public class AzureAdClient extends OidcClient<AzureAdProfile>
OidcClient
for authenticating againt Microsoft Azure AD. Microsoft Azure
AD provides authentication for multiple tenants, or, when the tenant is not known prior to
authentication, the speciall common-tenant. For a specific tenant, the following discovery URI
must be used:
https://login.microsoftonline.com/tenantid/.well-known/openid-configuration
or
https://login.microsoftonline.com/tenantid/v2.0/.well-known/openid-configuration
for
Azure AD v2.0. Replace tenantid
with the ID of the tenant to authenticate against. To
find this ID, fill in your tenant's domain name. Your tenant ID is the UUID in
authorization_endpoint
.
For authentication against an unknown (or dynamic tenant), use common
as ID.
Authentication against the common endpoint results in a ID token with a issuer
different
from the issuer
mentioned in the discovery data. This class uses to special validator
to correctly validate the issuer returned by Azure AD.
More information at: https://msdn.microsoft.com/en-us/library/azure/dn645541.aspxATTEMPTED_AUTHENTICATION_SUFFIX, callbackUrl, urlResolver
logger
Constructor and Description |
---|
AzureAdClient() |
AzureAdClient(OidcConfiguration configuration) |
Modifier and Type | Method and Description |
---|---|
protected void |
clientInit(WebContext context)
Initialize the client.
|
getConfiguration, setConfiguration, toString
computeFinalCallbackUrl, defaultLogoutActionBuilder, defaultRedirectActionBuilder, getAjaxRequestResolver, getCallbackUrl, getCallbackUrlResolver, getCredentials, getLogoutAction, getLogoutActionBuilder, getRedirectAction, getRedirectActionBuilder, getUrlResolver, internalInit, isIncludeClientNameInCallbackUrl, redirect, setAjaxRequestResolver, setCallbackUrl, setCallbackUrlResolver, setIncludeClientNameInCallbackUrl, setLogoutActionBuilder, setRedirectActionBuilder, setUrlResolver
addAuthorizationGenerator, addAuthorizationGenerators, defaultAuthenticator, defaultCredentialsExtractor, defaultProfileCreator, getAuthenticator, getAuthorizationGenerators, getCredentialsExtractor, getName, getProfileCreator, getUserProfile, notifySessionRenewal, retrieveCredentials, retrieveUserProfile, setAuthenticator, setAuthorizationGenerator, setAuthorizationGenerators, setAuthorizationGenerators, setCredentialsExtractor, setName, setProfileCreator
init, reinit
public AzureAdClient()
public AzureAdClient(OidcConfiguration configuration)
protected void clientInit(WebContext context)
IndirectClient
clientInit
in class OidcClient<AzureAdProfile>
context
- the web contextCopyright © 2017. All rights reserved.