Class SAMLAudienceResolveProtocolMapper

  • All Implemented Interfaces:
    org.keycloak.protocol.ProtocolMapper, SAMLLoginResponseMapper, org.keycloak.provider.ConfiguredProvider, org.keycloak.provider.Provider, org.keycloak.provider.ProviderFactory<org.keycloak.protocol.ProtocolMapper>

    public class SAMLAudienceResolveProtocolMapper
    extends AbstractSAMLProtocolMapper
    implements SAMLLoginResponseMapper
    SAML audience resolve mapper. The mapper adds all client_ids of \"allowed\" clients to the audience conditions in the assertion. Allowed client means any SAML client for which user has at least one client role.
    Author:
    rmartinc
    • Field Detail

      • logger

        protected static final org.jboss.logging.Logger logger
    • Constructor Detail

      • SAMLAudienceResolveProtocolMapper

        public SAMLAudienceResolveProtocolMapper()
    • Method Detail

      • getConfigProperties

        public List<org.keycloak.provider.ProviderConfigProperty> getConfigProperties()
        Specified by:
        getConfigProperties in interface org.keycloak.provider.ConfiguredProvider
      • getId

        public String getId()
        Specified by:
        getId in interface org.keycloak.provider.ProviderFactory<org.keycloak.protocol.ProtocolMapper>
      • getDisplayType

        public String getDisplayType()
        Specified by:
        getDisplayType in interface org.keycloak.protocol.ProtocolMapper
      • getDisplayCategory

        public String getDisplayCategory()
        Specified by:
        getDisplayCategory in interface org.keycloak.protocol.ProtocolMapper
      • getHelpText

        public String getHelpText()
        Specified by:
        getHelpText in interface org.keycloak.provider.ConfiguredProvider
      • transformLoginResponse

        public org.keycloak.dom.saml.v2.protocol.ResponseType transformLoginResponse​(org.keycloak.dom.saml.v2.protocol.ResponseType response,
                                                                                     org.keycloak.models.ProtocolMapperModel mappingModel,
                                                                                     org.keycloak.models.KeycloakSession session,
                                                                                     org.keycloak.models.UserSessionModel userSession,
                                                                                     org.keycloak.models.ClientSessionContext clientSessionCtx)
        Specified by:
        transformLoginResponse in interface SAMLLoginResponseMapper