Expand description
Typed SAML domain models built from validated raw flow results.
References: SAML Core 2.0 https://docs.oasis-open.org/security/saml/v2.0/saml-core-2.0-os.pdf and SAML Profiles 2.0 https://docs.oasis-open.org/security/saml/v2.0/saml-profiles-2.0-os.pdf.
Structs§
- Assertion
- Assertion view extracted from an SSO session.
- Assertion
Id - Assertion ID extracted from a SAML assertion.
- Attribute
- SAML attribute with one or more values.
- Attribute
Value - A single SAML attribute value.
- Attributes
- Collection of SAML attributes.
- Authn
Request - Parsed AuthnRequest result.
- Authn
Session - Session data from one
AuthnStatement. - Clock
Skew - Clock skew applied to SAML time-window checks.
- Endpoint
Url - Absolute HTTP(S) endpoint URL used by typed SAML endpoint wrappers.
- Logout
Completed - Marker result for completed logout flows.
- Logout
Request - Parsed LogoutRequest result.
- Logout
Response - Parsed LogoutResponse result.
- Logout
Subject - Subject data used to issue a front-channel Single Logout request.
- Message
Id - SAML protocol message
ID. - NameId
- NameID value, format, and optional qualifier attributes.
- Name
IdPolicy - AuthnRequest NameIDPolicy.
- Outstanding
Logout - A
LogoutRequestthe caller has already accepted. - Received
- Typed received message wrapper.
- Relay
State - RelayState value when a browser message carries the parameter.
- Requested
Subject - Subject requested by an
<AuthnRequest>(Core §3.4.1). - Saml
Instant - SAML instant text carried in pending snapshots and parsed results.
- Saml
Validation Context - Caller-owned validation context for typed inbound SAML messages.
- Session
Index - SessionIndex from an AuthnStatement or LogoutRequest.
- SsoResponse
- Parsed SSO response envelope.
- SsoSession
- Parsed SSO login session.
- Status
- Top-level
StatusCodeand an optional subordinate code. - Subject
- SAML subject.
- Subject
Confirmation - SubjectConfirmation captured from the validated flow result.
- Subordinate
Status Code - Optional second-level
StatusCode. - Verified
XmlSignature - Evidence from one successfully verified embedded XML signature.
Enums§
- Force
Authn ForceAuthnon an<AuthnRequest>(Core §3.4.1).- IsPassive
IsPassiveon an<AuthnRequest>(Core §3.4.1).- Name
IdCreation Request - AuthnRequest NameID creation request.
- Relay
State Param - RelayState represented as absent, present empty, or present with a value.
- Replay
Key - Replay cache key derived from a validated SAML message.
- Replay
Policy - Replay behavior for typed inbound browser flows.
- Requested
Subject Identifier - Identifier inside a requested
RequestedSubject(Core §3.4.1). - TopLevel
Status Code - Top-level
StatusCodevalue. - Verified
XmlSignature Coverage - Authenticated SAML objects covered by one verified embedded XML signature.
Constants§
- MAX_
RELAY_ STATE_ BYTES - SAML Bindings 2.0 prohibits a RelayState value longer than 80 bytes.
Traits§
- Replay
Cache - Caller-owned replay cache.