package com.sun.identity.console.federation.model;

import com.sun.identity.console.base.model.AMAdminUtils;

import com.sun.identity.console.base.model.AMConsoleException;

import javax.servlet.http.HttpServletRequest;

import com.sun.identity.saml2.jaxb.metadata.EntityDescriptorElement;

import com.sun.identity.saml2.meta.SAML2MetaUtils;

import com.sun.identity.saml2.meta.SAML2MetaSecurityUtils;

import com.sun.identity.saml2.meta.SAML2MetaManager;

import com.sun.identity.saml2.meta.SAML2MetaException;

import com.sun.identity.saml2.jaxb.metadata.EntityDescriptorElement;

import com.sun.identity.saml2.jaxb.metadata.IDPSSODescriptorElement;

import com.sun.identity.saml2.jaxb.entityconfig.IDPSSOConfigElement;

import com.sun.identity.saml2.jaxb.entityconfig.AttributeElement;

import com.sun.identity.saml2.jaxb.metadata.SingleSignOnServiceElement;

import com.sun.identity.saml2.jaxb.metadata.ArtifactResolutionServiceElement;

import com.sun.identity.saml2.jaxb.metadata.SingleLogoutServiceElement;

import com.sun.identity.saml2.jaxb.metadata.ManageNameIDServiceElement;

import com.sun.identity.saml2.jaxb.metadata.SPSSODescriptorElement;

import com.sun.identity.saml2.jaxb.entityconfig.SPSSOConfigElement;

import com.sun.identity.saml2.jaxb.metadata.SSODescriptorType;

import com.sun.identity.saml2.jaxb.metadata.AssertionConsumerServiceElement;

import com.sun.identity.saml2.jaxb.metadata.XACMLAuthzDecisionQueryDescriptorElement;

import com.sun.identity.saml2.jaxb.metadata.XACMLPDPDescriptorElement;

import com.sun.identity.saml2.jaxb.entityconfig.XACMLAuthzDecisionQueryConfigElement;

import com.sun.identity.saml2.jaxb.entityconfig.XACMLPDPConfigElement;

import com.sun.identity.saml2.jaxb.entityconfig.AttributeType;

import com.sun.identity.saml2.jaxb.entityconfig.BaseConfigType;

import com.sun.identity.saml2.jaxb.entityconfig.EntityConfigElement;

import com.sun.identity.saml2.jaxb.entityconfig.ObjectFactory;

import com.sun.identity.saml2.jaxb.metadata.EntityDescriptorElement;

import com.sun.identity.saml2.jaxb.metadata.XACMLAuthzServiceElement;

import com.sun.identity.saml2.jaxb.metadata.NameIDMappingServiceElement;

import com.sun.identity.saml2.jaxb.metadata.AuthnAuthorityDescriptorElement;

import com.sun.identity.saml2.jaxb.entityconfig.AuthnAuthorityConfigElement;

import com.sun.identity.saml2.jaxb.metadata.AttributeAuthorityDescriptorElement;

import com.sun.identity.saml2.jaxb.metadata.AttributeServiceElement;

import com.sun.identity.saml2.jaxb.metadata.AssertionIDRequestServiceElement;

import com.sun.identity.saml2.jaxb.entityconfig.AttributeAuthorityConfigElement;

import com.sun.identity.saml2.jaxb.entityconfig.AttributeQueryConfigElement;

import com.sun.identity.saml2.jaxb.metadata.AuthnQueryServiceElement;

import com.sun.identity.saml2.jaxb.metadataextquery.AttributeQueryDescriptorElement;

import com.sun.identity.saml2.jaxb.metadata.AffiliationDescriptorType;

import com.sun.identity.saml2.jaxb.entityconfig.AffiliationConfigElement;

import com.sun.identity.saml2.jaxb.metadata.KeyDescriptorElement;

import com.sun.identity.saml2.jaxb.metadata.EncryptionMethodElement;

import com.sun.identity.saml2.jaxb.xmlenc.EncryptionMethodType;

import com.sun.identity.shared.datastruct.OrderedSet;

import com.sun.identity.console.federation.SAMLv2AuthContexts;

import javax.xml.bind.JAXBException;

import java.util.ArrayList;

import java.util.Collections;

import java.util.HashMap;

import java.util.Iterator;

import java.util.List;

import java.util.Map;

import java.util.Set;

import java.math.BigInteger;

public class SAMLv2ModelImpl extends EntityModelImpl implements SAMLv2Model {

private SAML2MetaManager metaManager;

private static Map extendedMetaIdpMap = new HashMap(53);

private static Map extendedACMetaIdpMap = new HashMap(34);

private static Map extendedAPMetaIdpMap = new HashMap(14);

private static Map extendedSMetaIdpMap = new HashMap(2);

private static Map extendedAdMetaIdpMap = new HashMap(9);

private static Map extendedMetaSpMap = new HashMap(65);

private static Map extendedACMetaSpMap = new HashMap(37);

private static Map extendedAPMetaSpMap = new HashMap(30);

private static Map extendedSMetaSpMap = new HashMap(2);

private static Map extendedAdMetaSpMap = new HashMap(20);

private static Map xacmlPDPExtendedMeta = new HashMap(18);

private static Map xacmlPEPExtendedMeta = new HashMap(18);

private static Map extAttrAuthMap = new HashMap(12);

private static Map extAuthnAuthMap = new HashMap(6);

private static Map extattrQueryMap = new HashMap(4);

//extended metadata attributes for idp only

static {

extendedMetaIdpMap.put(IDP_SIGN_CERT_ALIAS, Collections.EMPTY_SET);

extendedMetaIdpMap.put(IDP_ENCRYPT_CERT_ALIAS, Collections.EMPTY_SET);

extendedMetaIdpMap.put(IDP_BASIC_AUTH_ON, Collections.EMPTY_SET);

extendedMetaIdpMap.put(IDP_BASIC_AUTH_USER, Collections.EMPTY_SET);

extendedMetaIdpMap.put(IDP_BASIC_AUTH_PWD, Collections.EMPTY_SET);

extendedMetaIdpMap.put(IDP_AUTO_FED_ENABLED, Collections.EMPTY_SET);

extendedMetaIdpMap.put(IDP_AUTO_FED_ATTR, Collections.EMPTY_SET);

extendedMetaIdpMap.put(IDP_ATTR_MAP, Collections.EMPTY_SET);

extendedMetaIdpMap.put(IDP_NAMEID_ENCRYPTED, Collections.EMPTY_SET);

extendedMetaIdpMap.put(NAMEID_FORMAT_MAP,Collections.EMPTY_SET);

extendedMetaIdpMap.put(IDP_LOGOUT_REQ_SIGN, Collections.EMPTY_SET);

extendedMetaIdpMap.put(IDP_LOGOUT_RESP_SIGN, Collections.EMPTY_SET);

extendedMetaIdpMap.put(IDP_MNI_REQ_SIGN, Collections.EMPTY_SET);

extendedMetaIdpMap.put(IDP_MNI_RESP_SIGN, Collections.EMPTY_SET);

extendedMetaIdpMap.put(ASSERT_EFFECT_TIME, Collections.EMPTY_SET);

extendedMetaIdpMap.put(IDP_ACCT_MAPPER, Collections.EMPTY_SET);

extendedMetaIdpMap.put(IDP_AUTHN_CONTEXT_MAPPER,

Collections.EMPTY_SET);

extendedMetaIdpMap.put(IDP_AUTHN_CONTEXT_CLASS_REF_MAPPING,

Collections.EMPTY_SET);

extendedMetaIdpMap.put(IDP_ATTR_MAPPER, Collections.EMPTY_SET);

extendedMetaIdpMap.put(ASSERT_NOT_BEFORE_TIMESKEW,

Collections.EMPTY_SET);

extendedMetaIdpMap.put(BOOT_STRAP_ENABLED, Collections.EMPTY_SET);

extendedMetaIdpMap.put(ARTIF_RESOLVE_SIGN, Collections.EMPTY_SET);

extendedMetaIdpMap.put(AUTH_URL, Collections.EMPTY_SET);

extendedMetaIdpMap.put(RP_URL, Collections.EMPTY_SET);

extendedMetaIdpMap.put(APP_LOGOUT_URL, Collections.EMPTY_SET);

extendedMetaIdpMap.put(ASSERTION_CACHE_ENABLED,

Collections.EMPTY_SET);

extendedMetaIdpMap.put(COT_LIST, Collections.EMPTY_SET);

extendedMetaIdpMap.put(IDP_META_ALIAS, Collections.EMPTY_SET);

extendedMetaIdpMap.put(IDP_SESSION_SYNC_ENABLED, Collections.EMPTY_SET);

extendedMetaIdpMap.put(ENABLE_PROXY_IDP_FINDER_FOR_ALL_SPS,

Collections.EMPTY_SET);

extendedMetaIdpMap.put(PROXY_IDP_FINDER_JSP,

Collections.EMPTY_SET);

extendedMetaIdpMap.put(PROXY_IDP_FINDER_CLASS,

Collections.EMPTY_SET);

// ECP

extendedMetaIdpMap.put(ATTR_IDP_ECP_SESSION_MAPPER,

Collections.EMPTY_SET);

// IDP Adapter

extendedMetaIdpMap.put(ATTR_IDP_ADAPTER, Collections.EMPTY_SET);

//SAE

extendedMetaIdpMap.put(ATTR_SAE_IDP_APP_SECRET_LIST,

Collections.EMPTY_SET);

extendedMetaIdpMap.put(ATTR_SAE_IDP_URL,

Collections.EMPTY_SET);

//RelayState URL List

extendedMetaIdpMap.put(ATTR_RELAY_STATE_IDP_URL_LIST,

Collections.EMPTY_SET);

}

//extended metadata attributes for sp only

static {

extendedMetaSpMap.put(SP_SIGN_CERT_ALIAS, Collections.EMPTY_SET);

extendedMetaSpMap.put(SP_ENCRYPT_CERT_ALIAS, Collections.EMPTY_SET);

extendedMetaSpMap.put(SP_BASIC_AUTH_ON, Collections.EMPTY_SET);

extendedMetaSpMap.put(SP_BASIC_AUTH_USER, Collections.EMPTY_SET);

extendedMetaSpMap.put(SP_BASIC_AUTH_PWD, Collections.EMPTY_SET);

extendedMetaSpMap.put(SP_AUTO_FED_ENABLED, Collections.EMPTY_SET);

extendedMetaSpMap.put(SP_AUTO_FED_ATTR, Collections.EMPTY_SET);

extendedMetaSpMap.put(SP_ATTR_MAP, Collections.EMPTY_SET);

extendedMetaSpMap.put(SP_NAMEID_ENCRYPTED, Collections.EMPTY_SET);

extendedMetaSpMap.put(SP_LOGOUT_REQ_SIGN, Collections.EMPTY_SET);

extendedMetaSpMap.put(SP_LOGOUT_RESP_SIGN, Collections.EMPTY_SET);

extendedMetaSpMap.put(SP_MNI_REQ_SIGN, Collections.EMPTY_SET);

extendedMetaSpMap.put(SP_MNI_RESP_SIGN, Collections.EMPTY_SET);

extendedMetaSpMap.put(TRANSIENT_USER, Collections.EMPTY_SET);

extendedMetaSpMap.put(SP_ACCT_MAPPER, Collections.EMPTY_SET);

extendedMetaSpMap.put(SP_USE_NAMEID, Collections.EMPTY_SET);

extendedMetaSpMap.put(SP_AUTHN_CONTEXT_MAPPER, Collections.EMPTY_SET);

extendedMetaSpMap.put(SP_ATTR_MAPPER, Collections.EMPTY_SET);

extendedMetaSpMap.put(SP_AUTHN_CONTEXT_CLASS_REF_MAPPING,

Collections.EMPTY_SET);

extendedMetaSpMap.put(SP_AUTHN_CONTEXT_COMPARISON,

Collections.EMPTY_SET);

extendedMetaSpMap.put(SAML2_AUTH_MODULE, Collections.EMPTY_SET);

extendedMetaSpMap.put(LOCAL_AUTH_URL, Collections.EMPTY_SET);

extendedMetaSpMap.put(APP_LOGOUT_URL, Collections.EMPTY_SET);

extendedMetaSpMap.put(INTERMEDIATE_URL, Collections.EMPTY_SET);

extendedMetaSpMap.put(DEFAULT_RELAY_STATE, Collections.EMPTY_SET);

extendedMetaSpMap.put(ASSERT_TIME_SKEW, Collections.EMPTY_SET);

extendedMetaSpMap.put(WANT_ATTR_ENCRYPTED, Collections.EMPTY_SET);

extendedMetaSpMap.put(WANT_ASSERTION_ENCRYPTED,

Collections.EMPTY_SET);

extendedMetaSpMap.put(WANT_ARTIF_RESP_SIGN, Collections.EMPTY_SET);

extendedMetaSpMap.put(WANT_POST_RESP_SIGN, Collections.EMPTY_SET);

extendedMetaSpMap.put(ARTI_MSG_ENCODE, Collections.EMPTY_SET);

extendedMetaSpMap.put(COT_LIST, Collections.EMPTY_SET);

extendedMetaSpMap.put(SP_META_ALIAS, Collections.EMPTY_SET);

extendedMetaSpMap.put(SP_SESSION_SYNC_ENABLED, Collections.EMPTY_SET);

//IDP PROXY

extendedMetaSpMap.put(ALWAYS_IDP_PROXY, Collections.EMPTY_SET);

extendedMetaSpMap.put(ENABLE_IDP_PROXY, Collections.EMPTY_SET);

extendedMetaSpMap.put(IDP_PROXY_LIST, Collections.EMPTY_SET);

extendedMetaSpMap.put(IDP_PROXY_COUNT, Collections.EMPTY_SET);

extendedMetaSpMap.put(IDP_PROXY_INTROD, Collections.EMPTY_SET);

extendedMetaSpMap.put(IDP_PROXY_FINDER, Collections.EMPTY_SET);

//ECP

extendedMetaSpMap.put(ATTR_ECP_REQUEST_IDP_LIST_FINDER_IMPL,

Collections.EMPTY_SET);

extendedMetaSpMap.put(ATTR_ECP_REQUEST_IDP_LIST,

Collections.EMPTY_SET);

extendedMetaSpMap.put(ATTR_ECP_REQUEST_IDP_LIST_GET_COMPLETE,

Collections.EMPTY_SET);

//SAE

extendedMetaSpMap.put(ATTR_SAE_SP_APP_SECRET_LIST,

Collections.EMPTY_SET);

extendedMetaSpMap.put(ATTR_SAE_SP_URL, Collections.EMPTY_SET);

extendedMetaSpMap.put(ATTR_SAE_LOGOUT_URL, Collections.EMPTY_SET);

//spAdapter

extendedMetaSpMap.put(ATTR_SP_ADAPTER, Collections.EMPTY_SET);

extendedMetaSpMap.put(ATTR_SP_ADAPTER_ENV, Collections.EMPTY_SET);

//RelayState URL List

extendedMetaSpMap.put(ATTR_RELAY_STATE_SP_URL_LIST,

Collections.EMPTY_SET);

// Do Not Write Federation Info Feature

extendedMetaSpMap.put(ATTR_DO_NOT_WRITE_FEDERATION_INFO,

Collections.EMPTY_SET);

}

//extended Assertion Content metadata attributes for idp only

static {

extendedACMetaIdpMap.put(ARTIF_RESOLVE_SIGN, Collections.EMPTY_SET);

extendedACMetaIdpMap.put(IDP_LOGOUT_REQ_SIGN, Collections.EMPTY_SET);

extendedACMetaIdpMap.put(IDP_LOGOUT_RESP_SIGN, Collections.EMPTY_SET);

extendedACMetaIdpMap.put(IDP_MNI_REQ_SIGN, Collections.EMPTY_SET);

extendedACMetaIdpMap.put(IDP_MNI_RESP_SIGN, Collections.EMPTY_SET);

extendedACMetaIdpMap.put(IDP_SIGN_CERT_ALIAS, Collections.EMPTY_SET);

extendedACMetaIdpMap.put(IDP_ENCRYPT_CERT_ALIAS, Collections.EMPTY_SET);

extendedACMetaIdpMap.put(IDP_NAMEID_ENCRYPTED, Collections.EMPTY_SET);

extendedACMetaIdpMap.put(NAMEID_FORMAT_MAP,Collections.EMPTY_SET);

extendedACMetaIdpMap.put(IDP_AUTHN_CONTEXT_MAPPER,

Collections.EMPTY_SET);

extendedACMetaIdpMap.put(IDP_AUTHN_CONTEXT_CLASS_REF_MAPPING,

Collections.EMPTY_SET);

extendedACMetaIdpMap.put(ASSERT_EFFECT_TIME, Collections.EMPTY_SET);

extendedACMetaIdpMap.put(ASSERT_NOT_BEFORE_TIMESKEW,

Collections.EMPTY_SET);

extendedACMetaIdpMap.put(IDP_BASIC_AUTH_ON, Collections.EMPTY_SET);

extendedACMetaIdpMap.put(IDP_BASIC_AUTH_USER, Collections.EMPTY_SET);

extendedACMetaIdpMap.put(IDP_BASIC_AUTH_PWD, Collections.EMPTY_SET);

extendedACMetaIdpMap.put(ASSERTION_CACHE_ENABLED,

Collections.EMPTY_SET);

extendedACMetaIdpMap.put(BOOT_STRAP_ENABLED, Collections.EMPTY_SET);

}

//extended Assertion Processing metadata attributes for idp only

static {

extendedAPMetaIdpMap.put(IDP_ATTR_MAP, Collections.EMPTY_SET);

extendedAPMetaIdpMap.put(IDP_ATTR_MAPPER, Collections.EMPTY_SET);

extendedAPMetaIdpMap.put(IDP_AUTO_FED_ENABLED, Collections.EMPTY_SET);

extendedAPMetaIdpMap.put(IDP_AUTO_FED_ATTR, Collections.EMPTY_SET);

extendedAPMetaIdpMap.put(IDP_ACCT_MAPPER, Collections.EMPTY_SET);

extendedAPMetaIdpMap.put(AUTH_URL, Collections.EMPTY_SET);

extendedAPMetaIdpMap.put(RP_URL, Collections.EMPTY_SET);

extendedAPMetaIdpMap.put(APP_LOGOUT_URL, Collections.EMPTY_SET);

}

//extended Services metadata attributes for idp only

static {

extendedSMetaIdpMap.put(IDP_META_ALIAS, Collections.EMPTY_SET);

}

//extended Advanced metadata attributes for idp only

static {

extendedAdMetaIdpMap.put(ATTR_IDP_ECP_SESSION_MAPPER,

Collections.EMPTY_SET);

extendedAdMetaIdpMap.put(ATTR_IDP_ADAPTER,

Collections.EMPTY_SET);

extendedAdMetaIdpMap.put(ATTR_SAE_IDP_APP_SECRET_LIST,

Collections.EMPTY_SET);

extendedAdMetaIdpMap.put(ATTR_SAE_IDP_URL,

Collections.EMPTY_SET);

extendedAdMetaIdpMap.put(IDP_SESSION_SYNC_ENABLED, Collections.EMPTY_SET);

extendedAdMetaIdpMap.put(ATTR_RELAY_STATE_IDP_URL_LIST,

Collections.EMPTY_SET);

extendedAdMetaIdpMap.put(ENABLE_PROXY_IDP_FINDER_FOR_ALL_SPS,

Collections.EMPTY_SET);

extendedAdMetaIdpMap.put(PROXY_IDP_FINDER_JSP,

Collections.EMPTY_SET);

extendedAdMetaIdpMap.put(PROXY_IDP_FINDER_CLASS,

Collections.EMPTY_SET);

}

//extended Assertion Content metadata attributes for sp only

static {

extendedACMetaSpMap.put(SP_SIGN_CERT_ALIAS, Collections.EMPTY_SET);

extendedACMetaSpMap.put(SP_ENCRYPT_CERT_ALIAS, Collections.EMPTY_SET);

extendedACMetaSpMap.put(SP_NAMEID_ENCRYPTED, Collections.EMPTY_SET);

extendedACMetaSpMap.put(WANT_ATTR_ENCRYPTED, Collections.EMPTY_SET);

extendedACMetaSpMap.put(WANT_ASSERTION_ENCRYPTED,

Collections.EMPTY_SET);

extendedACMetaSpMap.put(SP_LOGOUT_REQ_SIGN, Collections.EMPTY_SET);

extendedACMetaSpMap.put(SP_LOGOUT_RESP_SIGN, Collections.EMPTY_SET);

extendedACMetaSpMap.put(SP_MNI_REQ_SIGN, Collections.EMPTY_SET);

extendedACMetaSpMap.put(SP_MNI_RESP_SIGN, Collections.EMPTY_SET);

extendedACMetaSpMap.put(WANT_ARTIF_RESP_SIGN, Collections.EMPTY_SET);

extendedACMetaSpMap.put(WANT_POST_RESP_SIGN, Collections.EMPTY_SET);

extendedACMetaSpMap.put(SP_AUTHN_CONTEXT_MAPPER,

Collections.EMPTY_SET);

extendedACMetaSpMap.put(SP_AUTHN_CONTEXT_CLASS_REF_MAPPING,

Collections.EMPTY_SET);

extendedACMetaSpMap.put(SP_AUTHN_CONTEXT_COMPARISON,

Collections.EMPTY_SET);

extendedACMetaSpMap.put(ASSERT_TIME_SKEW, Collections.EMPTY_SET);

extendedACMetaSpMap.put(SP_BASIC_AUTH_ON, Collections.EMPTY_SET);

extendedACMetaSpMap.put(SP_BASIC_AUTH_USER, Collections.EMPTY_SET);

extendedACMetaSpMap.put(SP_BASIC_AUTH_PWD, Collections.EMPTY_SET);

extendedACMetaSpMap.put(ATTR_DO_NOT_WRITE_FEDERATION_INFO, Collections.EMPTY_SET);

}

//extended Assertion Processing metadata attributes for sp only

static {

extendedAPMetaSpMap.put(SP_ATTR_MAP, Collections.EMPTY_SET);

extendedAPMetaSpMap.put(SP_ATTR_MAPPER, Collections.EMPTY_SET);

extendedAPMetaSpMap.put(SP_AUTO_FED_ENABLED, Collections.EMPTY_SET);

extendedAPMetaSpMap.put(SP_AUTO_FED_ATTR, Collections.EMPTY_SET);

extendedAPMetaSpMap.put(SP_ACCT_MAPPER, Collections.EMPTY_SET);

extendedAPMetaSpMap.put(SP_USE_NAMEID, Collections.EMPTY_SET);

extendedAPMetaSpMap.put(TRANSIENT_USER, Collections.EMPTY_SET);

extendedAPMetaSpMap.put(LOCAL_AUTH_URL, Collections.EMPTY_SET);

extendedAPMetaSpMap.put(APP_LOGOUT_URL, Collections.EMPTY_SET);

extendedAPMetaSpMap.put(INTERMEDIATE_URL, Collections.EMPTY_SET);

extendedAPMetaSpMap.put(DEFAULT_RELAY_STATE, Collections.EMPTY_SET);

extendedAPMetaSpMap.put(SAML2_AUTH_MODULE, Collections.EMPTY_SET);

extendedAPMetaSpMap.put(ATTR_SP_ADAPTER, Collections.EMPTY_SET);

extendedAPMetaSpMap.put(ATTR_SP_ADAPTER_ENV, Collections.EMPTY_SET);

extendedAPMetaSpMap.put(ARTI_MSG_ENCODE, Collections.EMPTY_SET);

// extendedAPMetaSpMap.put(ATTR_DO_NOT_WRITE_FEDERATION_INFO, Collections.EMPTY_SET);

}

//extended Services metadata attributes for sp only

static {

extendedSMetaSpMap.put(SP_META_ALIAS, Collections.EMPTY_SET);

}

//extended Advanced metadata attributes for sp only

static {

//IDP PROXY

extendedAdMetaSpMap.put(ALWAYS_IDP_PROXY, Collections.EMPTY_SET);

extendedAdMetaSpMap.put(ENABLE_IDP_PROXY, Collections.EMPTY_SET);

extendedAdMetaSpMap.put(IDP_PROXY_LIST, Collections.EMPTY_SET);

extendedAdMetaSpMap.put(IDP_PROXY_COUNT, Collections.EMPTY_SET);

extendedAdMetaSpMap.put(IDP_PROXY_INTROD, Collections.EMPTY_SET);

extendedAdMetaSpMap.put(IDP_PROXY_FINDER, Collections.EMPTY_SET);

//ECP

extendedAdMetaSpMap.put(ATTR_ECP_REQUEST_IDP_LIST_FINDER_IMPL,

Collections.EMPTY_SET);

extendedAdMetaSpMap.put(ATTR_ECP_REQUEST_IDP_LIST,

Collections.EMPTY_SET);

extendedAdMetaSpMap.put(ATTR_ECP_REQUEST_IDP_LIST_GET_COMPLETE,

Collections.EMPTY_SET);

//SAE

extendedAdMetaSpMap.put(ATTR_SAE_SP_APP_SECRET_LIST,

Collections.EMPTY_SET);

extendedAdMetaSpMap.put(ATTR_SAE_SP_URL, Collections.EMPTY_SET);

extendedAdMetaSpMap.put(ATTR_SAE_LOGOUT_URL, Collections.EMPTY_SET);

extendedAdMetaSpMap.put(SP_SESSION_SYNC_ENABLED, Collections.EMPTY_SET);

//Relay State URL List

extendedAdMetaSpMap.put(ATTR_RELAY_STATE_SP_URL_LIST,

Collections.EMPTY_SET);

}

static {

xacmlPDPExtendedMeta.put(ATTR_WANT_ASSERTION_SIGNED,

Collections.EMPTY_SET);

xacmlPDPExtendedMeta.put(ATTR_SIGNING_CERT_ALIAS,

Collections.EMPTY_SET);

xacmlPDPExtendedMeta.put(ATTR_ENCRYPTION_CERT_ALIAS,

Collections.EMPTY_SET);

xacmlPDPExtendedMeta.put(ATTR_BASIC_AUTH_ON,

Collections.EMPTY_SET);

xacmlPDPExtendedMeta.put(ATTR_BASIC_AUTH_USER,

Collections.EMPTY_SET);

xacmlPDPExtendedMeta.put(ATTR_BASIC_AUTH_PASSWORD,

Collections.EMPTY_SET);

xacmlPDPExtendedMeta.put(ATTR_WANT_XACML_AUTHZ_DECISION_QUERY_SIGNED,

Collections.EMPTY_SET);

xacmlPDPExtendedMeta.put(ATTR_WANT_ASSERTION_ENCRYPTED,

Collections.EMPTY_SET);

xacmlPDPExtendedMeta.put(ATTR_COTLIST,

Collections.EMPTY_SET);

}

static {

xacmlPEPExtendedMeta.put(ATTR_WANT_ASSERTION_SIGNED,

Collections.EMPTY_SET);

xacmlPEPExtendedMeta.put(ATTR_SIGNING_CERT_ALIAS,

Collections.EMPTY_SET);

xacmlPEPExtendedMeta.put(ATTR_ENCRYPTION_CERT_ALIAS,

Collections.EMPTY_SET);

xacmlPEPExtendedMeta.put(ATTR_BASIC_AUTH_ON,

Collections.EMPTY_SET);

xacmlPEPExtendedMeta.put(ATTR_BASIC_AUTH_USER,

Collections.EMPTY_SET);

xacmlPEPExtendedMeta.put(ATTR_BASIC_AUTH_PASSWORD,

Collections.EMPTY_SET);

xacmlPEPExtendedMeta.put(ATTR_WANT_XACML_AUTHZ_DECISION_RESPONSE_SIGNED,

Collections.EMPTY_SET);

xacmlPEPExtendedMeta.put(ATTR_WANT_ASSERTION_ENCRYPTED,

Collections.EMPTY_SET);

xacmlPEPExtendedMeta.put(ATTR_COTLIST,

Collections.EMPTY_SET);

}

//attributes for attribute authority

static {

extAttrAuthMap.put(SIGN_CERT_ALIAS, Collections.EMPTY_SET);

extAttrAuthMap.put(ENCRYPT_CERT_ALIAS, Collections.EMPTY_SET);

extAttrAuthMap.put(DEF_AUTH_MAPPER, Collections.EMPTY_SET);

extAttrAuthMap.put(X509_AUTH_MAPPER, Collections.EMPTY_SET);

extAttrAuthMap.put(SUB_DATA_STORE, Collections.EMPTY_SET);

extAttrAuthMap.put(ASSERTION_ID_REQ_MAPPER,

Collections.EMPTY_SET);

}

//attributes for authn authority

static {

extAuthnAuthMap.put(SIGN_CERT_ALIAS, Collections.EMPTY_SET);

extAuthnAuthMap.put(ENCRYPT_CERT_ALIAS, Collections.EMPTY_SET);

extAuthnAuthMap.put(ASSERTION_ID_REQ_MAPPER, Collections.EMPTY_SET);

}

//attributes for attribute query

static {

extattrQueryMap.put(SIGN_CERT_ALIAS, Collections.EMPTY_SET);

extattrQueryMap.put(ENCRYPT_CERT_ALIAS, Collections.EMPTY_SET);

}

public SAMLv2ModelImpl(HttpServletRequest req, Map map) {

super(req, map);

}

/**

public Map getStandardIdentityProviderAttributes(

String realm,

String entityName

) throws AMConsoleException {

String[] params = {realm, entityName,"SAMLv2", "IDP-Standard"};

logEvent("ATTEMPT_GET_ENTITY_DESCRIPTOR_ATTR_VALUES", params);

Map map = new HashMap();

IDPSSODescriptorElement idpssoDescriptor = null;

try {

SAML2MetaManager samlManager = getSAML2MetaManager();

idpssoDescriptor =

samlManager.getIDPSSODescriptor(realm,entityName);

if (idpssoDescriptor != null) {

// retrieve WantAuthnRequestsSigned

map.put(WANT_AUTHN_REQ_SIGNED,returnEmptySetIfValueIsNull(

idpssoDescriptor.isWantAuthnRequestsSigned()));

//retrieve ArtifactResolutionService

map.put(ART_RES_LOCATION, Collections.EMPTY_SET);

map.put(ART_RES_INDEX, Collections.EMPTY_SET);

map.put(ART_RES_ISDEFAULT, Collections.EMPTY_SET);

List artList =

idpssoDescriptor.getArtifactResolutionService();

if (!artList.isEmpty()) {

ArtifactResolutionServiceElement key =

(ArtifactResolutionServiceElement)artList.get(0);

map.put(ART_RES_LOCATION,

returnEmptySetIfValueIsNull(key.getLocation()));

map.put(ART_RES_INDEX,

returnEmptySetIfValueIsNull(Integer.toString(

key.getIndex())));

map.put(ART_RES_ISDEFAULT,

returnEmptySetIfValueIsNull(key.isIsDefault()));

}

//retrieve SingleLogoutService

map.put(SINGLE_LOGOUT_HTTP_LOCATION, Collections.EMPTY_SET);

map.put(SINGLE_LOGOUT_HTTP_RESP_LOCATION,

Collections.EMPTY_SET);

map.put(SLO_POST_LOC, Collections.EMPTY_SET);

map.put(SLO_POST_RESPLOC, Collections.EMPTY_SET);

map.put(SINGLE_LOGOUT_SOAP_LOCATION, Collections.EMPTY_SET);

map.put(SINGLE_LOGOUT_DEFAULT, Collections.EMPTY_SET);

List logoutList = idpssoDescriptor.getSingleLogoutService();

for (int i=0; i<logoutList.size(); i++) {

SingleLogoutServiceElement spslsElem =

(SingleLogoutServiceElement) logoutList.get(i);

String tmp = spslsElem.getBinding();

if (i == 0) {

map.put(SINGLE_LOGOUT_DEFAULT,

returnEmptySetIfValueIsNull(tmp));

}

if (tmp.contains(httpRedirect)) {

map.put(SINGLE_LOGOUT_HTTP_LOCATION,

returnEmptySetIfValueIsNull(

spslsElem.getLocation()));

map.put(SINGLE_LOGOUT_HTTP_RESP_LOCATION,

returnEmptySetIfValueIsNull(

spslsElem.getResponseLocation()));

} else if (tmp.contains(httpPost)) {

map.put(SLO_POST_LOC,

returnEmptySetIfValueIsNull(

spslsElem.getLocation()));

map.put(SLO_POST_RESPLOC,

returnEmptySetIfValueIsNull(

spslsElem.getResponseLocation()));

} else if (tmp.contains(soap)) {

map.put(SINGLE_LOGOUT_SOAP_LOCATION,

returnEmptySetIfValueIsNull(

spslsElem.getLocation()));

}

}

//retrieve ManageNameIDService

map.put(MANAGE_NAMEID_HTTP_LOCATION,Collections.EMPTY_SET);

map.put(MANAGE_NAMEID_HTTP_RESP_LOCATION,

Collections.EMPTY_SET);

map.put(MNI_POST_LOC,Collections.EMPTY_SET);

map.put(MNI_POST_RESPLOC,Collections.EMPTY_SET);

map.put(MANAGE_NAMEID_SOAP_LOCATION,Collections.EMPTY_SET);

map.put(SINGLE_MANAGE_NAMEID_DEFAULT, Collections.EMPTY_SET);

List manageNameIdList =

idpssoDescriptor.getManageNameIDService();

for (int i=0; i<manageNameIdList.size(); i++) {

ManageNameIDServiceElement mniElem =

(ManageNameIDServiceElement) manageNameIdList.get(i);

String tmp = mniElem.getBinding();

if (i == 0) {

map.put(SINGLE_MANAGE_NAMEID_DEFAULT,

returnEmptySetIfValueIsNull(tmp));

}

if (tmp.contains(httpRedirect)) {

map.put(MANAGE_NAMEID_HTTP_LOCATION,

returnEmptySetIfValueIsNull(

mniElem.getLocation()));

map.put(MANAGE_NAMEID_HTTP_RESP_LOCATION,

returnEmptySetIfValueIsNull(

mniElem.getResponseLocation()));

} else if (tmp.contains(httpPost)) {

map.put(MNI_POST_LOC,

returnEmptySetIfValueIsNull(

mniElem.getLocation()));

map.put(MNI_POST_RESPLOC,

returnEmptySetIfValueIsNull(

mniElem.getResponseLocation()));

} else if (tmp.contains(soap)) {

map.put(MANAGE_NAMEID_SOAP_LOCATION,

returnEmptySetIfValueIsNull(

mniElem.getLocation()));

}

}

//retrieve nameid mapping service

map.put(NAME_ID_MAPPPING, Collections.EMPTY_SET);

List nameIDmappingList =

idpssoDescriptor.getNameIDMappingService();

if (!nameIDmappingList.isEmpty()) {

NameIDMappingServiceElement namidElem1 =

(NameIDMappingServiceElement)nameIDmappingList.get(0);

map.put(NAME_ID_MAPPPING,

returnEmptySetIfValueIsNull(

namidElem1.getLocation()));

}

//retrieve nameid format

map.put(NAMEID_FORMAT, (OrderedSet) convertListToSet(

idpssoDescriptor.getNameIDFormat()));

//retrieve single sign on service

map.put(SINGLE_SIGNON_HTTP_LOCATION, Collections.EMPTY_SET);

map.put(SINGLE_SIGNON_SOAP_LOCATION, Collections.EMPTY_SET);

map.put(SSO_SOAPS_LOC, Collections.EMPTY_SET);

List signonList = idpssoDescriptor.getSingleSignOnService();

for (int i=0; i<signonList.size(); i++) {

SingleSignOnServiceElement signElem =

(SingleSignOnServiceElement) signonList.get(i);

String tmp = signElem.getBinding();

if (tmp.contains(httpRedirect)) {

map.put(SINGLE_SIGNON_HTTP_LOCATION,

returnEmptySetIfValueIsNull(

signElem.getLocation()));

} else if (tmp.contains(httpPost)) {

map.put(SINGLE_SIGNON_SOAP_LOCATION,

returnEmptySetIfValueIsNull(

signElem.getLocation()));

} else if (tmp.contains(soap)) {

map.put(SSO_SOAPS_LOC,

returnEmptySetIfValueIsNull(

signElem.getLocation()));

}

}

//retrieve key descriptor encryption details if present

map.put(TF_KEY_NAME, Collections.EMPTY_SET);

map.put(TF_ALGORITHM, Collections.EMPTY_SET);

if (idpssoDescriptor.getKeyDescriptor() != null ) {

getKeyandAlgorithm(idpssoDescriptor, map);

}

}

logEvent("SUCCEED_GET_ENTITY_DESCRIPTOR_ATTR_VALUES", params);

} catch (SAML2MetaException e) {

debug.warning

("SAMLv2ModelImpl.getIdentityProviderAttributes:", e);

String strError = getErrorString(e);

String[] paramsEx =

{realm, entityName, "SAMLv2", "IDP-Standard", strError};

logEvent("FEDERATION_EXCEPTION_GET_ENTITY_DESCRIPTOR_ATTR_VALUES",

paramsEx);

throw new AMConsoleException(strError);

}

return map;

}

/**

public Map getExtendedIdentityProviderAttributes(

String realm,

String entityName

) throws AMConsoleException {

String[] params = {realm, entityName, "SAMLv2", "IDP-Extended"};

logEvent("ATTEMPT_GET_ENTITY_DESCRIPTOR_ATTR_VALUES", params);

Map map = null;

IDPSSOConfigElement idpssoConfig = null;

try {

SAML2MetaManager samlManager = getSAML2MetaManager();

idpssoConfig = samlManager.getIDPSSOConfig(realm,entityName);

if (idpssoConfig != null) {

BaseConfigType baseConfig = (BaseConfigType)idpssoConfig;

map = SAML2MetaUtils.getAttributes(baseConfig);

}

logEvent("SUCCEED_GET_ENTITY_DESCRIPTOR_ATTR_VALUES", params);

} catch (SAML2MetaException e) {

debug.warning

("SAMLv2ModelImpl.getExtIdentityProviderAttributes:", e);

String strError = getErrorString(e);

String[] paramsEx =

{realm, entityName, "SAMLv2", "IDP-Extended", strError};

logEvent("FEDERATION_EXCEPTION_GET_ENTITY_DESCRIPTOR_ATTR_VALUES",

paramsEx);

throw new AMConsoleException(strError);

}

return (map != null) ? map : Collections.EMPTY_MAP;

}

/**

public String getMetaalias(

String realm,

String entityName,

String role

) throws AMConsoleException {

String[] params = {realm, entityName, "SAMLv2", "Extended"};

logEvent("ATTEMPT_GET_METAALIAS", params);

String metaAlias = null;

IDPSSOConfigElement idpssoConfig = null;

SPSSOConfigElement spssoConfig = null;

try {

SAML2MetaManager samlManager = getSAML2MetaManager();

if (role.equals(EntityModel.IDENTITY_PROVIDER)) {

idpssoConfig = samlManager.getIDPSSOConfig(realm,entityName);

if (idpssoConfig != null) {

BaseConfigType baseConfig = (BaseConfigType)idpssoConfig;

metaAlias = baseConfig.getMetaAlias();

}

} else if (role.equals(EntityModel.SERVICE_PROVIDER)) {

spssoConfig = samlManager.getSPSSOConfig(realm,entityName);

if (spssoConfig != null) {

BaseConfigType baseConfig = (BaseConfigType)spssoConfig;

metaAlias = baseConfig.getMetaAlias();

}

}

logEvent("SUCCEED_GET_METAALIAS", params);

} catch (SAML2MetaException e) {

debug.warning

("SAMLv2ModelImpl.getMetaalias:", e);

String strError = getErrorString(e);

String[] paramsEx =

{realm, entityName, "SAMLv2", "Extended", strError};

logEvent("FEDERATION_EXCEPTION_GET_METAALIAS",

paramsEx);

throw new AMConsoleException(strError);

}

return metaAlias;

}

/**

public Map getStandardServiceProviderAttributes(

String realm,

String entityName

) throws AMConsoleException {

String[] params = {realm, entityName,"SAMLv2", "SP-Standard"};

logEvent("ATTEMPT_GET_ENTITY_DESCRIPTOR_ATTR_VALUES", params);

Map map = new HashMap();

SPSSODescriptorElement spssoDescriptor = null;

try {

SAML2MetaManager samlManager = getSAML2MetaManager();

spssoDescriptor = samlManager.getSPSSODescriptor(realm,entityName);

if (spssoDescriptor != null) {

// retrieve WantAuthnRequestsSigned

map.put(IS_AUTHN_REQ_SIGNED,

returnEmptySetIfValueIsNull(

spssoDescriptor.isAuthnRequestsSigned()));

map.put(WANT_ASSERTIONS_SIGNED,

returnEmptySetIfValueIsNull(

spssoDescriptor.isWantAssertionsSigned()));

//retrieve SingleLogoutService

map.put(SP_SINGLE_LOGOUT_HTTP_LOCATION, Collections.EMPTY_SET);

map.put(SP_SINGLE_LOGOUT_HTTP_RESP_LOCATION,

Collections.EMPTY_SET);

map.put(SP_SLO_POST_LOC, Collections.EMPTY_SET);

map.put(SP_SLO_POST_RESPLOC, Collections.EMPTY_SET);

map.put(SP_SINGLE_LOGOUT_SOAP_LOCATION, Collections.EMPTY_SET);

map.put(SP_LOGOUT_DEFAULT, Collections.EMPTY_SET);

List splogoutList = spssoDescriptor.getSingleLogoutService();

for (int i=0; i<splogoutList.size(); i++) {

SingleLogoutServiceElement spslsElem =

(SingleLogoutServiceElement) splogoutList.get(i);

String tmp = spslsElem.getBinding();

if (i == 0) {

map.put(SP_LOGOUT_DEFAULT,

returnEmptySetIfValueIsNull(tmp));

}

if (tmp.contains(httpRedirect)) {

map.put(SP_SINGLE_LOGOUT_HTTP_LOCATION,

returnEmptySetIfValueIsNull(

spslsElem.getLocation()));

map.put(SP_SINGLE_LOGOUT_HTTP_RESP_LOCATION,

returnEmptySetIfValueIsNull(

spslsElem.getResponseLocation()));

} else if (tmp.contains(httpPost)) {

map.put(SP_SLO_POST_LOC,

returnEmptySetIfValueIsNull(

spslsElem.getLocation()));

map.put(SP_SLO_POST_RESPLOC,

returnEmptySetIfValueIsNull(

spslsElem.getResponseLocation()));

} else if (tmp.contains(soap)) {

map.put(SP_SINGLE_LOGOUT_SOAP_LOCATION,

returnEmptySetIfValueIsNull(spslsElem.getLocation()));

}

}

//retrieve ManageNameIDService

map.put(SP_MANAGE_NAMEID_HTTP_LOCATION, Collections.EMPTY_SET);

map.put(SP_MANAGE_NAMEID_HTTP_RESP_LOCATION,

Collections.EMPTY_SET);

map.put(SP_MNI_POST_LOC, Collections.EMPTY_SET);

map.put(SP_MNI_POST_RESPLOC, Collections.EMPTY_SET);

map.put(SP_MANAGE_NAMEID_SOAP_LOCATION, Collections.EMPTY_SET);

map.put(SP_MANAGE_NAMEID_SOAP_RESP_LOCATION,

Collections.EMPTY_SET);

map.put(SP_MNI_DEFAULT, Collections.EMPTY_SET);

List manageNameIdList =

spssoDescriptor.getManageNameIDService();

for (int i=0; i<manageNameIdList.size(); i++) {

ManageNameIDServiceElement mniElem =

(ManageNameIDServiceElement) manageNameIdList.get(i);

String tmp = mniElem.getBinding();

if (i == 0) {

map.put(SP_MNI_DEFAULT,

returnEmptySetIfValueIsNull(tmp));

}

if (tmp.contains(httpRedirect)) {

map.put(SP_MANAGE_NAMEID_HTTP_LOCATION,

returnEmptySetIfValueIsNull(mniElem.getLocation()));

map.put(SP_MANAGE_NAMEID_HTTP_RESP_LOCATION,

returnEmptySetIfValueIsNull(

mniElem.getResponseLocation()));

} else if (tmp.contains(httpPost)) {

map.put(SP_MNI_POST_LOC,

returnEmptySetIfValueIsNull(

mniElem.getLocation()));

map.put(SP_MNI_POST_RESPLOC,

returnEmptySetIfValueIsNull(

mniElem.getResponseLocation()));

} else if (tmp.contains(soap)) {

map.put(SP_MANAGE_NAMEID_SOAP_LOCATION,

returnEmptySetIfValueIsNull(mniElem.getLocation()));

map.put(SP_MANAGE_NAMEID_SOAP_RESP_LOCATION,

returnEmptySetIfValueIsNull(

mniElem.getResponseLocation()));

}

}

//retrieve nameid format

map.put(NAMEID_FORMAT, (OrderedSet) convertListToSet(

spssoDescriptor.getNameIDFormat()));

//retrieve key descriptor encryption details if present

map.put(TF_KEY_NAME, Collections.EMPTY_SET);

map.put(TF_ALGORITHM, Collections.EMPTY_SET);

if (spssoDescriptor.getKeyDescriptor() != null ) {

getKeyandAlgorithm(spssoDescriptor, map);

}

}

logEvent("SUCCEED_GET_ENTITY_DESCRIPTOR_ATTR_VALUES", params);

} catch (SAML2MetaException e) {

debug.warning

("SAMLv2ModelImpl.getStandardServiceProviderAttribute:", e);

String strError = getErrorString(e);

String[] paramsEx =

{realm, entityName, "SAMLv2", "SP-Standard", strError};

logEvent("FEDERATION_EXCEPTION_GET_ENTITY_DESCRIPTOR_ATTR_VALUES",

paramsEx);

throw new AMConsoleException(strError);

}

return map;

}

/**

public List getAssertionConsumerServices(

String realm,

String entityName

) throws AMConsoleException {

List asconsServiceList = null;

SPSSODescriptorElement spssoDescriptor = null;

try {

SAML2MetaManager samlManager = getSAML2MetaManager();

spssoDescriptor = samlManager.getSPSSODescriptor(realm,entityName);

if (spssoDescriptor != null) {

asconsServiceList =

spssoDescriptor.getAssertionConsumerService();

}

} catch (SAML2MetaException e) {

if (debug.warningEnabled()) {

debug.warning("SAMLv2ModelImpl.getAssertionConsumerService", e);

}

throw new AMConsoleException(getErrorString(e));

}

return asconsServiceList;

}

/*

public AssertionConsumerServiceElement getAscObject()

throws AMConsoleException {

com.sun.identity.saml2.jaxb.metadata.ObjectFactory objFact = new

com.sun.identity.saml2.jaxb.metadata.ObjectFactory();

AssertionConsumerServiceElement acsElem = null;

try {

acsElem = objFact.createAssertionConsumerServiceElement();

} catch (JAXBException e) {

if (debug.warningEnabled()) {

debug.warning("SAMLv2ModelImpl.getAscObject:", e);

}

throw new AMConsoleException(getErrorString(e));

}

return acsElem;

}

/**

public Map getExtendedServiceProviderAttributes(

String realm,

String entityName

) throws AMConsoleException {

String[] params = {realm, entityName,"SAMLv2", "SP-Extended"};

logEvent("ATTEMPT_GET_ENTITY_DESCRIPTOR_ATTR_VALUES", params);

Map map = null;

SPSSOConfigElement spssoConfig = null;

try {

SAML2MetaManager samlManager = getSAML2MetaManager();

spssoConfig = samlManager.getSPSSOConfig(realm,entityName);

if (spssoConfig != null) {

BaseConfigType baseConfig = (BaseConfigType)spssoConfig;

map = SAML2MetaUtils.getAttributes(baseConfig);

}

logEvent("SUCCEED_GET_ENTITY_DESCRIPTOR_ATTR_VALUES", params);

} catch (SAML2MetaException e) {

debug.warning(

"SAMLv2ModelImpl.getExtendedServiceProviderAttributes:", e);

String strError = getErrorString(e);

String[] paramsEx =

{realm, entityName, "SAMLv2", "SP-Extended", strError};

logEvent("FEDERATION_EXCEPTION_GET_ENTITY_DESCRIPTOR_ATTR_VALUES",

paramsEx);

throw new AMConsoleException(strError);

}

return (map != null) ? map : Collections.EMPTY_MAP;

}

/**

public void setIDPStdAttributeValues(

String realm,

String entityName,

Map idpStdValues

) throws AMConsoleException {

String[] params = {realm, entityName, "SAMLv2", "IDP-Standard"};

logEvent("ATTEMPT_MODIFY_ENTITY_DESCRIPTOR", params);

IDPSSODescriptorElement idpssoDescriptor = null;

com.sun.identity.saml2.jaxb.metadata.ObjectFactory objFact = new

com.sun.identity.saml2.jaxb.metadata.ObjectFactory();

try {

SAML2MetaManager samlManager = getSAML2MetaManager();

EntityDescriptorElement entityDescriptor =

samlManager.getEntityDescriptor(realm,entityName);

idpssoDescriptor =

samlManager.getIDPSSODescriptor(realm,entityName);

if (idpssoDescriptor != null) {

// save for WantAuthnRequestsSigned

if (idpStdValues.keySet().contains(WANT_AUTHN_REQ_SIGNED)) {

boolean value = setToBoolean(

idpStdValues, WANT_AUTHN_REQ_SIGNED);

idpssoDescriptor.setWantAuthnRequestsSigned(value);

}

// save for Artifact Resolution Service

if (idpStdValues.keySet().contains(ART_RES_LOCATION)) {

String artLocation = getResult(

idpStdValues, ART_RES_LOCATION);

String indexValue = getResult(idpStdValues, ART_RES_INDEX);

if (indexValue.length() == 0 || indexValue == null) {

indexValue = "0";

}

boolean isDefault =

setToBoolean(idpStdValues, ART_RES_ISDEFAULT);

ArtifactResolutionServiceElement elem = null;

List artList =

idpssoDescriptor.getArtifactResolutionService();

if (artList.isEmpty()) {

elem =

objFact.createArtifactResolutionServiceElement();

elem.setBinding(soapBinding);

elem.setLocation("");

elem.setIndex(0);

elem.setIsDefault(false);

idpssoDescriptor.getArtifactResolutionService().add(elem);

artList =

idpssoDescriptor.getArtifactResolutionService();

}

elem = (ArtifactResolutionServiceElement)artList.get(0);

elem.setLocation(artLocation);

elem.setIndex(Integer.parseInt(indexValue));

elem.setIsDefault(isDefault);

idpssoDescriptor.

getArtifactResolutionService().clear();

idpssoDescriptor.

getArtifactResolutionService().add(elem);

}

// save for Single Logout Service - Http-Redirect

if (idpStdValues.keySet().contains(

SINGLE_LOGOUT_HTTP_LOCATION)) {

String lohttpLocation = getResult(

idpStdValues, SINGLE_LOGOUT_HTTP_LOCATION);

String lohttpRespLocation = getResult(

idpStdValues, SINGLE_LOGOUT_HTTP_RESP_LOCATION);

String postLocation = getResult(

idpStdValues, SLO_POST_LOC);

String postRespLocation = getResult(

idpStdValues, SLO_POST_RESPLOC);

String losoapLocation = getResult(

idpStdValues, SINGLE_LOGOUT_SOAP_LOCATION);

String priority = getResult(

idpStdValues, SINGLE_LOGOUT_DEFAULT);

if (priority.contains("none")) {

if (lohttpLocation != null) {

priority = httpRedirectBinding;

} else if (postLocation != null) {

priority = httpPostBinding;

} else if (losoapLocation != null) {

priority = soapBinding;

}

}

List logList = idpssoDescriptor.getSingleLogoutService();

if (!logList.isEmpty()) {

logList.clear();

}

if (priority != null && priority.contains("HTTP-Redirect")) {

savehttpRedLogout(lohttpLocation,

lohttpRespLocation, logList, objFact);

savepostLogout(postLocation,

postRespLocation, logList, objFact);

savesoapLogout(losoapLocation, logList, objFact);

} else if (priority != null &&

priority.contains("HTTP-POST"))

{

savepostLogout(postLocation,

postRespLocation, logList, objFact);

savehttpRedLogout(lohttpLocation,

lohttpRespLocation, logList, objFact);

savesoapLogout(losoapLocation, logList, objFact);

} else if (priority != null && priority.contains("SOAP")) {

savesoapLogout(losoapLocation, logList, objFact);

savehttpRedLogout(lohttpLocation,

lohttpRespLocation, logList, objFact);

savepostLogout(postLocation,

postRespLocation, logList, objFact);

}

}

// save for Manage Name ID Service

if (idpStdValues.keySet().contains(

MANAGE_NAMEID_HTTP_LOCATION)) {

String mnihttpLocation = getResult(

idpStdValues, MANAGE_NAMEID_HTTP_LOCATION);

String mnihttpRespLocation = getResult(

idpStdValues, MANAGE_NAMEID_HTTP_RESP_LOCATION);

String mnipostLocation = getResult(

idpStdValues, MNI_POST_LOC);

String mnipostRespLocation = getResult(

idpStdValues, MNI_POST_RESPLOC);

String mnisoapLocation = getResult(

idpStdValues, MANAGE_NAMEID_SOAP_LOCATION);

String priority = getResult(

idpStdValues, SINGLE_MANAGE_NAMEID_DEFAULT);

if (priority.contains("none")) {

if (mnihttpLocation != null) {

priority = httpRedirectBinding;

} else if (mnipostLocation != null) {

priority = httpPostBinding;

} else if (mnisoapLocation != null) {

priority = soapBinding;

}

}

List manageNameIdList =

idpssoDescriptor.getManageNameIDService();

if (!manageNameIdList.isEmpty()) {

manageNameIdList.clear();

}

if (priority != null && priority.contains("HTTP-Redirect")) {

savehttpRedMni(mnihttpLocation,

mnihttpRespLocation, manageNameIdList, objFact);

savepostMni(mnipostLocation,

mnipostRespLocation, manageNameIdList, objFact);

savesoapMni(mnisoapLocation, manageNameIdList, objFact);

} else if (priority != null && priority.contains("HTTP-POST")) {

savepostMni(mnipostLocation,

mnipostRespLocation, manageNameIdList, objFact);

savehttpRedMni(mnihttpLocation,

mnihttpRespLocation, manageNameIdList, objFact);

savesoapMni(mnisoapLocation, manageNameIdList, objFact);

} else if (priority != null && priority.contains("SOAP")) {

savesoapMni(mnisoapLocation, manageNameIdList, objFact);

savehttpRedMni(mnihttpLocation,

mnihttpRespLocation, manageNameIdList, objFact);

savepostMni(mnipostLocation,

mnipostRespLocation, manageNameIdList, objFact);

}

}

//save nameid mapping

if (idpStdValues.keySet().contains(NAME_ID_MAPPPING)) {

String nameIDmappingloc = getResult(

idpStdValues, NAME_ID_MAPPPING);

NameIDMappingServiceElement namidElem1 = null;

List nameIDmappingList =

idpssoDescriptor.getNameIDMappingService();

if (nameIDmappingList.isEmpty()) {

namidElem1 =

objFact.createNameIDMappingServiceElement();

namidElem1.setBinding(soapBinding);

idpssoDescriptor.getNameIDMappingService().

add(namidElem1);

nameIDmappingList =

idpssoDescriptor.getNameIDMappingService();

}

namidElem1 =

(NameIDMappingServiceElement)nameIDmappingList.get(0);

namidElem1.setLocation(nameIDmappingloc);

idpssoDescriptor.getNameIDMappingService().clear();

idpssoDescriptor.getNameIDMappingService().add(

namidElem1);

}

//save nameid format

if (idpStdValues.keySet().contains(NAMEID_FORMAT)) {

saveNameIdFormat(idpssoDescriptor, idpStdValues);

}

//save for SingleSignOnService

if (idpStdValues.keySet().contains(

SINGLE_SIGNON_HTTP_LOCATION))

{

String ssohttpLocation = getResult(

idpStdValues, SINGLE_SIGNON_HTTP_LOCATION);

String ssopostLocation = getResult(

idpStdValues, SINGLE_SIGNON_SOAP_LOCATION);

String ssoSoapLocation = getResult(

idpStdValues, SSO_SOAPS_LOC);

List signonList = idpssoDescriptor.getSingleSignOnService();

if (!signonList.isEmpty()) {

signonList.clear();

}

if (ssohttpLocation != null &&

ssohttpLocation.length() > 0)

{

SingleSignOnServiceElement slsElemRed =

objFact.createSingleSignOnServiceElement();

slsElemRed.setBinding(httpRedirectBinding);

slsElemRed.setLocation(ssohttpLocation);

signonList.add(slsElemRed);

}

if (ssopostLocation != null &&

ssopostLocation.length() > 0)

{

SingleSignOnServiceElement slsElemPost =

objFact.createSingleSignOnServiceElement();

slsElemPost.setBinding(httpPostBinding);

slsElemPost.setLocation(ssopostLocation);

signonList.add(slsElemPost);

}

if (ssoSoapLocation != null &&

ssoSoapLocation.length() > 0)

{

SingleSignOnServiceElement slsElemSoap =

objFact.createSingleSignOnServiceElement();

slsElemSoap.setBinding(soapBinding);

slsElemSoap.setLocation(ssoSoapLocation);

signonList.add(slsElemSoap);

}

}

samlManager.setEntityDescriptor(realm, entityDescriptor);

}

logEvent("SUCCEED_MODIFY_ENTITY_DESCRIPTOR", params);

} catch (SAML2MetaException e) {

debug.warning

("SAMLv2ModelImpl.setIDPStdAttributeValues:", e);

String strError = getErrorString(e);

String[] paramsEx =

{realm, entityName, "SAMLv2", "IDP-Standard", strError};

logEvent("FEDERATION_EXCEPTION_MODIFY_ENTITY_DESCRIPTOR",

paramsEx);

throw new AMConsoleException(strError);

} catch (JAXBException e) {

debug.warning("SAMLv2ModelImpl.setIDPStdAttributeValues:", e);

String strError = getErrorString(e);

String[] paramsEx =

{realm, entityName, "SAMLv2", "IDP-Standard", strError};

logEvent("FEDERATION_EXCEPTION_MODIFY_ENTITY_DESCRIPTOR",

paramsEx);

}

}

/**

public void setIDPExtAttributeValues(

String realm,

String entityName,

Map idpExtValues,

String location

) throws AMConsoleException {

String[] params = {realm, entityName, "SAMLv2", "IDP-Extended"};

logEvent("ATTEMPT_MODIFY_ENTITY_DESCRIPTOR", params);

String role = EntityModel.IDENTITY_PROVIDER;

try {

SAML2MetaManager samlManager = getSAML2MetaManager();

//entityConfig is the extended entity configuration object

EntityConfigElement entityConfig =

samlManager.getEntityConfig(realm,entityName);

//for remote cases

if (entityConfig == null) {

createExtendedObject(realm, entityName, location, role);

entityConfig =

samlManager.getEntityConfig(realm,entityName);

}

IDPSSOConfigElement idpssoConfig =

samlManager.getIDPSSOConfig(realm,entityName);

if (idpssoConfig != null) {

updateBaseConfig(idpssoConfig, idpExtValues, role);

}

//saves the attributes by passing the new entityConfig object

samlManager.setEntityConfig(realm,entityConfig);

logEvent("SUCCEED_MODIFY_ENTITY_DESCRIPTOR", params);

} catch (SAML2MetaException e) {

debug.error("SAMLv2ModelImpl.setIDPExtAttributeValues:", e);

String strError = getErrorString(e);

String[] paramsEx =

{realm, entityName, "SAMLv2", "IDP-Extended", strError};

logEvent("FEDERATION_EXCEPTION_MODIFY_ENTITY_DESCRIPTOR",

paramsEx);

} catch (JAXBException e) {

debug.error("SAMLv2ModelImpl.setIDPExtAttributeValues:", e);

String strError = getErrorString(e);

String[] paramsEx =

{realm, entityName, "SAMLv2", "IDP-Extended", strError};

logEvent("FEDERATION_EXCEPTION_MODIFY_ENTITY_DESCRIPTOR",

paramsEx);

} catch (AMConsoleException e) {

debug.error("SAMLv2ModelImpl.setIDPExtAttributeValues:", e);

String strError = getErrorString(e);

String[] paramsEx =

{realm, entityName, "SAMLv2", "IDP-Extended", strError};

logEvent("FEDERATION_EXCEPTION_MODIFY_ENTITY_DESCRIPTOR",

paramsEx);

}

}

/**

public void setSPStdAttributeValues(

String realm,

String entityName,

Map spStdValues,

List assertionConsumer

) throws AMConsoleException {

String[] params = {realm, entityName, "SAMLv2", "SP-Standard"};

logEvent("ATTEMPT_MODIFY_ENTITY_DESCRIPTOR", params);

SPSSODescriptorElement spssoDescriptor = null;

com.sun.identity.saml2.jaxb.metadata.ObjectFactory objFact = new

com.sun.identity.saml2.jaxb.metadata.ObjectFactory();

try {

SAML2MetaManager samlManager = getSAML2MetaManager();

EntityDescriptorElement entityDescriptor =

samlManager.getEntityDescriptor(realm,entityName);

spssoDescriptor =

samlManager.getSPSSODescriptor(realm,entityName);

if (spssoDescriptor != null) {

// save for Single Logout Service - Http-Redirect

if (spStdValues.keySet().contains(

SP_SINGLE_LOGOUT_HTTP_LOCATION))

{

String lohttpLocation = getResult(

spStdValues, SP_SINGLE_LOGOUT_HTTP_LOCATION);

String lohttpRespLocation = getResult(

spStdValues, SP_SINGLE_LOGOUT_HTTP_RESP_LOCATION);

String lopostLocation = getResult(

spStdValues, SP_SLO_POST_LOC);

String lopostRespLocation = getResult(

spStdValues, SP_SLO_POST_RESPLOC);

String losoapLocation = getResult(

spStdValues, SP_SINGLE_LOGOUT_SOAP_LOCATION);

String priority = getResult(

spStdValues, SP_LOGOUT_DEFAULT);

if (priority.contains("none")) {

if (lohttpLocation != null) {

priority = httpRedirectBinding;

} else if (lopostLocation != null) {

priority = httpPostBinding;

} else if (losoapLocation != null) {

priority = soapBinding;

}

}

List logList = spssoDescriptor.getSingleLogoutService();

if (!logList.isEmpty()) {

logList.clear();

}

if (priority != null && priority.contains("HTTP-Redirect")) {

savehttpRedLogout(lohttpLocation,

lohttpRespLocation, logList, objFact);

savepostLogout(lopostLocation,

lopostRespLocation, logList, objFact);

savesoapLogout(losoapLocation, logList, objFact);

} else if (priority != null &&

priority.contains("HTTP-POST"))

{

savepostLogout(lopostLocation,

lopostRespLocation, logList, objFact);

savehttpRedLogout(lohttpLocation,

lohttpRespLocation, logList, objFact);

savesoapLogout(losoapLocation, logList, objFact);

} else if (priority != null && priority.contains("SOAP")) {

savesoapLogout(losoapLocation, logList, objFact);

savehttpRedLogout(lohttpLocation,

lohttpRespLocation, logList, objFact);

savepostLogout(lopostLocation,

lopostRespLocation, logList, objFact);

}

}

// save for Manage Name ID Service

if (spStdValues.keySet().contains(

SP_MANAGE_NAMEID_HTTP_LOCATION))

{

String mnihttpLocation = getResult(

spStdValues, SP_MANAGE_NAMEID_HTTP_LOCATION);

String mnihttpRespLocation = getResult(

spStdValues, SP_MANAGE_NAMEID_HTTP_RESP_LOCATION);

String mnipostLocation = getResult(

spStdValues, SP_MNI_POST_LOC);

String mnipostRespLocation = getResult(

spStdValues, SP_MNI_POST_RESPLOC);

String mnisoapLocation = getResult(

spStdValues, SP_MANAGE_NAMEID_SOAP_LOCATION);

String mnisoapResLocation = getResult(

spStdValues, SP_MANAGE_NAMEID_SOAP_RESP_LOCATION);

String priority = getResult(

spStdValues, SP_MNI_DEFAULT);

if (priority.contains("none")) {

if (mnihttpLocation != null) {

priority = httpRedirectBinding;

} else if (mnipostLocation != null) {

priority = httpPostBinding;

} else if (mnisoapLocation != null) {

priority = soapBinding;

}

}

List manageNameIdList =

spssoDescriptor.getManageNameIDService();

if (!manageNameIdList.isEmpty()) {

manageNameIdList.clear();

}

if (priority != null && priority.contains("HTTP-Redirect")) {

savehttpRedMni(mnihttpLocation,

mnihttpRespLocation, manageNameIdList, objFact);

savepostMni(mnipostLocation,

mnipostRespLocation, manageNameIdList, objFact);

saveSPsoapMni(mnisoapLocation, mnisoapResLocation,

manageNameIdList, objFact);

} else if (priority != null &&

priority.contains("HTTP-POST"))

{

savepostMni(mnipostLocation,

mnipostRespLocation, manageNameIdList, objFact);

savehttpRedMni(mnihttpLocation,

mnihttpRespLocation, manageNameIdList, objFact);

saveSPsoapMni(mnisoapLocation, mnisoapResLocation,

manageNameIdList, objFact);

} else if (priority != null && priority.contains("SOAP")) {

saveSPsoapMni(mnisoapLocation, mnisoapResLocation,

manageNameIdList, objFact);

savehttpRedMni(mnihttpLocation,

mnihttpRespLocation, manageNameIdList, objFact);

savepostMni(mnipostLocation,

mnipostRespLocation, manageNameIdList, objFact);

}

}

//save for artifact, post and paos Assertion Consumer Service

if (!assertionConsumer.isEmpty() &&

assertionConsumer.size() > 0) {

List asconsServiceList =

spssoDescriptor.getAssertionConsumerService();

if (!asconsServiceList.isEmpty()) {

asconsServiceList.clear();

}

asconsServiceList.addAll(assertionConsumer);

}

//save nameid format

if (spStdValues.keySet().contains(NAMEID_FORMAT)) {

saveNameIdFormat(spssoDescriptor, spStdValues);

}

//save AuthnRequestsSigned

if (spStdValues.keySet().contains(IS_AUTHN_REQ_SIGNED)) {

boolean authnValue = setToBoolean(

spStdValues, IS_AUTHN_REQ_SIGNED);

spssoDescriptor.setAuthnRequestsSigned(authnValue);

}

//save WantAssertionsSigned

if (spStdValues.keySet().contains(WANT_ASSERTIONS_SIGNED)) {

boolean assertValue = setToBoolean(

spStdValues, WANT_ASSERTIONS_SIGNED);

spssoDescriptor.setWantAssertionsSigned(assertValue);

}

samlManager.setEntityDescriptor(realm, entityDescriptor);

}

logEvent("SUCCEED_MODIFY_ENTITY_DESCRIPTOR", params);

} catch (SAML2MetaException e) {

debug.warning

("SAMLv2ModelImpl.setSPStdAttributeValues:", e);

String strError = getErrorString(e);

String[] paramsEx =

{realm, entityName, "SAMLv2", "SP-Standard", strError};

logEvent("FEDERATION_EXCEPTION_MODIFY_ENTITY_DESCRIPTOR",

paramsEx);

throw new AMConsoleException(strError);

} catch (JAXBException e) {

debug.error("SAMLv2ModelImpl.setSPStdAttributeValues:", e);

String strError = getErrorString(e);

String[] paramsEx =

{realm, entityName, "SAMLv2", "SP-Standard", strError};

logEvent("FEDERATION_EXCEPTION_MODIFY_ENTITY_DESCRIPTOR",

paramsEx);

}

}

/**

public void setSPExtAttributeValues(

String realm,

String entityName,

Map spExtValues,

String location

) throws AMConsoleException {

String[] params = {realm, entityName, "SAMLv2", "SP-Extended"};

logEvent("ATTEMPT_MODIFY_ENTITY_DESCRIPTOR", params);

String role = EntityModel.SERVICE_PROVIDER;

try {

SAML2MetaManager samlManager = getSAML2MetaManager();

//entityConfig is the extended entity configuration object

EntityConfigElement entityConfig =

samlManager.getEntityConfig(realm,entityName);

//for remote cases

if (entityConfig == null) {

createExtendedObject(realm, entityName, location, role);

entityConfig =

samlManager.getEntityConfig(realm,entityName);

}

SPSSOConfigElement spssoConfig = samlManager.getSPSSOConfig(

realm,entityName);

if (spssoConfig != null){

updateBaseConfig(spssoConfig, spExtValues, role);

}

//saves the attributes by passing the new entityConfig object

samlManager.setEntityConfig(realm,entityConfig);

logEvent("SUCCEED_MODIFY_ENTITY_DESCRIPTOR", params);

} catch (SAML2MetaException e) {

debug.error("SAMLv2ModelImpl.setSPExtAttributeValues:", e);

String strError = getErrorString(e);

String[] paramsEx =

{realm, entityName, "SAMLv2", "SP Ext", strError};

logEvent("FEDERATION_EXCEPTION_MODIFY_ENTITY_DESCRIPTOR",

paramsEx);

} catch (JAXBException e) {

debug.error("SAMLv2ModelImpl.setSPExtAttributeValues:", e);

String strError = getErrorString(e);

String[] paramsEx =

{realm, entityName, "SAMLv2", "SP Ext", strError};

logEvent("FEDERATION_EXCEPTION_MODIFY_ENTITY_DESCRIPTOR",

paramsEx);

} catch (AMConsoleException e) {

debug.error("SAMLv2ModelImpl.setSPExtAttributeValues:", e);

String strError = getErrorString(e);

String[] paramsEx =

{realm, entityName, "SAMLv2", "SP Ext", strError};

logEvent("FEDERATION_EXCEPTION_MODIFY_ENTITY_DESCRIPTOR",

paramsEx);

}

}

/**

private void updateBaseConfig(

BaseConfigType baseConfig,

Map values,

String role

) throws JAXBException, AMConsoleException {

List attrList = baseConfig.getAttribute();

if (role.equals(EntityModel.IDENTITY_PROVIDER)) {

attrList.clear();

baseConfig = addAttributeType(extendedMetaIdpMap, baseConfig);

attrList = baseConfig.getAttribute();

} else if (role.equals(EntityModel.SERVICE_PROVIDER)) {

attrList.clear();

baseConfig = addAttributeType(extendedMetaSpMap, baseConfig);

attrList = baseConfig.getAttribute();

} else if (role.equals(EntityModel.POLICY_ENFORCEMENT_POINT_DESCRIPTOR)) {

attrList.clear();

baseConfig = addAttributeType(xacmlPEPExtendedMeta, baseConfig);

attrList = baseConfig.getAttribute();

} else if (role.equals(EntityModel.POLICY_DECISION_POINT_DESCRIPTOR)) {

attrList.clear();

baseConfig = addAttributeType(xacmlPDPExtendedMeta,baseConfig);

attrList = baseConfig.getAttribute();

}

for (Iterator it = attrList.iterator(); it.hasNext(); ) {

AttributeElement avpnew = (AttributeElement)it.next();

String name = avpnew.getName();

if (values.keySet().contains(name)) {

Set set = (Set)values.get(name);

if (set != null) {

avpnew.getValue().clear();

avpnew.getValue().addAll(set);

}

}

}

}

/**

public void updateKeyinfo(

String realm,

String entityName,

Map extValues,

Map stdValues,

boolean isIDP

) throws AMConsoleException {

String keysize = getResult(stdValues, TF_KEY_NAME);

String algorithm = getResult(stdValues, TF_ALGORITHM);

String e_certAlias = null;

String s_certAlias = null;

if (isIDP) {

e_certAlias = getResult(extValues, IDP_ENCRYPT_CERT_ALIAS);

s_certAlias = getResult(extValues, IDP_SIGN_CERT_ALIAS);

} else {

e_certAlias = getResult(extValues, SP_ENCRYPT_CERT_ALIAS);

s_certAlias = getResult(extValues, SP_SIGN_CERT_ALIAS);

}

int keysi = (keysize != null && keysize.length() > 0) ?

Integer.parseInt(keysize) : 128;

String alg = (algorithm == null || algorithm.length() == 0) ?

"http://www.w3.org/2001/04/xmlenc#aes128-cbc" : algorithm;

try {

SAML2MetaSecurityUtils.updateProviderKeyInfo(realm,

entityName, s_certAlias, true, isIDP, alg, keysi);

SAML2MetaSecurityUtils.updateProviderKeyInfo(realm,

entityName, e_certAlias, false, isIDP, alg, keysi);

} catch (SAML2MetaException e) {

debug.warning ("SAMLv2ModelImpl.updateKeyinfo:", e);

throw new AMConsoleException(getErrorString(e));

}

}

/**

private void updateBaseConfig(

BaseConfigType baseConfig,

String attributeName,

List list

) throws AMConsoleException {

List attrList = baseConfig.getAttribute();

for (Iterator it = attrList.iterator(); it.hasNext(); ) {

AttributeElement avpnew = (AttributeElement)it.next();

String name = avpnew.getName();

if(name.equals(attributeName)){

avpnew.getValue().clear();

avpnew.getValue().addAll(list);

}

}

}

/**

private void saveNameIdFormat(

SSODescriptorType ssodescriptor,

Map values

) throws AMConsoleException {

List listtoSave = convertSetToList(

(Set)values.get(NAMEID_FORMAT));

ssodescriptor.getNameIDFormat().clear();

for (int i=0; i<listtoSave.size();i++) {

ssodescriptor.getNameIDFormat().add(listtoSave.get(i));

}

}

/**

private void getKeyandAlgorithm(

SSODescriptorType ssodescriptor,

Map map

) {

List keyList = ssodescriptor.getKeyDescriptor();

for (int i=0; i<keyList.size(); i++) {

KeyDescriptorElement keyOne =

(KeyDescriptorElement)keyList.get(i);

String type = keyOne.getUse();

if ((type == null) || (type.length() == 0) ||

type.equals("encryption")) {

List encryptMethod = keyOne.getEncryptionMethod();

if (!encryptMethod.isEmpty()) {

EncryptionMethodElement encrptElement =

(EncryptionMethodElement)encryptMethod.get(0);

String alg = encrptElement.getAlgorithm();

String size = null;

List keySizeList = encrptElement.getContent();

if (!keySizeList.isEmpty()) {

for (Iterator itt = keySizeList.listIterator();

itt.hasNext(); ) {

Object encrptType = (Object)itt.next();

if (encrptType.getClass().getName().

contains("KeySizeImpl")) {

EncryptionMethodType.KeySize keysizeElem =

(EncryptionMethodType.KeySize)

keySizeList.get(0);

BigInteger keysize = keysizeElem.getValue();

size = Integer.toString(keysize.intValue());

}

}

}

map.put(TF_KEY_NAME,

returnEmptySetIfValueIsNull(size));

map.put(TF_ALGORITHM,

returnEmptySetIfValueIsNull(alg));

}

}

}

}

/**

private void createExtendedObject(

String realm,

String entityName,

String location,

String role

) throws SAML2MetaException, JAXBException, AMConsoleException {

SAML2MetaManager samlManager = getSAML2MetaManager();

EntityDescriptorElement entityDescriptor =

samlManager.getEntityDescriptor(realm, entityName);

ObjectFactory objFactory = new ObjectFactory();

EntityConfigElement entityConfigElement =

objFactory.createEntityConfigElement();

entityConfigElement.setEntityID(entityName);

if (location.equals("remote")) {

entityConfigElement.setHosted(false);

} else {

entityConfigElement.setHosted(true);

}

List configList =

entityConfigElement.

getIDPSSOConfigOrSPSSOConfigOrAuthnAuthorityConfig();

BaseConfigType baseConfigIDP = null;

BaseConfigType baseConfigSP = null;

BaseConfigType baseConfigAuth = null;

AttributeAuthorityDescriptorElement attrauthDescriptor =

samlManager.getAttributeAuthorityDescriptor(realm,entityName);

AuthnAuthorityDescriptorElement authnauthDescriptor =

samlManager.getAuthnAuthorityDescriptor(realm,entityName);

AttributeQueryDescriptorElement attrQueryDescriptor =

samlManager.getAttributeQueryDescriptor(realm,entityName);

IDPSSODescriptorElement idpssoDesc =

samlManager.getIDPSSODescriptor(realm,entityName);

SPSSODescriptorElement spssoDesc =

samlManager.getSPSSODescriptor(realm,entityName);

XACMLAuthzDecisionQueryDescriptorElement xacmlAuthzDescriptor =

samlManager.getPolicyEnforcementPointDescriptor(

realm, entityName);

XACMLPDPDescriptorElement xacmlPDPDescriptor =

samlManager.getPolicyDecisionPointDescriptor(

realm, entityName);

if (isDualRole(entityDescriptor)) {

baseConfigIDP = objFactory.createIDPSSOConfigElement();

baseConfigSP = objFactory.createSPSSOConfigElement();

baseConfigIDP = addAttributeType(extendedMetaIdpMap, baseConfigIDP);

baseConfigSP = addAttributeType(extendedMetaSpMap, baseConfigSP);

configList.add(baseConfigIDP);

configList.add(baseConfigSP);

}else if (role.equals(EntityModel.IDENTITY_PROVIDER) ||

(idpssoDesc != null))

{

baseConfigIDP = objFactory.createIDPSSOConfigElement();

baseConfigIDP = addAttributeType(extendedMetaIdpMap, baseConfigIDP);

configList.add(baseConfigIDP);

} else if (role.equals(EntityModel.SERVICE_PROVIDER) ||

(spssoDesc != null))

{

baseConfigSP = objFactory.createSPSSOConfigElement();

baseConfigSP = addAttributeType(extendedMetaSpMap, baseConfigSP);

configList.add(baseConfigSP);

}

if (role.equals(EntityModel.SAML_ATTRAUTHORITY) ||

(attrauthDescriptor != null))

{

baseConfigAuth =

objFactory.createAttributeAuthorityConfigElement();

baseConfigAuth = addAttributeType(extAttrAuthMap, baseConfigAuth);

configList.add(baseConfigAuth);

}

if (role.equals(EntityModel.SAML_AUTHNAUTHORITY) ||

(authnauthDescriptor != null))

{

baseConfigAuth =

objFactory.createAuthnAuthorityConfigElement();

baseConfigAuth = addAttributeType(extAuthnAuthMap, baseConfigAuth);

configList.add(baseConfigAuth);

}

if (role.equals(EntityModel.SAML_ATTRQUERY) ||

(attrQueryDescriptor != null))

{

baseConfigAuth =

objFactory.createAttributeQueryConfigElement();

baseConfigAuth = addAttributeType(extattrQueryMap, baseConfigAuth);

configList.add(baseConfigAuth);

}

if (role.equals(EntityModel.POLICY_DECISION_POINT_DESCRIPTOR) ||

(xacmlPDPDescriptor != null))

{

baseConfigAuth =

objFactory.createXACMLPDPConfigElement();

baseConfigAuth = addAttributeType(

xacmlPDPExtendedMeta, baseConfigAuth);

configList.add(baseConfigAuth);

}

if (role.equals(EntityModel.POLICY_ENFORCEMENT_POINT_DESCRIPTOR) ||

(xacmlAuthzDescriptor != null))

{

baseConfigAuth =

objFactory.createXACMLAuthzDecisionQueryConfigElement();

baseConfigAuth = addAttributeType(

xacmlPEPExtendedMeta, baseConfigAuth);

configList.add(baseConfigAuth);

}

samlManager.setEntityConfig(realm, entityConfigElement);

}

private BaseConfigType addAttributeType(Map values, BaseConfigType bctype)

throws JAXBException{

ObjectFactory objFactory = new ObjectFactory();

for (Iterator iter = values.keySet().iterator();

iter.hasNext(); ) {

AttributeType avp = objFactory.createAttributeElement();

String key = (String)iter.next();

avp.setName(key);

avp.getValue().addAll(Collections.EMPTY_LIST);

bctype.getAttribute().add(avp);

}

return bctype;

}

/**

private boolean isDualRole(EntityDescriptorElement entityDescriptor) {

List roles = new ArrayList();

boolean dual = false;

if (entityDescriptor != null) {

if ( (SAML2MetaUtils.getSPSSODescriptor(

entityDescriptor) != null) && (

SAML2MetaUtils.getIDPSSODescriptor(

entityDescriptor) != null) ) {

dual = true;

}

}

return dual;

}

/**

public Map getPEPDescriptor(

String realm,

String entityName

) throws AMConsoleException {

String[] params = {realm, entityName,"SAMLv2", "XACML PEP"};

logEvent("ATTEMPT_GET_ENTITY_DESCRIPTOR_ATTR_VALUES", params);

Map data = null;

try {

SAML2MetaManager saml2Manager = getSAML2MetaManager();

XACMLAuthzDecisionQueryDescriptorElement xacmlAuthzDescriptor =

saml2Manager.getPolicyEnforcementPointDescriptor(

realm, entityName);

if (xacmlAuthzDescriptor != null) {

data = new HashMap(10);

//ProtocolSupportEnum

data.put(ATTR_TXT_PROTOCOL_SUPPORT_ENUM,

returnEmptySetIfValueIsNull(

xacmlAuthzDescriptor.getProtocolSupportEnumeration()));

if (xacmlAuthzDescriptor.isWantAssertionsSigned()) {

data.put(ATTR_WANT_ASSERTION_SIGNED, "true");

} else {

data.put(ATTR_WANT_ASSERTION_SIGNED, "false");

}

}

logEvent("SUCCEED_GET_ENTITY_DESCRIPTOR_ATTR_VALUES", params);

} catch (SAML2MetaException e) {

String strError = getErrorString(e);

String[] paramsEx =

{realm, entityName, "SAMLv2", "XACML PEP", strError};

logEvent("FEDERATION_EXCEPTION_GET_ENTITY_DESCRIPTOR_ATTR_VALUES",

paramsEx);

throw new AMConsoleException(strError);

}

return (data != null) ? data : Collections.EMPTY_MAP;

}

/**

public Map getPDPDescriptor(String realm, String entityName)

throws AMConsoleException

{

String[] params = {realm, entityName,"SAMLv2", "XACML PDP"};

logEvent("ATTEMPT_GET_ENTITY_DESCRIPTOR_ATTR_VALUES", params);

Map data = null;

try {

SAML2MetaManager saml2Manager = getSAML2MetaManager();

XACMLPDPDescriptorElement xacmlPDPDescriptor =

saml2Manager.getPolicyDecisionPointDescriptor(

realm,

entityName);

if (xacmlPDPDescriptor != null) {

data = new HashMap(10);

//ProtocolSupportEnum

data.put(ATTR_TXT_PROTOCOL_SUPPORT_ENUM,

returnEmptySetIfValueIsNull(

xacmlPDPDescriptor.getProtocolSupportEnumeration()));

List authzServiceList =

xacmlPDPDescriptor.getXACMLAuthzService();

if (authzServiceList.size() != 0) {

XACMLAuthzServiceElement authzService =

(XACMLAuthzServiceElement) authzServiceList.get(0);

data.put(ATTR_XACML_AUTHZ_SERVICE_BINDING,

returnEmptySetIfValueIsNull(

authzService.getBinding()));

data.put(ATTR_XACML_AUTHZ_SERVICE_LOCATION,

returnEmptySetIfValueIsNull(

authzService.getLocation()));

}

}

logEvent("SUCCEED_GET_ENTITY_DESCRIPTOR_ATTR_VALUES", params);

} catch (SAML2MetaException e) {

String strError = getErrorString(e);

String[] paramsEx =

{realm, entityName, "SAMLv2", "XACML PDP", strError};

logEvent("FEDERATION_EXCEPTION_GET_ENTITY_DESCRIPTOR_ATTR_VALUES",

paramsEx);

throw new AMConsoleException(strError);

}

return (data != null) ? data : Collections.EMPTY_MAP;

}

/**

public Map getPEPConfig(

String realm,

String entityName,

String location

) throws AMConsoleException {

String[] params = {realm, entityName, "SAMLv2", "XACML PEP"};

logEvent("ATTEMPT_GET_ENTITY_DESCRIPTOR_ATTR_VALUES", params);

String role = EntityModel.POLICY_ENFORCEMENT_POINT_DESCRIPTOR;

Map data = null;

List configList = null;

String metaAlias = null;

try {

SAML2MetaManager saml2Manager = getSAML2MetaManager();

XACMLAuthzDecisionQueryConfigElement xacmlAuthzConfigElement =

saml2Manager.getPolicyEnforcementPointConfig(

realm, entityName);

if (xacmlAuthzConfigElement != null) {

data = new HashMap();

configList = xacmlAuthzConfigElement.getAttribute();

metaAlias = xacmlAuthzConfigElement.getMetaAlias();

int size = configList.size();

for (int i=0; i< size; i++) {

AttributeType atype = (AttributeType) configList.get(i);

String name = atype.getName();

java.util.List value = atype.getValue();

data.put(atype.getName(),

returnEmptySetIfValueIsNull(atype.getValue()));

}

data.put("metaAlias", metaAlias);

} else {

createExtendedObject(realm, entityName, location, role);

}

logEvent("SUCCEED_GET_ENTITY_DESCRIPTOR_ATTR_VALUES", params);

} catch (JAXBException e) {

String strError = getErrorString(e);

String[] paramsEx =

{realm, entityName, "SAMLv2", "XACML PEP", strError};

logEvent("FEDERATION_EXCEPTION_GET_ENTITY_DESCRIPTOR_ATTR_VALUES",

paramsEx);

throw new AMConsoleException(strError);

} catch (SAML2MetaException e) {

String strError = getErrorString(e);

String[] paramsEx =

{realm, entityName, "SAMLv2", "XACML PEP", strError};

logEvent("FEDERATION_EXCEPTION_GET_ENTITY_DESCRIPTOR_ATTR_VALUES",

paramsEx);

throw new AMConsoleException(strError);

}

return (data != null) ? data : Collections.EMPTY_MAP;

}

/**

public Map getPDPConfig(

String realm,

String entityName,

String location

) throws AMConsoleException {

String[] params = {realm, entityName, "SAMLv2", "XACML PDP"};

logEvent("ATTEMPT_GET_ENTITY_DESCRIPTOR_ATTR_VALUES", params);

String role = EntityModel.POLICY_DECISION_POINT_DESCRIPTOR;

Map data = null;

List configList = null;

String metaAlias = null;

try {

SAML2MetaManager saml2Manager = getSAML2MetaManager();

XACMLPDPConfigElement xacmlPDPConfigElement =

saml2Manager.getPolicyDecisionPointConfig(

realm, entityName);

if (xacmlPDPConfigElement != null) {

data = new HashMap();

configList = xacmlPDPConfigElement.getAttribute() ;

metaAlias = xacmlPDPConfigElement.getMetaAlias();

int size = configList.size();

for (int i=0; i< size; i++) {

AttributeType atype = (AttributeType) configList.get(i);

String name = atype.getName();

java.util.List value = atype.getValue();

data.put(atype.getName(),

returnEmptySetIfValueIsNull(atype.getValue()));

}

data.put("metaAlias", metaAlias);

} else {

createExtendedObject(realm, entityName, location, role);

}

logEvent("SUCCEED_GET_ENTITY_DESCRIPTOR_ATTR_VALUES", params);

} catch (JAXBException e) {

String strError = getErrorString(e);

String[] paramsEx =

{realm, entityName, "SAMLv2", "XACML PDP", strError};

logEvent("FEDERATION_EXCEPTION_GET_ENTITY_DESCRIPTOR_ATTR_VALUES",

paramsEx);

throw new AMConsoleException(strError);

} catch (SAML2MetaException e) {

String strError = getErrorString(e);

String[] paramsEx =

{realm, entityName, "SAMLv2", "XACML PDP", strError};

logEvent("FEDERATION_EXCEPTION_GET_ENTITY_DESCRIPTOR_ATTR_VALUES",

paramsEx);

throw new AMConsoleException(strError);

}

return (data != null) ? data : Collections.EMPTY_MAP;

}

/**

public void updatePDPDescriptor(

String realm,

String entityName,

Map attrValues

) throws AMConsoleException {

String[] params = {realm, entityName, "SAMLv2", "XACML PDP"};

logEvent("ATTEMPT_MODIFY_ENTITY_DESCRIPTOR", params);

try {

SAML2MetaManager saml2Manager = getSAML2MetaManager();

EntityDescriptorElement entityDescriptor =

saml2Manager.getEntityDescriptor(realm, entityName) ;

XACMLPDPDescriptorElement pdpDescriptor =

saml2Manager.getPolicyDecisionPointDescriptor(

realm,

entityName);

if (pdpDescriptor != null) {

List authzServiceList = pdpDescriptor.getXACMLAuthzService();

if (authzServiceList.size() != 0) {

XACMLAuthzServiceElement authzService =

(XACMLAuthzServiceElement)authzServiceList.get(0);

authzService.setLocation((String)AMAdminUtils.getValue(

(Set)attrValues.get(

ATTR_XACML_AUTHZ_SERVICE_LOCATION)));

}

}

saml2Manager.setEntityDescriptor(realm, entityDescriptor);

logEvent("SUCCEED_MODIFY_ENTITY_DESCRIPTOR", params);

} catch (SAML2MetaException e) {

String strError = getErrorString(e);

String[] paramsEx =

{realm, entityName, "SAMLv2", "XACML PDP", strError};

logEvent("FEDERATION_EXCEPTION_MODIFY_ENTITY_DESCRIPTOR", paramsEx);

throw new AMConsoleException(strError);

}

}

/**

public void updatePDPConfig(

String realm,

String entityName,

String location,

Map attrValues

) throws AMConsoleException {

String[] params = {realm, entityName, "SAMLv2", "XACML PDP"};

logEvent("ATTEMPT_MODIFY_ENTITY_DESCRIPTOR", params);

String role = EntityModel.POLICY_DECISION_POINT_DESCRIPTOR;

try {

SAML2MetaManager saml2Manager = getSAML2MetaManager();

//entityConfig is the extended entity configuration object

EntityConfigElement entityConfig =

saml2Manager.getEntityConfig(realm,entityName);

if (entityConfig == null) {

throw new AMConsoleException("invalid.xacml.configuration");

}

XACMLPDPConfigElement pdpEntityConfig =

saml2Manager.getPolicyDecisionPointConfig(

realm, entityName);

if (pdpEntityConfig == null) {

throw new AMConsoleException("invalid.xacml.configuration");

} else {

updateBaseConfig(pdpEntityConfig, attrValues, role);

}

//saves the attributes by passing the new entityConfig object

saml2Manager.setEntityConfig(realm,entityConfig);