Struct SsoProvider 

pub struct SsoProvider {

    pub account: String,
    pub protocol: SsoProtocol,
    pub display_name: String,
    pub domains: Vec<String>,
    pub oidc: Option<OidcSettings>,
    pub saml: Option<SamlSettings>,
    pub require_sso: bool,
    pub require_passkey: bool,
    pub console_origin: String,
    pub updated: UnixMillis,
    pub updated_by: String,
    pub verified_domains: Vec<String>,
    pub jit: String,
}

An account’s identity provider, as its admin configured it. Keyed by the account.

Fields

account: String

The account (its principal id and namespace).

protocol: SsoProtocol

OIDC or SAML.

display_name: String

“Sign in with <display_name>”.

domains: Vec<String>

Email domains that lead the login page to this account (lowercase, unique on the server: one domain, one company).

oidc: Option<OidcSettings>

Set when protocol is OIDC.

saml: Option<SamlSettings>

Set when protocol is SAML.

require_sso: bool

The account’s EMPLOYEES log in through the IdP only: a passkey alone is refused for them. The account admin is not an employee and keeps the passkey (the break-glass).

require_passkey: bool

After the IdP, a passkey of the same person (registered on the first login when there is none yet).

console_origin: String

The console the redirect URI and the SAML ACS hang off (https://gunnar.example), as the admin’s console named it.

updated: UnixMillis

When it was last configured.

updated_by: String

Who configured it last.

verified_domains: Vec<String>

The domains whose DNS proof was read (A34-5): only these lead a sign-in here, count for a claim or a JIT employee, and are held against other accounts. Written only when set, as idp_ca.

jit: String

Who may become a new employee just in time (A34-25): open (empty), domains or off (nornir_identity_sso::rules::JitPolicy).

Implementations

impl SsoProvider

pub fn redirect_uri(&self) -> String

The OIDC redirect URI the admin registers at the IdP.

pub fn sp_entity_id(&self) -> String

The SAML SP entity id (the audience).

pub fn acs_url(&self) -> String

The SAML Assertion Consumer Service URL.

pub fn issuer(&self) -> &str

The issuer a subject is bound under: the OIDC issuer, or the SAML IdP’s entity id.

Trait Implementations

impl Clone for SsoProvider

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SsoProvider

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for SsoProvider

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for SsoProvider

impl PartialEq for SsoProvider

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for SsoProvider

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for SsoProvider