com.hybris.samlssobackoffice

Class BackofficeSSOService

java.lang.Object

de.hybris.platform.servicelayer.internal.service.AbstractService

de.hybris.platform.samlsinglesignon.DefaultSSOService

com.hybris.samlssobackoffice.BackofficeSSOService

All Implemented Interfaces:

SSOUserService, java.io.Serializable

public class BackofficeSSOService
extends DefaultSSOService

Extends the DefaultSSOService to allow to control the SSO user access to Backoffice.

• When the SSO user mapping is done in properties, additional property is allowed:

   sso.mapping.<usergroup>.enableBackofficeLogin=true
   

  That will allow users with <usergroup> access to backoffice.
• When mapping is done in database, there's additional field provided: SamlUserGroupModel.ENABLEBACKOFFICELOGIN, that works analogically.

Enabling access to backoffice means setting the PrincipalModel.BACKOFFICELOGINDISABLED of the SSO user to false.

See Also:

Serialized Form

Nested Class Summary

Nested classes/interfaces inherited from class de.hybris.platform.samlsinglesignon.DefaultSSOService

DefaultSSOService.SSOUserMapping

Nested classes/interfaces inherited from class de.hybris.platform.servicelayer.internal.service.AbstractService

AbstractService.SerializableDTO

Field Summary

Fields

Modifier and Type	Field and Description
protected static java.lang.String	ENABLE_BACKOFFICE_LOGIN_PARAM

Fields inherited from class de.hybris.platform.samlsinglesignon.DefaultSSOService

MD5_PASSWORD_ENCODING, SSO_DATABASE_USERGROUP_MAPPING, SSO_PASSWORD_ENCODING

Fields inherited from class de.hybris.platform.servicelayer.internal.service.AbstractService

tenant

Constructor Summary

Constructors

Constructor and Description
BackofficeSSOService()

Method Summary

Modifier and Type	Method and Description
protected void	adjustUserAttributes(UserModel user, DefaultSSOService.SSOUserMapping mapping) Adjusting user groups
protected DefaultSSOService.SSOUserMapping	findMappingInProperties(java.util.Collection<java.lang.String> roles)
protected boolean	getEnableBackofficeLogin(java.util.Collection<java.lang.String> roles)
protected DefaultSSOService.SSOUserMapping	performMapping(java.util.List<SamlUserGroupModel> userGroupModels)

Methods inherited from class de.hybris.platform.samlsinglesignon.DefaultSSOService

createNewUser, findMapping, findMappingInDatabase, getMappingForRole, getOrCreateSSOUser, lookupExisting, setModelService, setSamlUserGroupDAO, setUserService, validateMappings

Methods inherited from class de.hybris.platform.servicelayer.internal.service.AbstractService

afterPropertiesSet, getCurrentTenant, setBeanName, setCurrentTenant, writeReplace

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

ENABLE_BACKOFFICE_LOGIN_PARAM

protected static final java.lang.String ENABLE_BACKOFFICE_LOGIN_PARAM

See Also:

Constant Field Values

Constructor Detail

BackofficeSSOService

public BackofficeSSOService()

Method Detail

findMappingInProperties

protected DefaultSSOService.SSOUserMapping findMappingInProperties(java.util.Collection<java.lang.String> roles)

Overrides:

findMappingInProperties in class DefaultSSOService

getEnableBackofficeLogin

protected boolean getEnableBackofficeLogin(java.util.Collection<java.lang.String> roles)

performMapping

protected DefaultSSOService.SSOUserMapping performMapping(java.util.List<SamlUserGroupModel> userGroupModels)

Overrides:

performMapping in class DefaultSSOService

adjustUserAttributes

protected void adjustUserAttributes(UserModel user,
                                    DefaultSSOService.SSOUserMapping mapping)

Description copied from class: DefaultSSOService

Adjusting user groups

Overrides:

adjustUserAttributes in class DefaultSSOService

Parameters:

user - the user to adjust the groups for

mapping - the mapping which holds the groups