The library documents itself · Security & governance
stzSamlServiceProvider
26 own methods · 5 forms written with extensions, listed under their method
the source: base/security/stzSaml.ring(opens in a new tab) · All classes · The area reference: Security & governance
Under each method, its extensions (Q CS XT Z ZZ IB W U): bold and ticked, it exists; struck, it does not. The extensions and what they mean
No method of this class is run on this page: the class reaches files, the network, processes, the clock, chance or sound, and an example run here would only be an example of its effects. Each method carries the explanation the library gives of itself.
Method
Explanation, as the source carries it
init
(no comment in the source: the name reads as a sentence) initno extension
EntityId
configurationno extension
AcsUrl
(no comment in the source: the name reads as a sentence) acs urlno extension
TrustIdp
Trust exactly ONE identity provider, by entity id AND signing key. Both matter: the key proves the assertion is authentic, the entity id proves it came from the IdP we mean.QCSXTZZZIBWU
TrustIdpFromCertificate
Trust an IdP by its CERTIFICATE -- which is what its metadata actually publishes. Accepts PEM or the bare base64 DER carried inside XML.QCSXTZZZIBWU
TrustIdpFromMetadata
Trust an IdP from the METADATA document it publishes: entityID, SSO endpoint and signing certificate all come from the one paste. This is how a real service provider is configured.QCSXTZZZIBWU
IdpCertificate
the certificate we were configured with ("" when trust was set by raw key).no extension
IdpCertificateFingerprint
its fingerprint, for an operator to compare against what the IdP published.no extension
IdpCertificateInfo
(no comment in the source: the name reads as a sentence) idp certificate infono extension
SetIdpSsoUrl
(no comment in the source: the name reads as a sentence) set idp sso urlQCSXTZZZIBWU
IdpEntityId
(no comment in the source: the name reads as a sentence) idp entity idno extension
IdpSsoUrl
(no comment in the source: the name reads as a sentence) idp sso urlno extension
TrustsAnIdp
(no comment in the source: the name reads as a sentence) trusts an idpno extension
SetClockSkew
(no comment in the source: the name reads as a sentence) set clock skewQCSXTZZZIBWU
ClockSkew
(no comment in the source: the name reads as a sentence) clock skewno extension
Why
(no comment in the source: the name reads as a sentence) whyno extension
AuthnRequest
step 1: send the user to the IdP (SP-initiated SSO) -------------- The AuthnRequest XML. The caller base64s it into an HTTP-POST form (or deflates + base64s it for the Redirect binding).no extension
AuthnRequestAt
(no comment in the source: the name reads as a sentence) authn request atno extension
NewRequestId
a fresh request id (SAML ids must not start with a digit).no extension
ConsumeResponse
step 2: believe (or refuse) what the IdP POSTed back ------------- pcBase64 is the SAMLResponse form field exactly as the browser posted it.no extension
ConsumeResponseAt
(no comment in the source: the name reads as a sentence) consume response atno extension
ConsumeXml
the same, given the raw XML (already decoded).no extension
ConsumeXmlAt
(no comment in the source: the name reads as a sentence) consume xml atno extension
NumberOfConsumedAssertions
(no comment in the source: the name reads as a sentence) number of consumed assertionsno extension
PurgeSeenAt
drop replay records whose window has passed (housekeeping).no extension
Show
(no comment in the source: the name reads as a sentence) showno extension