/**
* DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS HEADER.
*
* Copyright (c) 2005 Sun Microsystems Inc. All Rights Reserved
*
* The contents of this file are subject to the terms
* of the Common Development and Distribution License
* (the License). You may not use this file except in
* compliance with the License.
*
* You can obtain a copy of the License at
* See the License for the specific language governing
* permission and limitations under the License.
*
* When distributing Covered Code, include this CDDL
* Header Notice in each file and include the License file
* at opensso/legal/CDDLv1.0.txt.
* If applicable, add the following below the CDDL Header,
* with the fields enclosed by brackets [] replaced by
* your own identifying information:
* "Portions Copyrighted [year] [name of copyright owner]"
*
* $Id: ISAuthConstants.java,v 1.21 2009/11/25 12:05:07 manish_rustagi Exp $
*
* Portions Copyrighted 2010-2016 ForgeRock AS.
*/
/**
* This interface contains all the constants defined in in Authentication
* Service.
*/
public interface ISAuthConstants {
/**
* org parameter
*/
/**
* realm parameter
*/
/**
* domain parameter
*/
/**
* Module Param
*/
/**
* Query param name for User based authentication
*/
/**
* Query param name for Role based authentication
*/
/**
* Query param name for AuthLevel based authentication
*/
/**
* Query param name for Service based authenticatin
* (a.k.a. authentication chain)
*/
/**
* Query param name for IP/Resource/Environment based authentication
*/
/**
* Query param name for specify resource URL for the
* IP/Resource/Environment based authentication.
*/
/**
* Param name to specify redirect URL advice in Policy condition for the
* IP/Resource/Environment based authentication.
*/
/**
* Key name to specify the IP address value in environment map for the
* IP/Resource/Environment based authentication.
*/
/**
* Param name for goto redirection
*/
/**
* Forward parameter, used by UI to inform Liberty federation if this is a
* forward request or not after successful authentication.
*
* @deprecated As of OpenSSO version 8.0
* {@link com.sun.identity.shared.Constants#FORWARD_PARAM}
*
*/
/**
* Value for <code>FORWARD_PARAM</code> indicating this is a forward
* request.
*
* @deprecated As of OpenSSO version 8.0
* {@link com.sun.identity.shared.Constants#FORWARD_YES_VALUE}
*/
/**
* Application user prefix
*/
/**
* Application user naming attribute
*/
/**
* Application special users container
*/
"com.sun.identity.authentication.modules.application.Application";
/**
* Active
*/
/**
* Authentication Service Name
*/
/**
* LDAP Authentication Service Name
*/
/**
* HTTP Basic Authentication Service Name
*/
"iPlanetAMAuthHTTPBasicService";
/**
* Auth Configuration Service Name
*/
"iPlanetAMAuthConfiguration";
/**
* Platform Service Name
*/
"iPlanetAMPlatformService";
/**
* Session Service Name
*/
/**
* Agent Service Name
*/
/**
* Application Module Name
*/
/**
* FederationModule Name
*/
/**
* SAML Module Name
*/
/**
* Attributes
*/
/**
* LDAP Service Attributes
*/
+ "user-naming-attribute";
+ "user-search-attributes";
+ "search-filter";
+ "bind-passwd";
+ "search-scope";
+ "return-user-dn";
/**
* SecurID Service Attribute
*/
AUTH_ATTR_PREFIX + "securid-";
SECURID_SERVICE_PREFIX + "server-config-path";
/**
* Platform Service Attributes
*/
"iplanet-am-platform-html-char-set";
"iplanet-am-platform-locale";
"iplanet-am-platform-client-charsets";
"iplanet-am-platform-cookie-domains";
"iplanet-am-service-status";
/**
* Session Service Max Session Time Attribute
*/
"iplanet-am-session-max-session-time";
/**
* Session Service Max Idle Time Attribute
*/
"iplanet-am-session-max-idle-time";
/**
* Session Service Max Idle Time Attribute
*/
"iplanet-am-session-max-caching-time";
/**
* inetdomainstatus
*/
/**
* Auth Locale Attribute
*/
/**
* Auth redirect url attributes
*/
+ "login-success-url";
+ "login-failure-url";
/**
* User attributes
*/
+ "post-login-process-class";
/**
* Auth attributes
*/
+ "alias-attr-name";
+ "user-container";
+ "default-role";
+ "user-naming-attr";
+ "dynamic-profile-creation";
+ "allowed-modules";
+ "default-auth-level";
+ "login-failure-lockout-mode";
"sunStoreInvalidAttemptsInDS";
+ "lockout-duration";
"sunLockoutDurationMultiplier";
+ "login-failure-count";
+ "login-failure-duration";
+ "username-generator-enabled";
+ "username-generator-class";
+ "lockout-warn-user";
+ "lockout-attribute-name";
+ "lockout-attribute-value";
+ "lockout-email-address";
"sunAMAuthInvalidAttemptsDataAttrName";
+ "admin-auth-module";
+ "authenticators";
+ "sleep-interval";
/**
* SPI related constants
*/
"com.sun.identity.authentication.spi.DefaultUserIDGenerator";
"iPlanetAMAdminConsoleService";
"iplanet-am-admin-console-user-password-validation-class";
"javax.security.auth.login.name";
"javax.security.auth.login.password";
+ "shared-state-enabled";
+ "store-shared-state-enabled";
+ "shared-state-behavior-pattern";
/**
* Log and debug file names
*/
/**
* Resource bundle names
*/
/**
* Default Values
*/
/**
* Option key values for User Profile choice selection
*/
/**
* Property Names to be stored in SSOToken
*/
"PostProcessSuccessURL";
"PostAuthProcessInstance";
/**
* Delimiters
*/
/**
* login states
*/
// next three added for SecurID
/** Organization Attribute */
/** Resource Lookup Related variableds */
/** Auth Cookie Name */
/** Dist Auth Cookie Name */
+ "module-instances";
+ "admin-auth-module";
+ "configuration";
// blank string for service configurations.
// attribute to identify the auth module instance name passed in
// AMConfiguration
// Attribute to enable or disable module based auth
// Attribute to check if Remote Auth Security is enabled
"sunRemoteAuthSecurityEnabled";
// Key in locale file for exceeding auth retry limit error
// Key in locale file for server unwilling error (mapped to Connection Failed)
// Property to store the Distributed Authentication Login URL in SSOToken
// Property to store the User Attribute to Session Attribute Mapping
"sunAMUserAttributesSessionMapping";
// Key in shared state for composite advice
"CompositeAdviceXML";
// Property name for Post Process Instances in Session
"sunAMAuthPostProcessInstanceSet";
// Property name for user password attribute
//Property name for forcing two factor auth
/**
* Key for the list of principals present at the end of a successful login process.
*/
/**
* Key for maintaining list of principals created during login process.
*/
public static final String AUTHENTICATED_PRINCIPALS = "org.forgerock.openam.auth.authenticatedprincipals";
/**
* The name of the request attribute that stores whether this is a noSession authentication request.
*/
}