
Uses of SupportedAll in com.sun.identity.saml2.common
Modifier and TypeInterfaceDescriptioninterface
This interface defines constants common to all SAMLv2 elements.class
This class is an extension point for all SAML related exceptions.class
TheSAML2SDKUtils
contains utility methods for SAML 2.0 implementation.interface
Common super-interface for all SAML elements that can be serialized into XML. -
Uses of SupportedAll in com.sun.identity.saml2.ecp
Modifier and TypeClassDescriptionclass
This is the factory class to obtain object instances for concrete elements in the ecp schema.interface
TheECPRelayState
interface defines methods for properties required by an ECP RelayState.interface
TheECPRequest
interface defines methods for properties required by an ECP request.interface
TheECPResponse
interface defines methods for properties required by an ECP response. -
Uses of SupportedAll in com.sun.identity.saml2.plugins
Modifier and TypeInterfaceDescriptioninterface
This interfaceAssertonIDRequestMapper
is used by assertion ID request service to process assertion ID request.interface
This interfaceAttributeAuthorityMapper
is used by attribute authority to process attribute query.class
Deprecated, for removal: This API element is subject to removal in a future version.since AM 7.3.0 Implement use-case specificFedletAdapter
implementations instead.interface
The interfaceIDPAccountMapper
is used to map the local identities to theSAML
protocol objects and also the vice versa for some of the protocols for e.g.interface
This interfaceIDPAttributeMapper
is used to map the authenticated user configured attributes to SAMLAttribute
s so that the SAML framework may insert these attribute information as SAMLAttributeStatement
s in SAMLAssertion
.class
The classIDPAuthnContextInfo
consists of the mapping betweenAuthnContextClassRef
and the actual authentication mechanism at the Identity Provider.interface
The interfaceIDPAuthnContextMapper
creates anIDPAuthnContextInfo
based on the RequestAuthnContext from the AuthnRequest sent by a Service Provider and the AuthnContext configuration at the IDP entity config.interface
This interfaceIDPECPSessionMapper
is used to find a valid session from HTTP servlet request on IDP with ECP profile.interface
Deprecated, for removal: This API element is subject to removal in a future version.since AM 7.3.0 Implement use-case specificIDPAdapter
implementations instead.interface
Deprecated, for removal: This API element is subject to removal in a future version.since AM 7.3.0 Implement use-case specificIDPFinder
implementations instead.class
Deprecated, for removal: This API element is subject to removal in a future version.since AM 7.3.0 Implement use-case specificSPAdapter
implementations instead.interface
The interfaceSPAccountMapper
is used to identify the local identities that maps theSAML
protocol objects such asAssertion
,ManageNameIDRequest
etc.interface
This interfaceSPAttributeMapper
is used to map the SAMLAttribute
s to the local user attributes.interface
The interfaceSPAuthnContextMapper.java
determines the Authentication Context to be set in the Authentication Request and the Auth Level of an Authentication Context. -
Uses of SupportedAll in com.sun.identity.saml2.plugins.scripted.wrappers
Modifier and TypeClassDescriptionclass
This class wraps around anEntitlementInfo
object for consumption in scripts. -
Uses of SupportedAll in com.sun.identity.saml2.protocol
Modifier and TypeInterfaceDescriptioninterface
This class represents theArtifact
element in SAMLv2 protocol schema.interface
TheArtifactResolve
message is used to request that a SAML protocol message be returned in anArtifactResponse
message by specifying an artifact that represents the SAML protocol message.interface
TheArtifactResopnse
message has the complex typeArtifactResponseType
.interface
This class represents the AssertionIDRequestType complex type.interface
This class represents the AttributeQueryType complex type.interface
This class represents the AuthnQueryType complex type.interface
TheAuthnRequest
interface defines methods for properties required by an authentication request.interface
The interfaceExtensions
defines methods for adding protcol message extension elements.interface
This interface contains methods for theGetComplete
Element in the SAMLv2 Protocol Schema.interface
This interface defines methods to set/retrieve single identity provider information trusted by the request issuer to authenticate the presenter.interface
This interface specifies the identity providers trusted by the requester to authenticate the presenter.interface
This class represents theLogoutRequest
element in SAML protocol schema.interface
This class represents theLogoutResponse
element in SAML protocol schema.interface
This class represents the ManageNameIDRequestType complex type.interface
This class represents the ManageNameIDResponse element declaration.interface
This class represents the ManageNameIDRequestType complex type.interface
This class represents the NameIDMappingResponseType complex type.interface
This interface defines methods to retrieve name identifier related properties.interface
Java content class for NewEncryptedID element declaration.interface
This interface identifies the new identifier in anManageNameIDRequest
message.class
This is the factory class to obtain object instances for concrete elements in the protocol schema.interface
This interface defines methods for setting and retrieving attributes and elements associated with a SAML request message used in SAML protocols.interface
Java content class for RequestedAuthnContext element declaration.interface
This interface identifies the requester in anAuthnRequest
message.interface
TheResponse
message element is used when a response consists of a list of zero or more assertions that satisfy the request.interface
This interface defines methods to retrieve Identity Providers and context/limitations related to proxying of the request message.interface
This class represents theSessionIndex
element in SAML protocol schema.interface
This class represents theStatusType
complex type in SAML protocol schema.interface
This class represents theStatusCodeType
complex type in SAML protocol schema.interface
This class represents theStatusDetailType
complex type in SAML protocol schema.interface
This class represents theStatusMessage
element in SAML protocol schema.interface
This class represents theStatusResponseType
complex type in SAML protocol schema.interface
This class represents the SubjectQueryAbstractType complex type. -
Uses of SupportedAll in com.sun.identity.security
Modifier and TypeClassDescriptionclass
The class is used to perform privileged operations usingjava.security.AccessController.doPrivileged()
when usingcom.iplanet.am.util.AdminUtils
to obtain Administrator DN.class
The class is used to perform privileged operations usingAccessController.doPrivileged()
when usingcom.iplanet.am.util.AdminUtils
to obtain Administrator passwords.class
Provides a centralised method for fetching an administrator token for operations where there is no user present.interface
This interface defines method to get application single sign on token.class
This classDataEncryptor
is used to encrypt the data with symmetric and asymmetric keys.class
The class is used to perform privileged operations withAccessController.doPrivileged()
when usingcom.iplanet.services.util.Crypt
to decode passwords.class
The class is used to perform privileged operation withAccessController.doPrivileged()
when usingcom.iplanet.am.util.AMPasswordUtil
to decrypt passwords.class
The class is used to perform privileged operation withAccessController.doPrivileged()
when usingcom.iplanet.services.util.Crypt
to encode passwords.class
The class is used to perform privileged operation withAccessController.doPrivileged()
when usingcom.iplanet.am.util.AMPasswordUtil
to encrypt passwords.class
This classISSecurityPermission
is used to protect the Access Manager resources which should be accessed only by trusted application. -
Uses of SupportedAll in com.sun.identity.sm
Modifier and TypeClassDescriptionclass
The classAttributeSchema
provides methods to access the schema of a configuration parameter.class
The abstract classChoiceValues
provides a mechanism for services to provide choice values for attributes dynamically instead of being statically defined in the service XML file stored in the directory.class
The abstract classDefaultValues
provides a mechanism for services to obtain their default values dynamically instead of being statically defined in the service XML file stored in the directory.class
TheInvalidAttributeNameException
is thrown to indicate that an invalid attribute name was used.class
class
TheOrganizationAlreadyExistsException
is thrown if the organization already exists.class
The classOrganizationConfigManager
provides interfaces to manage an organization's configuration data.class
TheSchemaException
is thrown if the error encountered is related to the schema.class
The classSchemaType
defines the types of schema objects, and provides static constants for these schema objects.class
TheServiceAlreadyExistsException
is thrown if the service already exists.interface
The interfaceServiceAttributeValidator
should be implemented by the services/applications if validator plugins are required.class
The classServiceConfig
provides interfaces to manage the configuration information of a service configuration.class
The classServiceInstance
provides methods to manage service's instance variables.interface
The interfaceServiceListener
needs to be implemented by applications in order to receive service data change notifications.class
TheServiceNotFoundException
is thrown if the service does not exist.class
The classServiceSchema
provides interfaces to manage the schema information of a service.class
The exception class whose instance is thrown if there is any error during the operation of objects of thecom.sun.identity.sms
package. -
Uses of SupportedAll in com.sun.identity.sm.validators
Modifier and TypeClassDescriptionclass
class
class
Validates domainclass
class
Validates mail address This class is constructed using default(noarguments) constructor and mail address is passed to validate function with optional rules The passed mail address is validated for authenticity and boolean value is returned accordingly.class
class
-
Uses of SupportedAll in com.sun.identity.wsfederation.common
Modifier and TypeClassDescriptionclass
This class is an extension point for all WS-Federation related exceptions. -
Uses of SupportedAll in com.sun.identity.wsfederation.plugins
Modifier and TypeInterfaceDescriptioninterface
The interfaceIDPAccountMapper
is used to map the local identities to theSAML
protocol objects and also the vice versa for some of the protocols for e.g.interface
This interfaceIDPAttributeMapper
is used to map the authenticated user configured attributes to SAMLAttribute
s so that the SAML framework may insert these attribute information as SAMLAttributeStatement
s in SAMLAssertion
.interface
The interfaceIDPAuthenticationMethodMapper
creates anIDPAuthenticationTypeInfo
based on the RequestAuthnContext from the AuthnRequest sent by a Service Provider and the AuthnContext configuration at the IDP entity config.class
The classIDPAuthenticationTypeInfo
consists of the mapping betweenAuthenticationType
and the actual authentication mechanism at the Identity Provider.interface
The classPartnerAccountMapper
is an interface that is implemented to map partner account to user account in OpenAM.interface
This interfaceSPAttributeMapper
is used to map the SAMLAttribute
s to the local user attributes. -
Uses of SupportedAll in com.sun.identity.xacml.client
Modifier and TypeClassDescriptionclass
This class provides the public API to process XACML context Request. -
Uses of SupportedAll in com.sun.identity.xacml.common
Modifier and TypeClassDescriptionclass
This interface defines constants common to all XACML elements.class
This class is an extension point for all XACML related exceptions.class
TheXACMLSDKUtils
contains utility methods for XACML 2.0 implementation. -
Uses of SupportedAll in com.sun.identity.xacml.context
Modifier and TypeInterfaceDescriptioninterface
TheAction
element specifies information about the action requested in theRequest
context by listing a sequence ofAttribute
elements associated with the action.interface
TheAttribute
element specifies information about the action/subject/resource requested in theRequest
context by listing a sequence ofAttribute
elements associated with the action.class
This is the factory class to obtain instances of the objects defined in xacml context schema.interface
TheDecision
element is a container of one or moreDecision
s issued by policy decision pointinterface
TheEnvironment
element contains information about the enviroment of theRequest
context by listing a sequence ofAttribute
elements associated with the environment.interface
TheStatusCode
element is a container of one or moreStatus
s issuded by authorization authority.interface
TheRequest
element is the top-level element in the XACML context scehema.interface
TheResource
element specifies information about the resource to which access is requested by listing a sequence ofAttribute
elements associated with the resource.interface
TheResourceContent
element specifies information about the resource to which access is requested by listing a sequence ofAttribute
elements associated with the resource.interface
TheResponse
element is a container of one or moreResult
s issued by policy decision pointinterface
TheResult
element is a container of one or moreResult
s issuded by authorization authority.interface
TheStatus
element is a container of one or moreStatus
s issuded by authorization authority.interface
TheStatusCode
element is a container of one or moreStatusCode
s issuded by authorization authority.interface
TheStatusCode
element is a container of one or moreStatus
s issuded by authorization authority.interface
TheStatusMessage
element is a container of one or moreStatusMessage
s issuded by authorization authority.interface
TheSubject
element specifies information about a subject of theRequest
context by listing a sequence ofAttribute
elements associated with the subject. -
Uses of SupportedAll in com.sun.identity.xacml.context.impl
Modifier and TypeClassDescriptionclass
TheAction
element specifies information about the action requested in theRequest
context by listing a sequence ofAttribute
elements associated with the action.class
TheAttribute
element specifies information about the action/subject/resource requested in theRequest
context by listing a sequence ofAttribute
elements associated with the action.class
TheDecision
element is a container of one or moreDecision
s issued by policy decision pointclass
TheEnvironment
element specifies information about the environment requested in theRequest
context by listing a sequence ofAttribute
elements associated with the environment.class
TheRequest
element is the top-level element in the XACML context schema.class
TheResource
element specifies information about the resource to which access is requested by listing a sequence ofAttribute
elements associated with the resource.class
TheStatusCode
element is a container of one or moreStatusCode
s issuded by authorization authority.class
TheStatusCode
element is a container of one or moreStatus
s issuded by authorization authority.class
TheStatus
element is a container of one or moreStatus
s issuded by authorization authority.class
TheStatusMessage
element is a container of one or moreStatusMessage
s issuded by authorization authority.class
TheSubject
element specifies information about a subject of theRequest
context by listing a sequence ofAttribute
elements associated with the subject. -
Uses of SupportedAll in com.sun.identity.xacml.policy
Modifier and TypeInterfaceDescriptioninterface
TheObligation
element is a container of one or moreAttributeAssignment
s issuded by authorization authority.interface
TheObligations
element is a container of one or moreObligation
s issuded by authorization authority.class
This is the factory class to obtain instances of the objects defined in xacml context schema. -
Uses of SupportedAll in com.sun.identity.xacml.policy.impl
Modifier and TypeClassDescriptionclass
TheObligation
element is a container of one or moreAttributeAssignment
s issuded by authorization authority.class
TheObligations
element is a container of one or moreObligation
s issuded by authorization authority. -
Uses of SupportedAll in com.sun.identity.xacml.saml2
Modifier and TypeInterfaceDescriptioninterface
TheXACMLAuthzDecisionQuery
element is a SAML Query that extends SAML Protocol schema typeRequestAbstractType
.interface
XACMLAuthzDecisionStatement
is an extension ofsamlp:StatementAbstractType
that is carried in a SAML Assertion to conveyxacml-context:Response
Schema: -
Uses of SupportedAll in com.sun.identity.xacml.saml2.impl
Modifier and TypeClassDescriptionclass
TheXACMLAuthzDecisionQueryImpl
is an impelmentation ofXACMLAuthzDecisionQuery
interface. -
Uses of SupportedAll in org.forgerock.oauth2.core
Modifier and TypeInterfaceDescriptioninterface
Models an OAuth2 access token.interface
An OAuth 2.0 token abstraction for introspection.interface
Handles the issuing of Tokens for a response type, i.e.interface
Deprecated.since 7.2.0interface
Models a OAuth2 token.class
A trusted JWT issuer for use in validating a JWT bearer grant.class
Simple bean that contains the values of claims, and the scopes that provisioned them (if any). -
Uses of SupportedAll in org.forgerock.oauth2.core.exceptions
Modifier and TypeClassDescriptionclass
Thrown when the request is missing any required parameters or is otherwise malformed. -
Uses of SupportedAll in org.forgerock.oauth2.core.plugins
Modifier and TypeInterfaceDescriptioninterface
Generator for OAuth2 User Codes. -
Uses of SupportedAll in org.forgerock.openam.annotations
Modifier and TypeClassDescription@interface
This annotation marks AM APIs that are continuing to evolve and so should be expected to change, potentially in backwards-incompatible ways even in a minor release.@interface
This annotation marks AM APIs that are continuing to evolve and so should be expected to change, potentially in backwards-incompatible ways even in a minor release.@interface
This annotation marks AM APIs that are considered stable and should not change in minor releases (except possibly when a security fix requires such change).@interface
This annotation marks AM APIs that are considered stable and should not change in minor releases (except possibly when a security fix requires such change). -
Uses of SupportedAll in org.forgerock.openam.annotations.sm
Modifier and TypeClassDescription@interface
Indicates that a method describes a configuration attribute of an SMS service.@interface
Indicates that an interface describes the configuration of an SMS service.@interface
Annotate the choice value enum constant for anAttribute
with a i18nKey value property.@interface
Indicates that a method returns the identifier of a configuration set of a multiple-configuration SMS service.@interface
Indicates that an interface describes the configuration of an Identity Repository. -
Uses of SupportedAll in org.forgerock.openam.auth.node.api
Modifier and TypeClassDescriptionclass
An abstract node implementation for nodes that result in a simple true-false outcome.class
A convenient base class forAmPlugin
s that provide authentication nodes.final class
Immutable container for the result of processing a node.final class
A representation of the external HTTP request in the current tree authentication context.interface
A node is the core abstraction within an authentication tree.class
final class
Encapsulates all state that is provided by each node and passed between nodes on tree execution.interface
Describes the outcomes for node instances.final class
This class represents all the constants that can be used as keys for storing values in the tree's shared state.class
Abstract node for nodes that always result in the same single outcome.interface
Describes the outcomes for node instances that have static outcomes.final class
A representation of the context of the current tree authentication process.interface
A TreeHook encapsulates some functionality that should be executed at the end of a tree, after authentication.interface
Meta data API to expose data concerning the evaluating tree, to nodes who care for that data. -
Uses of SupportedAll in org.forgerock.openam.authentication.modules.common.mapping
Modifier and TypeInterfaceDescriptioninterface
Implementations of this interface provide the means to search for and create users given a map of attributes.interface
Translates from a source to a map of attributes. -
Uses of SupportedAll in org.forgerock.openam.authentication.modules.oath.plugins
Modifier and TypeInterfaceDescriptioninterface
Provided as an extension point to allow customised transformation of the OATH shared secret attribute. -
Uses of SupportedAll in org.forgerock.openam.authentication.modules.oauth2
-
Uses of SupportedAll in org.forgerock.openam.authentication.service
Modifier and TypeClassDescriptionfinal class
Default implementation forSessionPropertyUpgrader
This class basically just lets the session upgrade to copy every single property into the new session.class
This class is used in case of session upgrade for copying session properties from the old session into the new one. -
Uses of SupportedAll in org.forgerock.openam.entitlement
Modifier and TypeInterfaceDescriptioninterface
Service provider interface for registering custom entitlement conditions and subjects.final class
Provides methods for discovering and loading entitlements conditions and subject implementations.class
Holds the context of the policy evaluation making it available to policy conditions. -
Uses of SupportedAll in org.forgerock.openam.federation.plugin.rooturl
Modifier and TypeClassDescriptionenum
Singleton class used to manage Root URL providers. -
Uses of SupportedAll in org.forgerock.openam.http
Modifier and TypeInterfaceDescriptioninterface
This interface exposes the key components necessary to establish secure HTTPS connections. -
Uses of SupportedAll in org.forgerock.openam.oauth2
Modifier and TypeClassDescriptionclass
Represents a resource set description created by an OAuth2 client (resource server). -
Uses of SupportedAll in org.forgerock.openam.oauth2.extensions
Modifier and TypeInterfaceDescriptioninterface
Extension filter that will be called before and after resource sets are registered. -
Uses of SupportedAll in org.forgerock.openam.plugins
Modifier and TypeInterfaceDescriptioninterface
Define an AM plugin.class
An exception for an error in plugin operation.interface
A collection of simple tools for interacting with the SMS (Service Management Service). -
Uses of SupportedAll in org.forgerock.openam.rest.resource
Modifier and TypeClassDescriptionclass
A filter that can be applied to a CREST route in order to enter the restricted token context for a request if it contains a requester token as well as subject token. -
Uses of SupportedAll in org.forgerock.openam.scripting.api
Modifier and TypeInterfaceDescriptioninterface
Resolver for getting properties in scripts. -
Uses of SupportedAll in org.forgerock.openam.scripting.api.secrets
-
Uses of SupportedAll in org.forgerock.openam.selfservice.config
Modifier and TypeInterfaceDescriptioninterface
ServiceConfigProvider<C extends SelfServiceConsoleConfig>
Provides self service config instances based of the passed console configuration instance. -
Uses of SupportedAll in org.forgerock.openam.selfservice.config.beans
Modifier and TypeClassDescriptionfinal class
Represents forgotten password console configuration.final class
Represents forgotten username console configuration.final class
Represents user registration console configuration. -
Uses of SupportedAll in org.forgerock.openam.services.email
Modifier and TypeInterfaceDescriptioninterface
Pluggable interface for all email sending in OpenAM.interface
MailServerFactory<T extends MailServer>
Factory interface for creating instances ofMailServer
. -
Uses of SupportedAll in org.forgerock.openam.services.push
Modifier and TypeInterfaceDescriptioninterface
APushNotificationDelegate
is an implementation of OpenAM's Push Notification ServicePushNotificationService
specific to a realm as generated by aPushNotificationDelegateFactory
.interface
Defines how PushNotificationDelegates should be created. -
Uses of SupportedAll in org.forgerock.openam.services.push.dispatch.predicates
-
Uses of SupportedAll in org.forgerock.openam.session.service
Modifier and TypeInterfaceDescriptioninterface
Implementation of this class gets executed every time when an SSO Session times out (either idle or max timeout). -
Uses of SupportedAll in org.forgerock.openam.sm
Modifier and TypeClassDescriptionclass
A sub-exception ofSMSException
for theServiceConfigValidator
.interface
This interface provides a means to validate an entireServiceConfig
's attribute values together.interface
This interface provides a means to validate an entireServiceConfig
's attribute values together.class
A sub-exception ofSMSException
for theServiceConfigValidator
. -
Uses of SupportedAll in org.forgerock.openam.sm.annotations.adapters
Modifier and TypeClassDescription@interface
An annotation to specify an example value for the attribute.@interface
An annotation which tags a configuration method as representing a number range.@interface
An annotation which tags a configuration method as representing a "secret" value that is encrypted.@interface
An annotation which tags a configuration method as being placeholdered.@interface
An annotation which tags a configuration method as representing a large body of text which requires a larger input. -
Uses of SupportedAll in org.forgerock.openam.sts
Modifier and TypeClassDescriptionclass
An instance of this exception is thrown for errors encountered during token creation.interface
Provides an extensible means of identifying a to-be-validated or to-be-provided token type.class
An instance of this exception is thrown for all errors related to token validation. -
Uses of SupportedAll in org.forgerock.openam.sts.config.user
Modifier and TypeClassDescriptionclass
Encapsulates the configuration state necessary to produce SAML2 assertions.static class
Builder used to programmatically create SAML2Config objects -
Uses of SupportedAll in org.forgerock.openam.sts.rest.token.provider
Modifier and TypeInterfaceDescriptioninterface
Interface defining token creators in the rest-sts.interface
Parameter state passed to JsonTokenProvider instances. -
Uses of SupportedAll in org.forgerock.openam.sts.rest.token.provider.oidc
Modifier and TypeInterfaceDescriptioninterface
An interface which allows soap-sts publishers to generate the amr claim for issued OpenIdConnect tokens on the basis of the validated input token.interface
OpenIdConnect tokens can include an Authentication Context Class Reference (acr) claim which indicates how the subject asserted by the OIDC token was authenticated. -
Uses of SupportedAll in org.forgerock.openam.sts.rest.token.validator
Modifier and TypeInterfaceDescriptioninterface
Defines the contract for token validators deployed in the context of token transformation.interface
Defines the parameter state which needs to be passed to the RestTokenTransformValidator#validateToken instances. -
Uses of SupportedAll in org.forgerock.openam.sts.token
Modifier and TypeClassDescriptionenum
Enum defining the SAML2 SubjectConfirmation values used in the REST-STS and the TokenGenerationService. -
Uses of SupportedAll in org.forgerock.openam.sts.tokengeneration.oidc
Modifier and TypeInterfaceDescriptioninterface
An instance of this interface will be used to insert any custom claims into issued OpenIdConnect tokens. -
Uses of SupportedAll in org.forgerock.openam.sts.tokengeneration.saml2.statements
Modifier and TypeInterfaceDescriptioninterface
Defines the concerns of mapping attributes into SAML2 AttributeStatements.interface
Defines the concerns of generating the AttributeStatement list to be included in the SAML2 assertion.interface
Defines the concern of providing the AuthnStatement list to be included in the generated SAML2 assertion.interface
This interface defines the plug-in point for producing AuthzDecisionStatements.interface
Implementations of this interface will be consulted to obtain the Conditions object included in generated SAML2 assertions.interface
Defines the concerns of providing the Subject to be included in the generated SAML2 assertion. -
Uses of SupportedAll in org.forgerock.openam.sts.user.invocation
Modifier and TypeClassDescriptionclass
When issuing SAML2 Holder-of-Key assertions, the proof token is usually an X509Certificate. -
Uses of SupportedAll in org.forgerock.openam.uma
Modifier and TypeClassDescriptionclass
A POJO to represent the UMA Permission Ticket. -
Uses of SupportedAll in org.forgerock.openam.uma.extensions
Modifier and TypeInterfaceDescriptioninterface
Extension filter that will be called before permission request creation.interface
Extension filter that will be called before request authorization and after request authorization.interface
Extension filter that will be called before a resource is shared, after a resource is shared, before a shared resource is modified and on a resource no longer being shared. -
Uses of SupportedAll in org.forgerock.openam.upgrade
Modifier and TypeClassDescriptionclass
This class is an extension point for all Upgrade related exceptions. -
Uses of SupportedAll in org.forgerock.openam.utils
Modifier and TypeInterfaceDescriptioninterface
For extensibility of theRecoveryCodeGenerator
.class
Generates codes of a specified length using a givenAlphabet
as valid characters. -
Uses of SupportedAll in org.forgerock.openidconnect
Modifier and TypeClassDescriptionclass
Interface is to define what needs to be implemented to do the OpenID Connect check session endpoint.class
Deprecated.useClaim
com.sun.identity.entitlement
instead asEntitlement
has replacedPolicy
.