The library documents itself · Security & governance
stzSamlIdentityProvider
22 own methods · 5 forms written with extensions, listed under their method
the source: base/security/stzSamlProvider.ring(opens in a new tab) · All classes · The area reference: Security & governance
Under each method, its extensions (Q CS XT Z ZZ IB W U): bold and ticked, it exists; struck, it does not. The extensions and what they mean
No method of this class is run on this page: the class reaches files, the network, processes, the clock, chance or sound, and an example run here would only be an example of its effects. Each method carries the explanation the library gives of itself.
Method
Explanation, as the source carries it
init
(no comment in the source: the name reads as a sentence) initno extension
EntityId
identity + keyno extension
UseSeed
a deterministic key from a 32-byte hex seed ("" = random), so a test suite can pin an IdP and reproduce its assertions.QCSXTZZZIBWU
SigningAlgorithm
(no comment in the source: the name reads as a sentence) signing algorithmno extension
UseRsaKey
Sign assertions RSA-SHA256 with a key you already have. This is the one that matters in practice: a good number of enterprise service providers accept RSA only, so an ECDSA-only IdP simply cannot federate with them.QCSXTZZZIBWU
UseNewRsaKey
(no comment in the source: the name reads as a sentence) use new rsa keyQCSXTZZZIBWU
PublicKey
the PUBLIC half -- what a service provider needs to verify us.no extension
KeyX
(no comment in the source: the name reads as a sentence) key xno extension
KeyY
(no comment in the source: the name reads as a sentence) key yno extension
TrustMeOn
hand a service provider everything it needs to trust us, in one call.no extension
SetLifetime
(no comment in the source: the name reads as a sentence) set lifetimeQCSXTZZZIBWU
Lifetime
(no comment in the source: the name reads as a sentence) lifetimeno extension
RegisterServiceProvider
the services we vouch forno extension
HasServiceProvider
(no comment in the source: the name reads as a sentence) has service providerno extension
ServiceProviderIds
(no comment in the source: the name reads as a sentence) service provider idsno extension
AcsUrlOf
(no comment in the source: the name reads as a sentence) acs url ofno extension
IssueAssertion
issuing ---------------------------------------------------------- A signed assertion for a subject, addressed to a registered service.QCSXTZZZIBWU
IssueAssertionAt
(no comment in the source: the name reads as a sentence) issue assertion atno extension
UnsignedAssertion
the assertion before signing -- exposed because seeing it makes the shape obvious, and because a test can sign a deliberately odd one.no extension
IssueResponse
the same, base64'd the way a browser would POST it to the SP.no extension
IssueResponseAt
(no comment in the source: the name reads as a sentence) issue response atno extension
Show
(no comment in the source: the name reads as a sentence) showno extension