com.bea.security.saml2.providers
Interface SAML2CredentialAttributeMapper

public interface SAML2CredentialAttributeMapper

This interface defines an API to map attribute information from any application-specific sources to SAML2 Assertion attributes.

To specify an instance of this interface to be used by the SAML2 Credential Mapper, set the NameMapperClassName attribute.

Classes that implement this interface must have a public no-arg constructor and must be in the system classpath.

mapAttributes

Collection<SAML2AttributeStatementInfo> mapAttributes(Subject subject,
                                                      ContextHandler handler)

Maps attribute information from any application-specific sources to a collection of SAML2AttributeStatementInfo, each of which will be used to construct an <AttributeStatement> element in a SAML 2.0 assertion.

Parameters:

subject - represents an authenticated user with which the attributes are associated

handler - the context handler that can hold additional information for attribute mapping

Returns:

a collection of SAML2AttributeStatementInfo objects that represent attribute data to be written to SAML 2.0 assertions; null if no attribute data to be included in assertions