Class SAMLAudienceResolveProtocolMapper

java.lang.Object
org.keycloak.protocol.saml.mappers.AbstractSAMLProtocolMapper
org.keycloak.protocol.saml.mappers.SAMLAudienceResolveProtocolMapper
All Implemented Interfaces:
org.keycloak.protocol.ProtocolMapper, SAMLLoginResponseMapper, org.keycloak.provider.ConfiguredProvider, org.keycloak.provider.Provider, org.keycloak.provider.ProviderFactory<org.keycloak.protocol.ProtocolMapper>

public class SAMLAudienceResolveProtocolMapper extends AbstractSAMLProtocolMapper implements SAMLLoginResponseMapper
SAML audience resolve mapper. The mapper adds all client_ids of \"allowed\" clients to the audience conditions in the assertion. Allowed client means any SAML client for which user has at least one client role.
Author:
rmartinc
  • Field Details

    • logger

      protected static final org.jboss.logging.Logger logger
    • PROVIDER_ID

      public static final String PROVIDER_ID
      See Also:
  • Constructor Details

    • SAMLAudienceResolveProtocolMapper

      public SAMLAudienceResolveProtocolMapper()
  • Method Details

    • getConfigProperties

      public List<org.keycloak.provider.ProviderConfigProperty> getConfigProperties()
      Specified by:
      getConfigProperties in interface org.keycloak.provider.ConfiguredProvider
    • getId

      public String getId()
      Specified by:
      getId in interface org.keycloak.provider.ProviderFactory<org.keycloak.protocol.ProtocolMapper>
    • getDisplayType

      public String getDisplayType()
      Specified by:
      getDisplayType in interface org.keycloak.protocol.ProtocolMapper
    • getDisplayCategory

      public String getDisplayCategory()
      Specified by:
      getDisplayCategory in interface org.keycloak.protocol.ProtocolMapper
    • getHelpText

      public String getHelpText()
      Specified by:
      getHelpText in interface org.keycloak.provider.ConfiguredProvider
    • transformLoginResponse

      public org.keycloak.dom.saml.v2.protocol.ResponseType transformLoginResponse(org.keycloak.dom.saml.v2.protocol.ResponseType response, org.keycloak.models.ProtocolMapperModel mappingModel, org.keycloak.models.KeycloakSession session, org.keycloak.models.UserSessionModel userSession, org.keycloak.models.ClientSessionContext clientSessionCtx)
      Specified by:
      transformLoginResponse in interface SAMLLoginResponseMapper