web.xml revision 21a7dedf73d1ce1a0280e04ecedeea1075ffae81
<?xml version="1.0" encoding="UTF-8"?>
<web-app version="3.0" xmlns="http://java.sun.com/xml/ns/javaee" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xsi:schemaLocation="http://java.sun.com/xml/ns/javaee http://java.sun.com/xml/ns/javaee/web-app_3_0.xsd">
<display-name>OpenAM Services</display-name>
<listener>
</listener>
<listener>
</listener>
<listener>
</listener>
<listener>
<listener-class>org.forgerock.openam.identity.idm.AMIdentityRepositoryListenerInitializer</listener-class>
</listener>
<context-param>
<param-name>jato:enforceStrictSessionTimeout</param-name>
<param-value>true</param-value>
</context-param>
<context-param>
</context-param>
<context-param>
</context-param>
<context-param>
<param-name>jato:enforceStrictSessionTimeout1</param-name>
<param-value>true</param-value>
</context-param>
<!-- context param -->
<filter>
<filter-name>amSetupFilter</filter-name>
</filter>
<filter>
<filter-name>ResponseValidationFilter</filter-name>
</filter>
<filter>
<filter-name>FQDNValidationFilter</filter-name>
</filter>
<filter>
<filter-name>XUIFilter</filter-name>
</filter>
<filter>
<filter-name>SecurityHeaders</filter-name>
<init-param>
<param-name>X-Frame-Options</param-name>
<param-value>SAMEORIGIN</param-value>
</init-param>
</filter>
<filter>
<filter-name>CacheForFiveMinutes</filter-name>
<init-param>
<param-name>Cache-Control</param-name>
<param-value>public, max-age=300</param-value>
</init-param>
</filter>
<filter>
<filter-name>CacheForAMonth</filter-name>
<init-param>
<param-name>Cache-Control</param-name>
<param-value>public, max-age=2592000</param-value>
</init-param>
<init-param>
<param-name>excludes</param-name>
<param-value>/policyEditor/,/policyEditor/index.html,/scripts/,/scripts/index.html,/XUI/,/XUI/index.html</param-value>
</init-param>
</filter>
<!-- To configure CORS Support, please see the documentation and use the following lines as a template.
<filter>
<filter-name>CORSFilter</filter-name>
<filter-class>org.forgerock.openam.cors.CORSFilter</filter-class>
<init-param>
<description>
Accepted Methods (Required):
A comma separated list of HTTP methods for which to accept CORS requests.
</description>
<param-name>methods</param-name>
<param-value>POST,PUT</param-value>
</init-param>
<init-param>
<description>
Accepted Origins (Required):
A comma separated list of origins from which to accept CORS requests.
</description>
<param-name>origins</param-name>
<param-value>http://www.example.net,https://example.org:8433</param-value>
</init-param>
<init-param>
<description>
Allow Credentials (Optional):
Whether to include the Vary (Origin) and Access-Control-Allow-Credentials headers in the response.
Default: false
</description>
<param-name>allowCredentials</param-name>
<param-value>false</param-value>
</init-param>
<init-param>
<description>
Allowed Headers (Optional):
A comma separated list of HTTP headers which can be included in the requests.
</description>
<param-name>headers</param-name>
<param-value>headerOne,headerTwo,headerThree</param-value>
</init-param>
<init-param>
<description>
Expected Hostname (Optional):
The name of the host expected in the request Host header.
</description>
<param-name>expectedHostname</param-name>
<param-value>openam.example.com:8080</param-value>
</init-param>
<init-param>
<description>
Exposed Headers (Optional):
The comma separated list of headers which the user-agent can expose to its CORS client.
</description>
<param-name>exposeHeaders</param-name>
<param-value>exposeHeaderOne,exposeHeaderTwo</param-value>
</init-param>
<init-param>
<description>
Maximum Cache Age (Optional):
The maximum time that the CORS client can cache the pre-flight response, in seconds.
Default: 600
</description>
<param-name>maxAge</param-name>
<param-value>600</param-value>
</init-param>
</filter>
-->
<filter>
<filter-name>AuthNFilter</filter-name>
</filter>
<filter>
<filter-name>AuthZFilter</filter-name>
</filter>
<filter>
<filter-name>AuditContextFilter</filter-name>
<filter-class>org.forgerock.openam.audit.context.AuditContextFilter</filter-class> <!-- TODO Does this needs updating too? -->
</filter>
<filter>
<filter-name>NotificationsWebSocketFilter</filter-name>
</filter>
<!-- filter declaration -->
<!-- Access audit filter for JATO, Debug.jsp and ssoadm.jsp pages -->
<filter>
<filter-name>JatoAuditFilter</filter-name>
<init-param>
<param-name>auditing-component</param-name>
<param-value>JATO</param-value>
</init-param>
</filter>
<filter-mapping>
<filter-name>JatoAuditFilter</filter-name>
<url-pattern>/service/*</url-pattern>
</filter-mapping>
<filter-mapping>
<filter-name>JatoAuditFilter</filter-name>
<url-pattern>/federation/*</url-pattern>
</filter-mapping>
<filter-mapping>
<filter-name>JatoAuditFilter</filter-name>
<url-pattern>/realm/*</url-pattern>
</filter-mapping>
<filter-mapping>
<filter-name>JatoAuditFilter</filter-name>
<url-pattern>/agentconfig/*</url-pattern>
</filter-mapping>
<filter-mapping>
<filter-name>JatoAuditFilter</filter-name>
<url-pattern>/sts/*</url-pattern>
</filter-mapping>
<filter-mapping>
<filter-name>JatoAuditFilter</filter-name>
<url-pattern>/delegation/*</url-pattern>
</filter-mapping>
<filter-mapping>
<filter-name>JatoAuditFilter</filter-name>
<url-pattern>/idm/*</url-pattern>
</filter-mapping>
<filter-mapping>
<filter-name>JatoAuditFilter</filter-name>
</filter-mapping>
<filter>
<filter-name>SsoAdmJspAuditFilter</filter-name>
<init-param>
<param-name>auditing-component</param-name>
<param-value>SSOADM</param-value>
</init-param>
</filter>
<filter-mapping>
<filter-name>SsoAdmJspAuditFilter</filter-name>
</filter-mapping>
<filter-mapping>
<filter-name>AuditContextFilter</filter-name>
<url-pattern>/*</url-pattern>
</filter-mapping>
<filter-mapping>
<filter-name>amSetupFilter</filter-name>
<url-pattern>/*</url-pattern>
</filter-mapping>
<filter-mapping>
<filter-name>FQDNValidationFilter</filter-name>
<url-pattern>/XUI/*</url-pattern>
</filter-mapping>
<filter-mapping>
<filter-name>FQDNValidationFilter</filter-name>
</filter-mapping>
<filter-mapping>
<filter-name>FQDNValidationFilter</filter-name>
</filter-mapping>
<filter-mapping>
<filter-name>XUIFilter</filter-name>
<url-pattern>/UI/*</url-pattern>
<dispatcher>FORWARD</dispatcher>
<dispatcher>REQUEST</dispatcher>
</filter-mapping>
<filter-mapping>
<filter-name>XUIFilter</filter-name>
</filter-mapping>
<filter-mapping>
<filter-name>SecurityHeaders</filter-name>
<url-pattern>/*</url-pattern>
</filter-mapping>
<filter-mapping>
<filter-name>ResponseValidationFilter</filter-name>
<url-pattern>/*</url-pattern>
</filter-mapping>
<filter-mapping>
<filter-name>CacheForFiveMinutes</filter-name>
</filter-mapping>
<filter-mapping>
<filter-name>CacheForAMonth</filter-name>
<url-pattern>/XUI/*</url-pattern>
</filter-mapping>
<!--
<filter-mapping>
<filter-name>CORSFilter</filter-name>
<url-pattern>/json/*</url-pattern>
</filter-mapping>
-->
<filter-mapping>
<filter-name>AuthNFilter</filter-name>
<url-pattern>/ws/*</url-pattern>
</filter-mapping>
<filter-mapping>
<filter-name>AuthZFilter</filter-name>
<url-pattern>/ws/*</url-pattern>
</filter-mapping>
<filter-mapping>
<filter-name>NotificationsWebSocketFilter</filter-name>
<url-pattern>/notifications</url-pattern>
</filter-mapping>
<!-- filter mapping -->
<listener>
</listener>
<listener>
</listener>
<listener>
</listener>
<!-- listener declaration -->
<servlet>
<servlet-name>LoginServlet</servlet-name>
</servlet>
<servlet>
<servlet-name>setSetupProgress</servlet-name>
</servlet>
<servlet>
<servlet-name>setUpgradeProgress</servlet-name>
</servlet>
<servlet>
<servlet-name>GatewayServlet</servlet-name>
</servlet>
<servlet>
<servlet-name>MonitoringConfiguration</servlet-name>
<load-on-startup>20</load-on-startup>
</servlet>
<servlet>
<servlet-name>LoginLogoutMapping</servlet-name>
<load-on-startup>10</load-on-startup>
</servlet>
<servlet>
<servlet-name>AMSetupServlet</servlet-name>
<load-on-startup>5</load-on-startup>
</servlet>
<servlet>
<description>pllservice</description>
<servlet-name>pllservice</servlet-name>
</servlet>
<servlet>
<description>jaxrpc</description>
<servlet-name>jaxrpc</servlet-name>
</servlet>
<servlet>
<servlet-name>SMSServlet</servlet-name>
</servlet>
<servlet>
<servlet-name>PWResetServlet</servlet-name>
</servlet>
<servlet>
<description>notificationservice</description>
<servlet-name>notificationservice</servlet-name>
</servlet>
<servlet>
<description>Web Service Endpoint - Identity Services</description>
<display-name>IdentityServices</display-name>
<servlet-name>IdentityServices</servlet-name>
</servlet>
<servlet>
<description>REST Endpoint - Identity Services</description>
<display-name>IdentityServicesHandler</display-name>
<servlet-name>IdentityServicesHandler</servlet-name>
<init-param>
<description>Default security provider</description>
<param-name>provider</param-name>
</init-param>
</servlet>
<servlet>
<servlet-name>entitlementmonitor</servlet-name>
</servlet>
<!-- JAX-RS -->
<!-- Java defines REST support via the Java Specification Request 311 (JSR).
This specificiation is called JAX-RS (The Java API for RESTful Web Services).
JAX-RS uses annotations to define the REST relevance of Java classes.
Jersey is the reference implementation for this specification.
Jersey contains basically a REST server and a REST client.
The core client can be used provides a library to communicate with the server.
-->
<servlet>
<servlet-name>ws</servlet-name>
<init-param>
</init-param>
<load-on-startup>1</load-on-startup>
</servlet>
<servlet>
<servlet-name>click-servlet</servlet-name>
</servlet>
<servlet>
<servlet-name>MonitoringFedConfig</servlet-name>
<load-on-startup>30</load-on-startup>
</servlet>
<servlet>
<description>CDCServlet</description>
<servlet-name>cdcservlet</servlet-name>
</servlet>
<servlet>
<description>SAMLAwareServlet</description>
<servlet-name>SAMLAwareServlet</servlet-name>
</servlet>
<servlet>
<description>SAMLPOSTProfileServlet</description>
<servlet-name>SAMLPOSTProfileServlet</servlet-name>
</servlet>
<servlet>
<description>SAMLSOAPReceiver</description>
<servlet-name>SAMLSOAPReceiver</servlet-name>
</servlet>
<servlet>
<description>AssertionManagerServlet</description>
<servlet-name>AssertionManagerServlet</servlet-name>
</servlet>
<servlet>
<description>FSAssertionManagerServlet</description>
<servlet-name>FSAssertionManagerServlet</servlet-name>
</servlet>
<servlet>
<description>SecurityTokenManagerServlet</description>
<servlet-name>SecurityTokenManagerServlet</servlet-name>
</servlet>
<servlet>
<servlet-name>preLoginHandler</servlet-name>
</servlet>
<servlet>
<servlet-name>postLoginHandler</servlet-name>
</servlet>
<servlet>
<servlet-name>ProcessLogout</servlet-name>
</servlet>
<servlet>
<servlet-name>ReturnLogout</servlet-name>
</servlet>
<servlet>
<servlet-name>SingleSignOnService</servlet-name>
</servlet>
<servlet>
<servlet-name>IntersiteTransferService</servlet-name>
<servlet-class>com.sun.identity.federation.services.fednsso.FSIntersiteTransferService</servlet-class>
</servlet>
<servlet>
<servlet-name>AssertionConsumerService</servlet-name>
<servlet-class>com.sun.identity.federation.services.fednsso.FSAssertionConsumerService</servlet-class>
</servlet>
<servlet>
<servlet-name>SOAPReceiver</servlet-name>
</servlet>
<servlet>
<servlet-name>FederationTerminationServlet</servlet-name>
<servlet-class>com.sun.identity.federation.services.termination.FSTerminationInitiationServlet</servlet-class>
</servlet>
<servlet>
<servlet-name>ProcessTermination</servlet-name>
<servlet-class>com.sun.identity.federation.services.termination.FSTerminationRequestServlet</servlet-class>
</servlet>
<servlet>
<servlet-name>ReturnTermination</servlet-name>
<servlet-class>com.sun.identity.federation.services.termination.FSTerminationReturnServlet</servlet-class>
</servlet>
<servlet>
<servlet-name>InitiateRegistration</servlet-name>
<servlet-class>com.sun.identity.federation.services.registration.FSRegistrationInitiationServlet</servlet-class>
</servlet>
<servlet>
<servlet-name>ProcessRegistration</servlet-name>
<servlet-class>com.sun.identity.federation.services.registration.FSRegistrationRequestServlet</servlet-class>
</servlet>
<servlet>
<servlet-name>ReturnRegistration</servlet-name>
<servlet-class>com.sun.identity.federation.services.registration.FSRegistrationReturnServlet</servlet-class>
</servlet>
<servlet>
<servlet-name>LogoutServlet</servlet-name>
</servlet>
<servlet>
<servlet-name>WSSOAPReceiver</servlet-name>
</servlet>
<servlet>
<servlet-name>WSPRedirectHandler</servlet-name>
</servlet>
<servlet>
<servlet-name>IDPFinderService</servlet-name>
</servlet>
<servlet>
<servlet-name>idffwriter</servlet-name>
</servlet>
<servlet>
<servlet-name>idffreader</servlet-name>
</servlet>
<servlet>
<servlet-name>saml2writer</servlet-name>
</servlet>
<servlet>
<servlet-name>saml2reader</servlet-name>
</servlet>
<servlet>
<servlet-name>saml2query</servlet-name>
</servlet>
<servlet>
<servlet-name>ArtifactResolver</servlet-name>
</servlet>
<servlet>
<servlet-name>IDPSloInit</servlet-name>
</servlet>
<servlet>
<servlet-name>IDPSloRedirect</servlet-name>
</servlet>
<servlet>
<servlet-name>IDPSloPOST</servlet-name>
</servlet>
<servlet>
<servlet-name>IDPSloSoap</servlet-name>
</servlet>
<servlet>
<servlet-name>IDPMniRedirect</servlet-name>
</servlet>
<servlet>
<servlet-name>IDPMniPOST</servlet-name>
</servlet>
<servlet>
<servlet-name>IDPMniSoap</servlet-name>
</servlet>
<servlet>
<servlet-name>IDPMniInit</servlet-name>
</servlet>
<servlet>
<servlet-name>SSORedirect</servlet-name>
</servlet>
<servlet>
<servlet-name>SSOPOST</servlet-name>
</servlet>
<servlet>
<servlet-name>SSOSoap</servlet-name>
</servlet>
<servlet>
<servlet-name>AttributeServiceSoap</servlet-name>
</servlet>
<servlet>
<servlet-name>AuthnQueryServiceSoap</servlet-name>
</servlet>
<servlet>
<servlet-name>AssertionIDRequestServiceSoap</servlet-name>
</servlet>
<servlet>
<servlet-name>AssertionIDRequestServiceUri</servlet-name>
</servlet>
<servlet>
<servlet-name>NameIDMappingServiceSOAP</servlet-name>
</servlet>
<servlet>
<servlet-name>Consumer</servlet-name>
</servlet>
<servlet>
<servlet-name>AuthConsumer</servlet-name>
</servlet>
<servlet>
<servlet-name>SPSloInit</servlet-name>
</servlet>
<servlet>
<servlet-name>SPSloRedirect</servlet-name>
</servlet>
<servlet>
<servlet-name>SPSloPOST</servlet-name>
</servlet>
<servlet>
<servlet-name>SPSloSoap</servlet-name>
</servlet>
<servlet>
<servlet-name>SPECP</servlet-name>
</servlet>
<servlet>
<servlet-name>SPMniRedirect</servlet-name>
</servlet>
<servlet>
<servlet-name>SPMniPOST</servlet-name>
</servlet>
<servlet>
<servlet-name>SPMniSoap</servlet-name>
</servlet>
<servlet>
<servlet-name>SPMniInit</servlet-name>
</servlet>
<servlet>
<servlet-name>spssoinit</servlet-name>
</servlet>
<servlet>
<servlet-name>idpssoinit</servlet-name>
</servlet>
<servlet>
<servlet-name>idpSSOFederate</servlet-name>
</servlet>
<servlet>
<servlet-name>idpsaehandler</servlet-name>
</servlet>
<servlet>
<servlet-name>spsaehandler</servlet-name>
</servlet>
<servlet>
<servlet-name>MultiProtocolRelayServlet</servlet-name>
</servlet>
<servlet>
<servlet-name>WSFederationServlet</servlet-name>
</servlet>
<servlet>
<servlet-name>RealmSelection</servlet-name>
</servlet>
<servlet>
<servlet-name>federationrest</servlet-name>
<init-param>
</init-param>
<load-on-startup>1</load-on-startup>
</servlet>
<!-- end of servlet declarations -->
<servlet-mapping>
<servlet-name>LoginLogoutMapping</servlet-name>
<url-pattern>/login</url-pattern>
</servlet-mapping>
<servlet-mapping>
<servlet-name>LoginLogoutMapping</servlet-name>
<url-pattern>/logout</url-pattern>
</servlet-mapping>
<servlet-mapping>
<servlet-name>LoginServlet</servlet-name>
<url-pattern>/UI/*</url-pattern>
</servlet-mapping>
<servlet-mapping>
<servlet-name>AMSetupServlet</servlet-name>
</servlet-mapping>
<servlet-mapping>
<servlet-name>setSetupProgress</servlet-name>
</servlet-mapping>
<servlet-mapping>
<servlet-name>setUpgradeProgress</servlet-name>
</servlet-mapping>
<servlet-mapping>
<servlet-name>PWResetServlet</servlet-name>
<url-pattern>/ui/*</url-pattern>
</servlet-mapping>
<servlet-mapping>
<servlet-name>GatewayServlet</servlet-name>
<url-pattern>/gateway</url-pattern>
</servlet-mapping>
<servlet-mapping>
<servlet-name>pllservice</servlet-name>
<url-pattern>/sessionservice</url-pattern>
</servlet-mapping>
<servlet-mapping>
<servlet-name>pllservice</servlet-name>
<url-pattern>/profileservice</url-pattern>
</servlet-mapping>
<servlet-mapping>
<servlet-name>pllservice</servlet-name>
<url-pattern>/policyservice</url-pattern>
</servlet-mapping>
<servlet-mapping>
<servlet-name>pllservice</servlet-name>
<url-pattern>/namingservice</url-pattern>
</servlet-mapping>
<servlet-mapping>
<servlet-name>pllservice</servlet-name>
<url-pattern>/loggingservice</url-pattern>
</servlet-mapping>
<servlet-mapping>
<servlet-name>pllservice</servlet-name>
<url-pattern>/authservice</url-pattern>
</servlet-mapping>
<servlet-mapping>
<servlet-name>jaxrpc</servlet-name>
<url-pattern>/jaxrpc/*</url-pattern>
</servlet-mapping>
<servlet-mapping>
<servlet-name>SMSServlet</servlet-name>
<url-pattern>/SMSServlet</url-pattern>
</servlet-mapping>
<servlet-mapping>
<servlet-name>notificationservice</servlet-name>
<url-pattern>/notificationservice</url-pattern>
</servlet-mapping>
<servlet-mapping>
<servlet-name>IdentityServices</servlet-name>
<url-pattern>/identityservices/*</url-pattern>
</servlet-mapping>
<servlet-mapping>
<servlet-name>IdentityServicesHandler</servlet-name>
<url-pattern>/identity/*</url-pattern>
</servlet-mapping>
<servlet-mapping>
<servlet-name>entitlementmonitor</servlet-name>
<url-pattern>/entitlementmonitor/*</url-pattern>
</servlet-mapping>
<!-- JAX-RS End-Points -->
<servlet-mapping>
<servlet-name>ws</servlet-name>
<url-pattern>/ws/*</url-pattern>
</servlet-mapping>
<servlet-mapping>
<servlet-name>click-servlet</servlet-name>
<url-pattern>*.htm</url-pattern>
</servlet-mapping>
<servlet-mapping>
<servlet-name>SPMniSoap</servlet-name>
<url-pattern>/SPMniSoap/*</url-pattern>
</servlet-mapping>
<servlet-mapping>
<servlet-name>SPMniPOST</servlet-name>
<url-pattern>/SPMniPOST/*</url-pattern>
</servlet-mapping>
<servlet-mapping>
<servlet-name>SPMniRedirect</servlet-name>
<url-pattern>/SPMniRedirect/*</url-pattern>
</servlet-mapping>
<servlet-mapping>
<servlet-name>SPMniInit</servlet-name>
<url-pattern>/SPMniInit/*</url-pattern>
</servlet-mapping>
<servlet-mapping>
<servlet-name>SPECP</servlet-name>
<url-pattern>/SPECP/*</url-pattern>
</servlet-mapping>
<servlet-mapping>
<servlet-name>SPSloSoap</servlet-name>
<url-pattern>/SPSloSoap/*</url-pattern>
</servlet-mapping>
<servlet-mapping>
<servlet-name>SPSloPOST</servlet-name>
<url-pattern>/SPSloPOST/*</url-pattern>
</servlet-mapping>
<servlet-mapping>
<servlet-name>SPSloRedirect</servlet-name>
<url-pattern>/SPSloRedirect/*</url-pattern>
</servlet-mapping>
<servlet-mapping>
<servlet-name>SPSloInit</servlet-name>
<url-pattern>/SPSloInit/*</url-pattern>
</servlet-mapping>
<servlet-mapping>
<servlet-name>Consumer</servlet-name>
<url-pattern>/Consumer/*</url-pattern>
</servlet-mapping>
<servlet-mapping>
<servlet-name>AuthConsumer</servlet-name>
<url-pattern>/AuthConsumer/*</url-pattern>
</servlet-mapping>
<servlet-mapping>
<servlet-name>SSOPOST</servlet-name>
<url-pattern>/SSOPOST/*</url-pattern>
</servlet-mapping>
<servlet-mapping>
<servlet-name>SSORedirect</servlet-name>
<url-pattern>/SSORedirect/*</url-pattern>
</servlet-mapping>
<servlet-mapping>
<servlet-name>NameIDMappingServiceSOAP</servlet-name>
<url-pattern>/NIMSoap/*</url-pattern>
</servlet-mapping>
<servlet-mapping>
<servlet-name>AssertionIDRequestServiceUri</servlet-name>
<url-pattern>/AIDReqUri/*</url-pattern>
</servlet-mapping>
<servlet-mapping>
<servlet-name>AssertionIDRequestServiceSoap</servlet-name>
<url-pattern>/AIDReqSoap/*</url-pattern>
</servlet-mapping>
<servlet-mapping>
<servlet-name>AuthnQueryServiceSoap</servlet-name>
<url-pattern>/AuthnQueryServiceSoap/*</url-pattern>
</servlet-mapping>
<servlet-mapping>
<servlet-name>AttributeServiceSoap</servlet-name>
<url-pattern>/AttributeServiceSoap/*</url-pattern>
</servlet-mapping>
<servlet-mapping>
<servlet-name>SSOSoap</servlet-name>
<url-pattern>/SSOSoap/*</url-pattern>
</servlet-mapping>
<servlet-mapping>
<servlet-name>IDPMniSoap</servlet-name>
<url-pattern>/IDPMniSoap/*</url-pattern>
</servlet-mapping>
<servlet-mapping>
<servlet-name>IDPMniPOST</servlet-name>
<url-pattern>/IDPMniPOST/*</url-pattern>
</servlet-mapping>
<servlet-mapping>
<servlet-name>IDPMniRedirect</servlet-name>
<url-pattern>/IDPMniRedirect/*</url-pattern>
</servlet-mapping>
<servlet-mapping>
<servlet-name>IDPMniInit</servlet-name>
<url-pattern>/IDPMniInit/*</url-pattern>
</servlet-mapping>
<servlet-mapping>
<servlet-name>IDPSloSoap</servlet-name>
<url-pattern>/IDPSloSoap/*</url-pattern>
</servlet-mapping>
<servlet-mapping>
<servlet-name>IDPSloPOST</servlet-name>
<url-pattern>/IDPSloPOST/*</url-pattern>
</servlet-mapping>
<servlet-mapping>
<servlet-name>IDPSloRedirect</servlet-name>
<url-pattern>/IDPSloRedirect/*</url-pattern>
</servlet-mapping>
<servlet-mapping>
<servlet-name>IDPSloInit</servlet-name>
<url-pattern>/IDPSloInit/*</url-pattern>
</servlet-mapping>
<servlet-mapping>
<servlet-name>ArtifactResolver</servlet-name>
<url-pattern>/ArtifactResolver/*</url-pattern>
</servlet-mapping>
<servlet-mapping>
<servlet-name>spssoinit</servlet-name>
<url-pattern>/spssoinit</url-pattern>
</servlet-mapping>
<servlet-mapping>
<servlet-name>idpssoinit</servlet-name>
<url-pattern>/idpssoinit</url-pattern>
</servlet-mapping>
<servlet-mapping>
<servlet-name>idpSSOFederate</servlet-name>
<url-pattern>/idpSSOFederate/*</url-pattern>
</servlet-mapping>
<servlet-mapping>
<servlet-name>idpsaehandler</servlet-name>
<url-pattern>/idpsaehandler/*</url-pattern>
</servlet-mapping>
<servlet-mapping>
<servlet-name>spsaehandler</servlet-name>
<url-pattern>/spsaehandler/*</url-pattern>
</servlet-mapping>
<servlet-mapping>
<servlet-name>IDPFinderService</servlet-name>
<url-pattern>/idpfinder</url-pattern>
</servlet-mapping>
<servlet-mapping>
<servlet-name>cdcservlet</servlet-name>
<url-pattern>/cdcservlet</url-pattern>
</servlet-mapping>
<servlet-mapping>
<servlet-name>SAMLAwareServlet</servlet-name>
<url-pattern>/SAMLAwareServlet</url-pattern>
</servlet-mapping>
<servlet-mapping>
<servlet-name>SAMLPOSTProfileServlet</servlet-name>
<url-pattern>/SAMLPOSTProfileServlet</url-pattern>
</servlet-mapping>
<servlet-mapping>
<servlet-name>SAMLSOAPReceiver</servlet-name>
<url-pattern>/SAMLSOAPReceiver</url-pattern>
</servlet-mapping>
<servlet-mapping>
<servlet-name>AssertionManagerServlet</servlet-name>
<url-pattern>/AssertionManagerServlet/*</url-pattern>
</servlet-mapping>
<servlet-mapping>
<servlet-name>FSAssertionManagerServlet</servlet-name>
<url-pattern>/FSAssertionManagerServlet/*</url-pattern>
</servlet-mapping>
<servlet-mapping>
<servlet-name>SecurityTokenManagerServlet</servlet-name>
<url-pattern>/SecurityTokenManagerServlet/*</url-pattern>
</servlet-mapping>
<servlet-mapping>
<servlet-name>preLoginHandler</servlet-name>
<url-pattern>/preLogin</url-pattern>
</servlet-mapping>
<servlet-mapping>
<servlet-name>postLoginHandler</servlet-name>
<url-pattern>/postLogin/*</url-pattern>
</servlet-mapping>
<servlet-mapping>
<servlet-name>ProcessLogout</servlet-name>
<url-pattern>/ProcessLogout/*</url-pattern>
</servlet-mapping>
<servlet-mapping>
<servlet-name>ReturnLogout</servlet-name>
<url-pattern>/ReturnLogout/*</url-pattern>
</servlet-mapping>
<servlet-mapping>
<servlet-name>LogoutServlet</servlet-name>
<url-pattern>/liberty-logout</url-pattern>
</servlet-mapping>
<servlet-mapping>
<servlet-name>SingleSignOnService</servlet-name>
<url-pattern>/SingleSignOnService/*</url-pattern>
</servlet-mapping>
<servlet-mapping>
<servlet-name>IntersiteTransferService</servlet-name>
<url-pattern>/IntersiteTransferService</url-pattern>
</servlet-mapping>
<servlet-mapping>
<servlet-name>AssertionConsumerService</servlet-name>
<url-pattern>/AssertionConsumerService/*</url-pattern>
</servlet-mapping>
<servlet-mapping>
<servlet-name>SOAPReceiver</servlet-name>
<url-pattern>/SOAPReceiver/*</url-pattern>
</servlet-mapping>
<servlet-mapping>
<servlet-name>FederationTerminationServlet</servlet-name>
<url-pattern>/federation-terminate</url-pattern>
</servlet-mapping>
<servlet-mapping>
<servlet-name>ProcessTermination</servlet-name>
<url-pattern>/ProcessTermination/*</url-pattern>
</servlet-mapping>
<servlet-mapping>
<servlet-name>ReturnTermination</servlet-name>
<url-pattern>/ReturnTermination/*</url-pattern>
</servlet-mapping>
<servlet-mapping>
<servlet-name>InitiateRegistration</servlet-name>
<url-pattern>/InitiateRegistration</url-pattern>
</servlet-mapping>
<servlet-mapping>
<servlet-name>ProcessRegistration</servlet-name>
<url-pattern>/ProcessRegistration/*</url-pattern>
</servlet-mapping>
<servlet-mapping>
<servlet-name>ReturnRegistration</servlet-name>
<url-pattern>/ReturnRegistration/*</url-pattern>
</servlet-mapping>
<servlet-mapping>
<servlet-name>WSSOAPReceiver</servlet-name>
<url-pattern>/Liberty/*</url-pattern>
</servlet-mapping>
<servlet-mapping>
<servlet-name>WSPRedirectHandler</servlet-name>
<url-pattern>/WSPRedirectHandler/*</url-pattern>
</servlet-mapping>
<servlet-mapping>
<servlet-name>idffwriter</servlet-name>
<url-pattern>/idffwriter</url-pattern>
</servlet-mapping>
<servlet-mapping>
<servlet-name>idffreader</servlet-name>
<url-pattern>/idffreader</url-pattern>
</servlet-mapping>
<servlet-mapping>
<servlet-name>saml2writer</servlet-name>
<url-pattern>/saml2writer</url-pattern>
</servlet-mapping>
<servlet-mapping>
<servlet-name>saml2reader</servlet-name>
<url-pattern>/saml2reader</url-pattern>
</servlet-mapping>
<servlet-mapping>
<servlet-name>MultiProtocolRelayServlet</servlet-name>
<url-pattern>/multiprotocolrelay/*</url-pattern>
</servlet-mapping>
<servlet-mapping>
<servlet-name>WSFederationServlet</servlet-name>
<url-pattern>/WSFederationServlet/*</url-pattern>
</servlet-mapping>
<servlet-mapping>
<servlet-name>WSFederationServlet</servlet-name>
<url-pattern>/FederationMetadata/*</url-pattern>
</servlet-mapping>
<servlet-mapping>
<servlet-name>RealmSelection</servlet-name>
<url-pattern>/RealmSelection/*</url-pattern>
</servlet-mapping>
<servlet-mapping>
<servlet-name>saml2query</servlet-name>
<url-pattern>/saml2query/*</url-pattern>
</servlet-mapping>
<servlet-mapping>
<servlet-name>federationrest</servlet-name>
<url-pattern>/federationws/*</url-pattern>
</servlet-mapping>
<!-- end of servlet mapping -->
<servlet>
<servlet-name>WebFinger</servlet-name>
<!-- Your application class name (Optional - For mode 3) -->
<init-param>
</init-param>
<!-- List of supported client protocols (Optional - Only in mode 3) -->
<init-param>
<param-value>RIAP CLAP</param-value>
</init-param>
<!-- Add the Servlet context path to routes (Optional) -->
<init-param>
<param-value>true</param-value>
</init-param>
</servlet>
<servlet>
<servlet-name>OAuth2RegisterClient</servlet-name>
</servlet>
<servlet>
<servlet-name>OAuth2ConnectCheckSession</servlet-name>
</servlet>
<servlet-mapping>
<servlet-name>OAuth2RegisterClient</servlet-name>
</servlet-mapping>
<servlet-mapping>
<servlet-name>OAuth2ConnectCheckSession</servlet-name>
</servlet-mapping>
<!-- servlet declaration -->
<servlet-mapping>
<servlet-name>WebFinger</servlet-name>
<url-pattern>/.well-known/*</url-pattern>
</servlet-mapping>
<servlet>
<servlet-name>OpenAM</servlet-name>
<init-param>
<param-name>application-loader</param-name>
<param-value>guice</param-value>
</init-param>
<init-param>
<param-name>routing-base</param-name>
<param-value>context_path</param-value>
</init-param>
</servlet>
<servlet-mapping>
<servlet-name>OpenAM</servlet-name>
<url-pattern>/json/*</url-pattern>
</servlet-mapping>
<servlet-mapping>
<servlet-name>OpenAM</servlet-name>
</servlet-mapping>
<servlet-mapping>
<servlet-name>OpenAM</servlet-name>
<url-pattern>/rest-sts/*</url-pattern>
</servlet-mapping>
<servlet-mapping>
<servlet-name>OpenAM</servlet-name>
<url-pattern>/sts-publish/*</url-pattern>
</servlet-mapping>
<servlet-mapping>
<servlet-name>OpenAM</servlet-name>
<url-pattern>/sts-tokengen/*</url-pattern>
</servlet-mapping>
<servlet>
<servlet-name>ForgeRockRest</servlet-name>
</servlet>
<servlet-mapping>
<servlet-name>ForgeRockRest</servlet-name>
<url-pattern>/xacml/*</url-pattern>
</servlet-mapping>
<servlet-mapping>
<servlet-name>ForgeRockRest</servlet-name>
<url-pattern>/oauth2/*</url-pattern>
</servlet-mapping>
<servlet-mapping>
<servlet-name>ForgeRockRest</servlet-name>
<url-pattern>/uma/*</url-pattern>
</servlet-mapping>
<!-- Setup favicon.ico extension type -->
<mime-mapping>
<extension>ico</extension>
</mime-mapping>
<!-- This tag is for the welcome files such as index.html -->
<welcome-file-list>
<welcome-file>
</welcome-file>
</welcome-file-list>
<!-- The taglib is only specified once -->
<jsp-config>
<taglib>
</taglib>
<taglib>
</taglib>
<!-- workarounds for lockart 2.x -->
<taglib>
</taglib>
<taglib>
</taglib>
<!-- taglib definition -->
</jsp-config>
<resource-ref>
<description>mysql db idrepo</description>
<res-ref-name>jdbc/openssousersdb</res-ref-name>
<res-type>javax.sql.DataSource</res-type>
<res-auth>Container</res-auth>
<res-sharing-scope>Shareable</res-sharing-scope>
</resource-ref>
-->
</web-app>