Package com.hybris.samlssobackoffice

Class BackofficeSSOService

java.lang.Object

de.hybris.platform.servicelayer.internal.service.AbstractService

de.hybris.platform.samlsinglesignon.DefaultSSOService

com.hybris.samlssobackoffice.BackofficeSSOService

All Implemented Interfaces:

SSOUserService, Serializable, org.springframework.beans.factory.Aware, org.springframework.beans.factory.BeanNameAware, org.springframework.beans.factory.InitializingBean

public class BackofficeSSOService
extends DefaultSSOService

Extends the DefaultSSOService to allow to control the SSO user access to Backoffice.

• When the SSO user mapping is done in properties, additional property is allowed:

   sso.mapping.<usergroup>.enableBackofficeLogin=true
   

  That will allow users with <usergroup&gt access to backoffice.
• When mapping is done in database, there's additional field provided: SamlUserGroupModel.ENABLEBACKOFFICELOGIN, that works analogically.

Enabling access to backoffice means setting the PrincipalModel.BACKOFFICELOGINDISABLED of the SSO user to false.

See Also:

• Serialized Form

Nested Class Summary

Nested classes/interfaces inherited from class de.hybris.platform.samlsinglesignon.DefaultSSOService

DefaultSSOService.SSOUserMapping

Nested classes/interfaces inherited from class de.hybris.platform.servicelayer.internal.service.AbstractService

AbstractService.SerializableDTO

Field Summary

Fields

Modifier and Type	Field	Description
protected static final String	ENABLE_BACKOFFICE_LOGIN_PARAM

Fields inherited from class de.hybris.platform.samlsinglesignon.DefaultSSOService

MD5_PASS_ENCODING, SSO_DATABASE_USERGROUP_MAPPING, SSO_PASS_ENCODING

Fields inherited from class de.hybris.platform.servicelayer.internal.service.AbstractService

tenant

Constructor Summary

Constructors

Constructor	Description
BackofficeSSOService()

Method Summary

Modifier and Type	Method	Description
protected void	adjustUserAttributes(UserModel user, DefaultSSOService.SSOUserMapping mapping)	Adjusting user groups
protected DefaultSSOService.SSOUserMapping	findMappingInProperties(Collection<String> roles)
protected boolean	getEnableBackofficeLogin(Collection<String> roles)
protected DefaultSSOService.SSOUserMapping	performMapping(List<SamlUserGroupModel> userGroupModels)

Methods inherited from class de.hybris.platform.samlsinglesignon.DefaultSSOService

createNewUser, findMapping, findMappingInDatabase, getMappingForRole, getOrCreateSSOUser, lookupExisting, setModelService, setSamlUserGroupDAO, setUserService, validateMappings

Methods inherited from class de.hybris.platform.servicelayer.internal.service.AbstractService

afterPropertiesSet, getCurrentTenant, setBeanName, setCurrentTenant, writeReplace

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

ENABLE_BACKOFFICE_LOGIN_PARAM

protected static final String ENABLE_BACKOFFICE_LOGIN_PARAM

See Also:

• Constant Field Values

Constructor Details

BackofficeSSOService

public BackofficeSSOService()

Method Details

findMappingInProperties

protected DefaultSSOService.SSOUserMapping findMappingInProperties(Collection<String> roles)

Overrides:

findMappingInProperties in class DefaultSSOService

getEnableBackofficeLogin

protected boolean getEnableBackofficeLogin(Collection<String> roles)

performMapping

protected DefaultSSOService.SSOUserMapping performMapping(List<SamlUserGroupModel> userGroupModels)

Overrides:

performMapping in class DefaultSSOService

adjustUserAttributes

protected void adjustUserAttributes(UserModel user,
 DefaultSSOService.SSOUserMapping mapping)

Description copied from class: DefaultSSOService

Adjusting user groups

Overrides:

adjustUserAttributes in class DefaultSSOService

Parameters:

user - the user to adjust the groups for

mapping - the mapping which holds the groups