IDPWebBrowserSSOValve

IDPWebBrowserSSOValve from PicketLink provides the core IDP functionality on JBoss Application Server or Apache Tomcat.

Configuration

JBoss Application Server v6 and v5.x

Configure in WEB-INF/context.xml

Apache Tomcat 5.5 and 6

Configure in META-INF/context.xml

Example:

context.xml

<Context>
    <Valve className="org.picketlink.identity.federation.bindings.tomcat.idp.IDPWebBrowserSSOValve"
           signOutgoingMessages="false"
           ignoreIncomingSignatures="true"/>
</Context>

Attributes

#	Name	Type	Objective	Since version
1	attributeList	String	a comma separated list of attribute keys IDP interested in	2.0
2	configProvider	String	an optional implementation of the SAMLConfigurationProvider interface. Provide the fully qualified name.	2.0
3	ignoreIncomingSignatures	boolean	if the IDP should ignore the signatures on the incoming messages Default: false	2.0 Deprecated since 2.1.2.
4	ignoreAttributesGeneration	boolean	if the IDP should not generate attribute statements in response to Service Providers	2.0
5	signOutgoingMessages	boolean	Should the IDP sign the outgoing messages? Default: true	2.0 Deprecated since 2.1.2.
6	roleGenerator	String	optional fqn of a role generator Default: org.picketlink.identity.federation.bindings.tomcat.TomcatRoleGenerator	2.0 Deprecated since 2.1.2.
7	samlHandlerChainClass	String	fqn of a custom SAMLHandlerChain implementation	2.0 Deprecated since 2.1.2.
8	identityParticipantStack	String	fqn of a custom IdentityParticipantStack	2.0 Deprecated since 2.1.2.