org.keycloak.federation.kerberos

Class KerberosFederationProviderFactory

java.lang.Object

org.keycloak.federation.kerberos.KerberosFederationProviderFactory

All Implemented Interfaces:

UserFederationProviderFactory, ProviderFactory<UserFederationProvider>

public class KerberosFederationProviderFactory
extends Object
implements UserFederationProviderFactory

Factory for standalone Kerberos federation provider. Standalone means that it's not backed by LDAP. For Kerberos backed by LDAP (like MS AD or ApacheDS environment) you should rather use LDAP Federation Provider.

Author:

Marek Posolda

Field Summary

Fields

Modifier and Type	Field and Description
static String	PROVIDER_NAME

Constructor Summary

Constructors

Constructor and Description
KerberosFederationProviderFactory()

Method Summary

Methods

Modifier and Type	Method and Description
void	close()
UserFederationProvider	create(KeycloakSession session)
protected KerberosServerSubjectAuthenticator	createKerberosSubjectAuthenticator(CommonKerberosConfig kerberosConfig)
protected KerberosUsernamePasswordAuthenticator	createKerberosUsernamePasswordAuthenticator(CommonKerberosConfig kerberosConfig)
protected SPNEGOAuthenticator	createSPNEGOAuthenticator(String spnegoToken, CommonKerberosConfig kerberosConfig)
Set<String>	getConfigurationOptions()
String	getId()
UserFederationProvider	getInstance(KeycloakSession session, UserFederationProviderModel model)
void	init(Config.Scope config)
void	postInit(KeycloakSessionFactory factory)
UserFederationSyncResult	syncAllUsers(KeycloakSessionFactory sessionFactory, String realmId, UserFederationProviderModel model)
UserFederationSyncResult	syncChangedUsers(KeycloakSessionFactory sessionFactory, String realmId, UserFederationProviderModel model, Date lastSync)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

PROVIDER_NAME

public static final String PROVIDER_NAME

See Also:

Constant Field Values

Constructor Detail

KerberosFederationProviderFactory

public KerberosFederationProviderFactory()

Method Detail

getInstance

public UserFederationProvider getInstance(KeycloakSession session,
                                 UserFederationProviderModel model)

Specified by:

getInstance in interface UserFederationProviderFactory

getConfigurationOptions

public Set<String> getConfigurationOptions()

Specified by:

getConfigurationOptions in interface UserFederationProviderFactory

getId

public String getId()

Specified by:

getId in interface UserFederationProviderFactory

Specified by:

getId in interface ProviderFactory<UserFederationProvider>

syncAllUsers

public UserFederationSyncResult syncAllUsers(KeycloakSessionFactory sessionFactory,
                                    String realmId,
                                    UserFederationProviderModel model)

Specified by:

syncAllUsers in interface UserFederationProviderFactory

syncChangedUsers

public UserFederationSyncResult syncChangedUsers(KeycloakSessionFactory sessionFactory,
                                        String realmId,
                                        UserFederationProviderModel model,
                                        Date lastSync)

Specified by:

syncChangedUsers in interface UserFederationProviderFactory

create

public UserFederationProvider create(KeycloakSession session)

Specified by:

create in interface UserFederationProviderFactory

Specified by:

create in interface ProviderFactory<UserFederationProvider>

init

public void init(Config.Scope config)

Specified by:

init in interface ProviderFactory<UserFederationProvider>

postInit

public void postInit(KeycloakSessionFactory factory)

Specified by:

postInit in interface ProviderFactory<UserFederationProvider>

close

public void close()

Specified by:

close in interface ProviderFactory<UserFederationProvider>

createSPNEGOAuthenticator

protected SPNEGOAuthenticator createSPNEGOAuthenticator(String spnegoToken,
                                            CommonKerberosConfig kerberosConfig)

createKerberosSubjectAuthenticator

protected KerberosServerSubjectAuthenticator createKerberosSubjectAuthenticator(CommonKerberosConfig kerberosConfig)

createKerberosUsernamePasswordAuthenticator

protected KerberosUsernamePasswordAuthenticator createKerberosUsernamePasswordAuthenticator(CommonKerberosConfig kerberosConfig)