public class AzureAdClient extends OidcClient<AzureAdProfile>
OidcClient for authenticating againt Microsoft Azure AD. Microsoft Azure
AD provides authentication for multiple tenants, or, when the tenant is not known prior to
authentication, the speciall common-tenant. For a specific tenant, the following discovery URI
must be used:
https://login.microsoftonline.com/tenantid/.well-known/openid-configuration or
https://login.microsoftonline.com/tenantid/v2.0/.well-known/openid-configuration for
Azure AD v2.0. Replace tenantid with the ID of the tenant to authenticate against. To
find this ID, fill in your tenant's domain name. Your tenant ID is the UUID in
authorization_endpoint.
For authentication against an unknown (or dynamic tenant), use common as ID.
Authentication against the common endpoint results in a ID token with a issuer different
from the issuer mentioned in the discovery data. This class uses to special validator
to correctly validate the issuer returned by Azure AD.
More information at: https://msdn.microsoft.com/en-us/library/azure/dn645541.aspxATTEMPTED_AUTHENTICATION_SUFFIX, callbackUrl, urlResolverlogger| Constructor and Description |
|---|
AzureAdClient() |
AzureAdClient(OidcConfiguration configuration) |
| Modifier and Type | Method and Description |
|---|---|
protected void |
clientInit(WebContext context) |
getConfiguration, setConfiguration, toStringcomputeFinalCallbackUrl, defaultLogoutActionBuilder, defaultRedirectActionBuilder, getAjaxRequestResolver, getCallbackUrl, getCallbackUrlResolver, getCredentials, getLogoutAction, getLogoutActionBuilder, getRedirectAction, getRedirectActionBuilder, getUrlResolver, internalInit, isIncludeClientNameInCallbackUrl, redirect, setAjaxRequestResolver, setCallbackUrl, setCallbackUrlResolver, setIncludeClientNameInCallbackUrl, setLogoutActionBuilder, setRedirectActionBuilder, setUrlResolveraddAuthorizationGenerator, addAuthorizationGenerators, defaultAuthenticator, defaultCredentialsExtractor, defaultProfileCreator, getAuthenticator, getAuthorizationGenerators, getCredentialsExtractor, getName, getProfileCreator, getUserProfile, notifySessionRenewal, retrieveCredentials, retrieveUserProfile, setAuthenticator, setAuthorizationGenerator, setAuthorizationGenerators, setAuthorizationGenerators, setCredentialsExtractor, setName, setProfileCreatorinit, reinitpublic AzureAdClient()
public AzureAdClient(OidcConfiguration configuration)
protected void clientInit(WebContext context)
clientInit in class OidcClient<AzureAdProfile>Copyright © 2017. All Rights Reserved.