a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster * DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS HEADER.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster * Copyright (c) 2007 Sun Microsystems Inc. All Rights Reserved
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster * The contents of this file are subject to the terms
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster * of the Common Development and Distribution License
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster * (the License). You may not use this file except in
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster * compliance with the License.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster * You can obtain a copy of the License at
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster * https://opensso.dev.java.net/public/CDDLv1.0.html or
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster * See the License for the specific language governing
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster * permission and limitations under the License.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster * When distributing Covered Code, include this CDDL
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster * Header Notice in each file and include the License file
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster * If applicable, add the following below the CDDL Header,
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster * with the fields enclosed by brackets [] replaced by
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster * your own identifying information:
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster * "Portions Copyrighted [year] [name of copyright owner]"
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster * $Id: WSFederationConstants.java,v 1.13 2009/12/14 23:42:48 mallas Exp $
3b9ddb3b45c7f1cf575932bfcac2df50f3172f1aQuentin CASTEL * Portions copyright 2016 ForgeRock AS.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster * <code>WSFederationConstants</code> defines various constants for the
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster * WS-Federation implementation
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster * WS-Federation data store provider name.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster public static final String WSFEDERATION = "wsfederation";
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster * WS-Federation 'sign-in' action.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster public static final String WSIGNIN10 = "wsignin1.0";
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster * WS-Federation 'sign-out' action.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster public static final String WSIGNOUT10 = "wsignout1.0";
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster * WS-Federation 'sign-out cleanup' action. This is handled identically
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster * to <code>WSIGNOUT10</code>, following the WS-Federation 1.1
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster * specification.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster public static final String WSIGNOUTCLEANUP10 = "wsignoutcleanup1.0";
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster * XML tag name for <code><RequestedSecurityToken%gt;</code>.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster public static final String RST_TAG_NAME = "RequestedSecurityToken";
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster * XML tag name for <code><RequestSecurityTokenResponse%gt;</code>.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster public static final String RSTR_TAG_NAME = "RequestSecurityTokenResponse";
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster * XML tag name for <code><AppliesTo%gt;</code>.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster public static final String APPLIESTO_TAG_NAME = "AppliesTo";
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster * XML tag name for <code><Address%gt;</code>.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster public static final String ADDRESS_TAG_NAME = "Address";
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster * SAML 1.1 URN.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster public static final String URN_OASIS_NAMES_TC_SAML_11 =
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster "urn:oasis:names:tc:SAML:1.1";
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster * Claim URI.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster * Group claim URI.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster * WS-Addressing URI.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster "http://schemas.xmlsoap.org/ws/2004/08/addressing";
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster * Display name for Group claim.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster public static final String CLAIMS_GROUP_DISPLAY_NAME =
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster * Configuration attribute for account realm selection mechanism.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster public static final String ACCOUNT_REALM_SELECTION =
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster "AccountRealmSelection";
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster * Configuration attribute for account realm cookie name.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster public static final String ACCOUNT_REALM_COOKIE_NAME =
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster "AccountRealmCookieName";
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster * Configuration attribute for home realm discovery URL.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster public static final String HOME_REALM_DISCOVERY_SERVICE =
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster "HomeRealmDiscoveryService";
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster * Configuration attribute - does the service provider require
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster * a signature on the assertion? Default is true.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster public static final String WANT_ASSERTION_SIGNED = "wantAssertionSigned";
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster * Configuration attribute for provider display name.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster "displayName";
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster * Configuration attribute for default UPN domain.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster "upnDomain";
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster * Default value for account realm cookie name
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster public static final String ACCOUNT_REALM_COOKIE_NAME_DEFAULT =
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster "amWSFederationAccountRealm";
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster * User agent HTTP header name
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster public static final String USERAGENT = "user-agent";
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster * Cookie HTTP header name
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster * Default mechanism for carrying account realm
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster public static final String ACCOUNT_REALM_SELECTION_DEFAULT = COOKIE;
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster * NameID info attribute.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster public static final String NAMEID_INFO = "sun-fm-wsfed-nameid-info";
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster * NameID info key attribute.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster public static final String NAMEID_INFO_KEY = "sun-fm-wsfed-nameid-infokey";
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster * Session property name for list of service provider to which this identity
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster * provider has sent a token
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster public static final String SESSION_SP_LIST = "sun-fm-wsfed-sp-list";
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster * Session property name for identity provider from which this service
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster * provider has received a token
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster public static final String SESSION_IDP = "sun-fm-wsfed-idp";
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster * Attribute name for communicating form action URL from servlet to JSP
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster "com.sun.identity.wsfederation.post.action";
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster * Attribute name for communicating WS-Federation wa parameter from servlet
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster "com.sun.identity.wsfederation.post.wa";
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster * Attribute name for communicating WS-Federation wctx parameter from
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster * servlet to JSP
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster "com.sun.identity.wsfederation.post.wctx";
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster * Attribute name for communicating WS-Federation wresult parameter from
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster * servlet to JSP
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster "com.sun.identity.wsfederation.post.wresult";
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster * Attribute name for communicating local provider display name from
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster * servlet to JSP
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster public static final String LOGOUT_DISPLAY_NAME =
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster "com.sun.identity.wsfederation.logout.displayname";
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster * Attribute name for communicating WS-Federation wreply parameter from
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster * servlet to JSP
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster "com.sun.identity.wsfederation.logout.wreply";
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster * Attribute name for communicating list of providers from
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster * servlet to JSP
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster public static final String LOGOUT_PROVIDER_LIST =
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster "com.sun.identity.wsfederation.logout.providerlist";
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster * Debug log name.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster public static String AM_WSFEDERATION = "libWSFederation";
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster * Resource bundle name.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster public static final String BUNDLE_NAME = "libWSFederation";
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster * Constant used to identify meta alias in URL.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster public static final String NAME_META_ALIAS_IN_URI = "metaAlias";
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster * Entity ID to use if WS-Federation omits it.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster public static final String DEFAULT_FEDERATION_ID =
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster "sunFMWSFederationDefaultFederationID";
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster * WS-Federation HTTP parameter for 'action'.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster * WS-Federation HTTP parameter for 'result'.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster public static final String WRESULT = "wresult";
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster * WS-Federation HTTP parameter for 'home realm'.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster * WS-Federation HTTP parameter for 'requesting realm'.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster public static final String WTREALM = "wtrealm";
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster * WS-Federation HTTP parameter for 'destination url'.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster * WS-Federation HTTP parameter for 'current time'.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster * WS-Federation HTTP parameter for 'context value'.
8d3140b524c0e28c0a49dc7c7d481123ef3cfe11Chris Lee * HTTP request parameter for OpenAM realm
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster public static final String REALM_PARAM = "famrealm";
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster * HTTP request parameter for ws-federation entity id
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster public static final String ENTITYID_PARAM = "wsfed-entityid";
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster * Claim type URIs, as defined in 'WS-Federation: Passive Requestor
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster * Interoperability Profile' document
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster public static final String[] NAMED_CLAIM_TYPES = {
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster "urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress",
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster "http://schemas.xmlsoap.org/claims/CommonName" };
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster * Claim type Displey names
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster public static final String[] NAMED_CLAIM_DISPLAY_NAMES = {
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster "Email Address",
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster "Common Name" };
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster * Index into NAMED_CLAIM_TYPES and NAMED_CLAIM_DISPLAY_NAMES arrays for UPN
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster * Index into NAMED_CLAIM_TYPES and NAMED_CLAIM_DISPLAY_NAMES arrays for
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster * Email Address
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster public static final int NAMED_CLAIM_EMAILADDRESS = 1;
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster * Index into NAMED_CLAIM_TYPES and NAMED_CLAIM_DISPLAY_NAMES arrays for
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster * Common Name
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster public static final int NAMED_CLAIM_COMMONNAME = 2;
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster * Configuration attribute for NameID attribute.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster public static final String NAMEID_ATTRIBUTE = "nameIdAttribute";
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster * Configuration attribute for NameID format.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster public static final String NAMEID_FORMAT = "nameIdFormat";
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster * Configuration attribute for Trim domain.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster public static final String NAME_INCLUDES_DOMAIN = "nameIncludesDomain";
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster * Configuration attribute for Domain attribute.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster public static final String DOMAIN_ATTRIBUTE = "domainAttribute";
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster * The default attribute for short user name
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster * The URL prefix for WS-Fed metadata requests
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster public static final String METADATA_URL_PREFIX =
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster "/FederationMetadata/2006-12";
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster * The URL suffix for WS-Fed metadata requests
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster public static final String METADATA_URL_SUFFIX = "/FederationMetadata.xml";
0748565aad6a8878aecb88a26081c9bb10c00279Peter Major * The URL prefix for WS-Fed MEX requests.
0748565aad6a8878aecb88a26081c9bb10c00279Peter Major public static final String MEX_ENDPOINT_PREFIX = "/WSFederationServlet/ws-trust/mex";
0748565aad6a8878aecb88a26081c9bb10c00279Peter Major * The URL prefix for WS-Fed STS requests.
0748565aad6a8878aecb88a26081c9bb10c00279Peter Major public static final String STS_ENDPOINT_PREFIX = "/WSFederationServlet/sts";
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster * WS-Policy URI.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster "http://schemas.xmlsoap.org/ws/2004/09/policy";
3b9ddb3b45c7f1cf575932bfcac2df50f3172f1aQuentin CASTEL * List of valid wreply Urls
3b9ddb3b45c7f1cf575932bfcac2df50f3172f1aQuentin CASTEL public static String WREPLY_URL_LIST = "wreplyList";
0748565aad6a8878aecb88a26081c9bb10c00279Peter Major * The XML namespace for WS-Addressing.
0748565aad6a8878aecb88a26081c9bb10c00279Peter Major public static final String WSA_NAMESPACE = "http://www.w3.org/2005/08/addressing";
0748565aad6a8878aecb88a26081c9bb10c00279Peter Major * The XML namespace for WS-Security.
0748565aad6a8878aecb88a26081c9bb10c00279Peter Major "http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd";
0748565aad6a8878aecb88a26081c9bb10c00279Peter Major * The XML namespace for WS-Trust.
0748565aad6a8878aecb88a26081c9bb10c00279Peter Major public static final String WST_NAMESPACE = "http://schemas.xmlsoap.org/ws/2005/02/trust";
0748565aad6a8878aecb88a26081c9bb10c00279Peter Major * The XML namespace for WS-Security Utility.
0748565aad6a8878aecb88a26081c9bb10c00279Peter Major "http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd";
0748565aad6a8878aecb88a26081c9bb10c00279Peter Major * Configuration attribute for Active Requestor Profile Enabled setting.
0748565aad6a8878aecb88a26081c9bb10c00279Peter Major public static String ACTIVE_REQUESTOR_PROFILE_ENABLED = "activeRequestorProfileEnabled";
0748565aad6a8878aecb88a26081c9bb10c00279Peter Major * Configuration attribute for Endpoint Base URL setting.
0748565aad6a8878aecb88a26081c9bb10c00279Peter Major public static String ENDPOINT_BASE_URL = "endpointBaseUrl";
0748565aad6a8878aecb88a26081c9bb10c00279Peter Major * Configuration attribute for Trusted Addresses setting.
0748565aad6a8878aecb88a26081c9bb10c00279Peter Major public static String TRUSTED_ADDRESSES = "trustedAddresses";
0748565aad6a8878aecb88a26081c9bb10c00279Peter Major * Configuration attribute for Authenticator Class setting.
0748565aad6a8878aecb88a26081c9bb10c00279Peter Major public static String AUTHENTICATOR_CLASS = "authenticatorClass";