Inheritance diagram for ilAuthProviderSaml:

Collaboration diagram for ilAuthProviderSaml:

Public Member Functions
	__construct (ilAuthCredentials $credentials, ?int $a_idp_id=null)

	doAuthentication (ilAuthStatus $status)

	migrateAccount (ilAuthStatus $status)
	Create new account. More...

	createNewAccount (ilAuthStatus $status)
	Create new ILIAS account for external_account. More...

	setExternalAccountName (string $a_name)

	getExternalAccountName ()
	Get external account name. More...

	getTriggerAuthMode ()
	Get auth mode which triggered the account migration 2_1 for ldap account migration with server id 1 11 for apache auth. More...

	getUserAuthModeName ()
	Get user auth mode name ldap_1 for ldap account migration with server id 1 apache for apache auth. More...

Public Member Functions inherited from ilAuthProvider
	__construct (ilAuthCredentials $credentials)

	getLogger ()

	getCredentials ()

	doAuthentication (ilAuthStatus $status)

	getTriggerAuthMode ()
	Get auth mode which triggered the account migration 2_1 for ldap account migration with server id 1 11 for apache auth. More...

	getUserAuthModeName ()
	Get user auth mode name ldap_1 for ldap account migration with server id 1 apache for apache auth. More...

	getExternalAccountName ()
	Get external account name. More...

	migrateAccount (ilAuthStatus $status)
	Create new account. More...

	createNewAccount (ilAuthStatus $status)
	Create new ILIAS account for external_account. More...

Private Member Functions
	determineUidFromAttributes ()

	handleSamlAuth (ilAuthStatus $status)

	importUser (?string $a_internal_login, string $a_external_account, array $a_user_data=[])

	buildUserAttributeXml (ilXmlWriter $xml_writer, ilExternalAuthUserAttributeMappingRule $rule, string $value)

	initUserDefinedFields ()

Private Attributes
const string	LOG_COMPONENT = 'auth'

const string	ERR_WRONG_LOGIN = 'err_wrong_login'

const string	SESSION_TMP_ATTRIBUTES = 'tmp_attributes'

const string	SESSION_TMP_RETURN_TO = 'tmp_return_to'

ilSamlIdp	$idp

readonly ilLanguage	$lng

readonly Profile	$profile

array	$attributes = []

string	$return_to = ''

string	$uid = ''

bool	$force_new_account = false

string	$migration_account = ''

array	$user_defined_fields = null

Additional Inherited Members
Protected Member Functions inherited from ilAuthProvider
	handleAuthenticationFail (ilAuthStatus $status, string $a_reason)

Detailed Description

Definition at line 23 of file class.ilAuthProviderSaml.php.

Constructor & Destructor Documentation

◆ __construct()

ilAuthProviderSaml::__construct	(	ilAuthCredentials	$credentials,
		?int	$a_idp_id = `null`
	)

Definition at line 46 of file class.ilAuthProviderSaml.php.

    {
        global $DIC;
 
        parent::__construct($credentials);
 
        $this->lng = $DIC->language();
        $this->profile = $DIC['user']->getProfile();
 
        if (null === $a_idp_id || 0 === $a_idp_id) {
            $this->idp = ilSamlIdp::getFirstActiveIdp();
        } else {
            $this->idp = ilSamlIdp::getInstanceByIdpId($a_idp_id);
        }
 
        if ($credentials instanceof ilAuthFrontendCredentialsSaml) {
            $this->attributes = $credentials->getAttributes();
            $this->return_to = $credentials->getReturnTo();
        }
    }

References ilAuthProvider\$credentials, $DIC, ILIAS\GlobalScreen\Provider\__construct(), ilSamlIdp\getFirstActiveIdp(), ilSamlIdp\getInstanceByIdpId(), ILIAS\Repository\lng(), and ILIAS\Repository\profile().

Here is the call graph for this function:

Member Function Documentation

◆ buildUserAttributeXml()

ilAuthProviderSaml::buildUserAttributeXml	(	ilXmlWriter	$xml_writer,
		ilExternalAuthUserAttributeMappingRule	$rule,
		string	$value
	)

private

Definition at line 397 of file class.ilAuthProviderSaml.php.

     : void {
        switch (strtolower($rule->getAttribute())) {
            case 'gender':
                $gender_attr = 'Gender';
                match (strtolower($value)) {
                    'n', 'neutral' => $xml_writer->xmlElement($gender_attr, [], 'n'),
                    'm', 'male' => $xml_writer->xmlElement($gender_attr, [], 'm'),
                    // no break
                    default => $xml_writer->xmlElement($gender_attr, [], 'f'),
                };
                break;
 
            case 'firstname':
                $xml_writer->xmlElement('Firstname', [], $value);
                break;
 
            case 'lastname':
                $xml_writer->xmlElement('Lastname', [], $value);
                break;
 
            case 'email':
                $xml_writer->xmlElement('Email', [], $value);
                break;
 
            case 'second_email':
                $xml_writer->xmlElement('SecondEmail', [], $value);
                break;
 
            case 'institution':
                $xml_writer->xmlElement('Institution', [], $value);
                break;
 
            case 'department':
                $xml_writer->xmlElement('Department', [], $value);
                break;
 
            case 'hobby':
                $xml_writer->xmlElement('Hobby', [], $value);
                break;
 
            case 'title':
                $xml_writer->xmlElement('Title', [], $value);
                break;
 
            case 'street':
                $xml_writer->xmlElement('Street', [], $value);
                break;
 
            case 'city':
                $xml_writer->xmlElement('City', [], $value);
                break;
 
            case 'zipcode':
                $xml_writer->xmlElement('PostalCode', [], $value);
                break;
 
            case 'country':
                $xml_writer->xmlElement('Country', [], $value);
                break;
 
            case 'phone_office':
                $xml_writer->xmlElement('PhoneOffice', [], $value);
                break;
 
            case 'phone_home':
                $xml_writer->xmlElement('PhoneHome', [], $value);
                break;
 
            case 'phone_mobile':
                $xml_writer->xmlElement('PhoneMobile', [], $value);
                break;
 
            case 'fax':
                $xml_writer->xmlElement('Fax', [], $value);
                break;
 
            case 'referral_comment':
                $xml_writer->xmlElement('Comment', [], $value);
                break;
 
            case 'matriculation':
                $xml_writer->xmlElement('Matriculation', [], $value);
                break;
 
            case 'birthday':
                $xml_writer->xmlElement('Birthday', [], $value);
                break;
 
            default:
                if (!str_starts_with($rule->getAttribute(), 'udf_')) {
                    break;
                }
 
                $udf_data = explode('_', $rule->getAttribute());
                if (!isset($udf_data[1])) {
                    break;
                }
 
                $this->initUserDefinedFields();
                $field = $this->user_defined_fields[$udf_data[1]] ?? null;
                if ($field === null) {
                    ilLoggerFactory::getLogger('auth')->warning(sprintf(
                        "Invalid/Orphaned UD field mapping detected: %s",
                        $rule->getAttribute()
                    ));
                    break;
                }
 
                $xml_writer->xmlElement(
                    'UserDefinedField',
                    ['Id' => $field->getIdentifier(), 'Name' => $field->getLabel($this->lng)],
                    $value
                );
                break;
        }
    }

References ilExternalAuthUserAttributeMappingRule\getAttribute(), ilLoggerFactory\getLogger(), initUserDefinedFields(), and ilXmlWriter\xmlElement().

Referenced by importUser().

Here is the call graph for this function:

Here is the caller graph for this function:

◆ createNewAccount()

ilAuthProviderSaml::createNewAccount ( ilAuthStatus $status )

Create new ILIAS account for external_account.

Implements ilAuthProviderAccountMigrationInterface.

Definition at line 271 of file class.ilAuthProviderSaml.php.

                                                          : void
    {
        if (
            !is_array(ilSession::get(self::SESSION_TMP_ATTRIBUTES)) ||
            [] === ilSession::get(self::SESSION_TMP_ATTRIBUTES) ||
            $this->getCredentials()->getUsername() === ''
        ) {
            $this->getLogger()->warning('Cannot find user id for external account: ' . $this->getCredentials()->getUsername());
            $this->handleAuthenticationFail($status, self::ERR_WRONG_LOGIN);
            return;
        }
 
        $this->uid = $this->getCredentials()->getUsername();
        $this->attributes = ilSession::get(self::SESSION_TMP_ATTRIBUTES);
        $this->return_to = (string) ilSession::get(self::SESSION_TMP_RETURN_TO);
 
        $this->force_new_account = true;
 
        $this->handleSamlAuth($status);
    }

References ilSession\get(), ilAuthProvider\getCredentials(), ilAuthProvider\getLogger(), ilAuthProvider\handleAuthenticationFail(), and handleSamlAuth().

Here is the call graph for this function:

◆ determineUidFromAttributes()

ilAuthProviderSaml::determineUidFromAttributes ( )

private

Definition at line 67 of file class.ilAuthProviderSaml.php.

                                                 : void
    {
        if (
            !array_key_exists($this->idp->getUidClaim(), $this->attributes) ||
            !is_array($this->attributes[$this->idp->getUidClaim()]) ||
            !array_key_exists(0, $this->attributes[$this->idp->getUidClaim()]) ||
            $this->attributes[$this->idp->getUidClaim()][0] === ''
        ) {
            throw new ilException(sprintf(
                'Could not find unique SAML attribute for the configured identifier: %s',
                print_r($this->idp->getUidClaim(), true)
            ));
        }
 
        $this->uid = $this->attributes[$this->idp->getUidClaim()][0];
    }

Referenced by doAuthentication().

Here is the caller graph for this function:

◆ doAuthentication()

ilAuthProviderSaml::doAuthentication ( ilAuthStatus $status )

Implements ilAuthProviderInterface.

Definition at line 84 of file class.ilAuthProviderSaml.php.

                                                          : bool
    {
        if ([] === $this->attributes) {
            $this->getLogger()->warning('Could not parse any attributes from SAML response.');
            $this->handleAuthenticationFail($status, self::ERR_WRONG_LOGIN);
 
            return false;
        }
 
        try {
            $this->determineUidFromAttributes();
 
            return $this->handleSamlAuth($status);
        } catch (Exception $e) {
            $this->getLogger()->warning($e->getMessage());
            $this->handleAuthenticationFail($status, self::ERR_WRONG_LOGIN);
 
            return false;
        }
    }

References Vendor\Package\$e, determineUidFromAttributes(), ilAuthProvider\getLogger(), ilAuthProvider\handleAuthenticationFail(), and handleSamlAuth().

Here is the call graph for this function:

◆ getExternalAccountName()

ilAuthProviderSaml::getExternalAccountName ( )

Get external account name.

Implements ilAuthProviderAccountMigrationInterface.

Definition at line 297 of file class.ilAuthProviderSaml.php.

                                            : string
    {
        return $this->migration_account;
    }

References $migration_account.

◆ getTriggerAuthMode()

ilAuthProviderSaml::getTriggerAuthMode ( )

Get auth mode which triggered the account migration 2_1 for ldap account migration with server id 1 11 for apache auth.

See also: ilAuthUtils

Implements ilAuthProviderAccountMigrationInterface.

Definition at line 302 of file class.ilAuthProviderSaml.php.

                                        : string
    {
        return ilAuthUtils::AUTH_SAML . '_' . $this->idp->getIdpId();
    }

References ilAuthUtils\AUTH_SAML.

Referenced by handleSamlAuth().

Here is the caller graph for this function:

◆ getUserAuthModeName()

ilAuthProviderSaml::getUserAuthModeName ( )

Get user auth mode name ldap_1 for ldap account migration with server id 1 apache for apache auth.

Implements ilAuthProviderAccountMigrationInterface.

Definition at line 307 of file class.ilAuthProviderSaml.php.

                                         : string
    {
        return 'saml_' . $this->idp->getIdpId();
    }

Referenced by handleSamlAuth(), and importUser().

Here is the caller graph for this function:

◆ handleSamlAuth()

ilAuthProviderSaml::handleSamlAuth ( ilAuthStatus $status )

private

Definition at line 105 of file class.ilAuthProviderSaml.php.

                                                         : bool
    {
        $update_auth_mode = false;
 
        ilLoggerFactory::getLogger(self::LOG_COMPONENT)->debug(sprintf(
            'Login observer called for SAML authentication request of ext_account "%s" and auth_mode "%s".',
            $this->uid,
            $this->getUserAuthModeName()
        ));
        ilLoggerFactory::getLogger(self::LOG_COMPONENT)->debug(sprintf('Target set to: %s', print_r($this->return_to, true)));
        ilLoggerFactory::getLogger(self::LOG_COMPONENT)->debug(sprintf(
            'Trying to find ext_account "%s" for auth_mode "%s".',
            $this->uid,
            $this->getUserAuthModeName()
        ));
 
        $internal_account = ilObjUser::_checkExternalAuthAccount(
            $this->getUserAuthModeName(),
            $this->uid,
            false
        );
 
        if (!is_string($internal_account) || $internal_account === '') {
            $update_auth_mode = true;
 
            ilLoggerFactory::getLogger(self::LOG_COMPONENT)->debug(sprintf(
                'Could not find ext_account "%s" for auth_mode "%s".',
                $this->uid,
                $this->getUserAuthModeName()
            ));
 
            $fallback_auth_mode = 'local';
            ilLoggerFactory::getLogger(self::LOG_COMPONENT)->debug(sprintf(
                'Trying to find ext_account "%s" for auth_mode "%s".',
                $this->uid,
                $fallback_auth_mode
            ));
            $internal_account = ilObjUser::_checkExternalAuthAccount($fallback_auth_mode, $this->uid, false);
 
            $defaultAuth = ilAuthUtils::AUTH_LOCAL;
            if ($GLOBALS['DIC']['ilSetting']->get('auth_mode')) {
                $defaultAuth = $GLOBALS['DIC']['ilSetting']->get('auth_mode');
            }
 
            if (
                (!is_string($internal_account) || $internal_account === '') &&
                ($defaultAuth == ilAuthUtils::AUTH_LOCAL || $defaultAuth == $this->getTriggerAuthMode())
            ) {
                ilLoggerFactory::getLogger(self::LOG_COMPONENT)->debug(sprintf(
                    'Could not find ext_account "%s" for auth_mode "%s".',
                    $this->uid,
                    $fallback_auth_mode
                ));
 
                $fallback_auth_mode = 'default';
                ilLoggerFactory::getLogger(self::LOG_COMPONENT)->debug(sprintf(
                    'Trying to find ext_account "%s" for auth_mode "%s".',
                    $this->uid,
                    $fallback_auth_mode
                ));
                $internal_account = ilObjUser::_checkExternalAuthAccount($fallback_auth_mode, $this->uid, false);
            }
        }
 
        if (is_string($internal_account) && $internal_account !== '') {
            ilLoggerFactory::getLogger(self::LOG_COMPONENT)->debug(sprintf(
                'Found user "%s" for ext_account "%s" in ILIAS database.',
                $internal_account,
                $this->uid
            ));
 
            if ($this->idp->isSynchronizationEnabled()) {
                ilLoggerFactory::getLogger(self::LOG_COMPONENT)->debug(sprintf(
                    'SAML user synchronisation is enabled, so update existing user "%s" with ext_account "%s".',
                    $internal_account,
                    $this->uid
                ));
                $internal_account = $this->importUser($internal_account, $this->uid, $this->attributes);
            }
 
            if ($update_auth_mode) {
                $usr_id = ilObjUser::_loginExists($internal_account);
                if ($usr_id > 0) {
                    ilObjUser::_writeAuthMode($usr_id, $this->getUserAuthModeName());
                    ilLoggerFactory::getLogger(self::LOG_COMPONENT)->debug(sprintf(
                        'SAML Switched auth_mode of user with login "%s" and ext_account "%s" to "%s".',
                        $internal_account,
                        $this->uid,
                        $this->getUserAuthModeName()
                    ));
                } else {
                    ilLoggerFactory::getLogger(self::LOG_COMPONENT)->debug(sprintf(
                        'SAML Could not switch auth_mode of user with login "%s" and ext_account "%s" to "%s".',
                        $internal_account,
                        $this->uid,
                        $this->getUserAuthModeName()
                    ));
                }
            }
 
            ilLoggerFactory::getLogger(self::LOG_COMPONENT)->debug(sprintf(
                'Authentication succeeded: Found internal login "%s for ext_account "%s" and auth_mode "%s".',
                $internal_account,
                $this->uid,
                $this->getUserAuthModeName()
            ));
 
            $status->setStatus(ilAuthStatus::STATUS_AUTHENTICATED);
            $status->setAuthenticatedUserId(ilObjUser::_lookupId($internal_account));
            ilSession::set('used_external_auth_mode', $this->getTriggerAuthMode());
 
            return true;
        }
 
        ilLoggerFactory::getLogger(self::LOG_COMPONENT)->debug(sprintf(
            'Could not find an existing user for ext_account "%s" for any relevant auth_mode.',
            $this->uid
        ));
        if ($this->idp->isSynchronizationEnabled()) {
            ilLoggerFactory::getLogger(self::LOG_COMPONENT)->debug(sprintf(
                'SAML user synchronisation is enabled, so determine action for ext_account "%s" and auth_mode "%s".',
                $this->uid,
                $this->getUserAuthModeName()
            ));
            if (!$this->force_new_account && $this->idp->isAccountMigrationEnabled()) {
                ilSession::set(self::SESSION_TMP_ATTRIBUTES, $this->attributes);
                ilSession::set(self::SESSION_TMP_RETURN_TO, $this->return_to);
 
                ilLoggerFactory::getLogger(self::LOG_COMPONENT)->debug(sprintf(
                    'Account migration is enabled, so redirecting ext_account "%s" to account migration screen.',
                    $this->uid
                ));
 
                $this->setExternalAccountName($this->uid);
                $status->setStatus(ilAuthStatus::STATUS_ACCOUNT_MIGRATION_REQUIRED);
 
                return false;
            }
 
            $new_name = $this->importUser(null, $this->uid, $this->attributes);
            ilLoggerFactory::getLogger(self::LOG_COMPONENT)->debug(sprintf(
                'Created new user account with login "%s" and ext_account "%s".',
                $new_name,
                $this->uid
            ));
 
            ilSession::set(self::SESSION_TMP_ATTRIBUTES, null);
            ilSession::set(self::SESSION_TMP_RETURN_TO, null);
            ilSession::set('used_external_auth_mode', $this->getTriggerAuthMode());
 
            $status->setStatus(ilAuthStatus::STATUS_AUTHENTICATED);
            $status->setAuthenticatedUserId(ilObjUser::_lookupId($new_name));
 
            return true;
        }
 
        ilLoggerFactory::getLogger(self::LOG_COMPONENT)->debug("SAML user synchronisation is not enabled, auth failed.");
        $this->handleAuthenticationFail($status, 'err_auth_saml_no_ilias_user');
 
        return false;
    }

References $GLOBALS, ilObjUser\_checkExternalAuthAccount(), ilObjUser\_loginExists(), ilObjUser\_lookupId(), ilObjUser\_writeAuthMode(), ilAuthUtils\AUTH_LOCAL, ilLoggerFactory\getLogger(), getTriggerAuthMode(), getUserAuthModeName(), ilAuthProvider\handleAuthenticationFail(), importUser(), ilSession\set(), ilAuthStatus\setAuthenticatedUserId(), setExternalAccountName(), ilAuthStatus\setStatus(), ilAuthStatus\STATUS_ACCOUNT_MIGRATION_REQUIRED, and ilAuthStatus\STATUS_AUTHENTICATED.

Referenced by createNewAccount(), and doAuthentication().

Here is the call graph for this function:

Here is the caller graph for this function:

◆ importUser()

ilAuthProviderSaml::importUser	(	?string	$a_internal_login,
		string	$a_external_account,
		array	$a_user_data = `[]`
	)

private

Definition at line 312 of file class.ilAuthProviderSaml.php.

                                                                                                               : string
    {
        $mapping = new ilExternalAuthUserAttributeMapping('saml', $this->idp->getIdpId());
 
        $xml_writer = new ilXmlWriter();
        $xml_writer->xmlStartTag('Users');
        if (null === $a_internal_login) {
            $login = $a_user_data[$this->idp->getLoginClaim()][0];
            $login = ilAuthUtils::_generateLogin($login);
 
            $xml_writer->xmlStartTag(
                'User',
                [
                    'Action' => 'Insert',
                    'Language' => $this->lng->getDefaultLanguage()
                ]
            );
            $xml_writer->xmlElement('Login', [], $login);
 
            $xml_writer->xmlElement('Role', [
                'Id' => $this->idp->getDefaultRoleId(),
                'Type' => 'Global',
                'Action' => 'Assign'
            ]);
 
            $xml_writer->xmlElement('Active', [], "true");
            $xml_writer->xmlElement('TimeLimitOwner', [], USER_FOLDER_ID);
            $xml_writer->xmlElement('TimeLimitUnlimited', [], 1);
            $xml_writer->xmlElement('TimeLimitFrom', [], time());
            $xml_writer->xmlElement('TimeLimitUntil', [], time());
            $xml_writer->xmlElement(
                'AuthMode',
                ['type' => $this->getUserAuthModeName()],
                $this->getUserAuthModeName()
            );
            $xml_writer->xmlElement('ExternalAccount', [], $a_external_account);
 
            $mapping = new ilExternalAuthUserCreationAttributeMappingFilter($mapping);
        } else {
            $login = $a_internal_login;
            $usr_id = ilObjUser::_lookupId($a_internal_login);
 
            $xml_writer->xmlStartTag('User', ['Action' => 'Update', 'Id' => $usr_id]);
 
            $loginClaim = $a_user_data[$this->idp->getLoginClaim()][0];
            if (ilStr::strToLower($login) !== ilStr::strToLower($loginClaim)) {
                $login = ilAuthUtils::_generateLogin($loginClaim);
                $xml_writer->xmlElement('Login', [], $login);
            }
 
            $mapping = new ilExternalAuthUserUpdateAttributeMappingFilter($mapping);
        }
 
        foreach ($mapping as $rule) {
            try {
                $attributeValueParser = new ilSamlMappedUserAttributeValueParser($rule, $a_user_data);
                $value = $attributeValueParser->parse();
                $this->buildUserAttributeXml($xml_writer, $rule, $value);
            } catch (ilSamlException $e) {
                $this->getLogger()->warning($e->getMessage());
                continue;
            }
        }
 
        $xml_writer->xmlEndTag('User');
        $xml_writer->xmlEndTag('Users');
 
        ilLoggerFactory::getLogger(self::LOG_COMPONENT)->debug(sprintf(
            'Started import of user "%s" with ext_account "%s" and auth_mode "%s".',
            $login,
            $a_external_account,
            $this->getUserAuthModeName()
        ));
        $importParser = new ilUserImportParser();
        $importParser->setXMLContent($xml_writer->xmlDumpMem(false));
        $importParser->setRoleAssignment([
            $this->idp->getDefaultRoleId() => $this->idp->getDefaultRoleId(),
        ]);
        $importParser->setFolderId(USER_FOLDER_ID);
        $importParser->setUserMappingMode(ilUserImportParser::IL_USER_MAPPING_ID);
        $importParser->startParsing();
 
        return $login;
    }

References Vendor\Package\$e, ilAuthUtils\_generateLogin(), ilObjUser\_lookupId(), buildUserAttributeXml(), ilAuthProvider\getLogger(), ilLoggerFactory\getLogger(), getUserAuthModeName(), ilUserImportParser\IL_USER_MAPPING_ID, ILIAS\Repository\lng(), ilStr\strToLower(), and USER_FOLDER_ID.

Referenced by handleSamlAuth().

Here is the call graph for this function:

Here is the caller graph for this function:

◆ initUserDefinedFields()

ilAuthProviderSaml::initUserDefinedFields ( )

private

Definition at line 518 of file class.ilAuthProviderSaml.php.

                                            : void
    {
        if ($this->user_defined_fields === null) {
            $this->user_defined_fields = $this->profile->getAllUserDefinedFields();
        }
    }

References ILIAS\Repository\profile().

Referenced by buildUserAttributeXml().

Here is the call graph for this function:

Here is the caller graph for this function:

◆ migrateAccount()

ilAuthProviderSaml::migrateAccount ( ilAuthStatus $status )

Create new account.

Implements ilAuthProviderAccountMigrationInterface.

Definition at line 267 of file class.ilAuthProviderSaml.php.

                                                        : void
    {
    }

◆ setExternalAccountName()

ilAuthProviderSaml::setExternalAccountName ( string $a_name )

Definition at line 292 of file class.ilAuthProviderSaml.php.

                                                          : void
    {
        $this->migration_account = $a_name;
    }

Referenced by handleSamlAuth().

Here is the caller graph for this function:

Field Documentation

◆ $attributes

array ilAuthProviderSaml::$attributes = []

private

Definition at line 36 of file class.ilAuthProviderSaml.php.

◆ $force_new_account

bool ilAuthProviderSaml::$force_new_account = false

private

Definition at line 39 of file class.ilAuthProviderSaml.php.

◆ $idp

ilSamlIdp ilAuthProviderSaml::$idp

private

Definition at line 32 of file class.ilAuthProviderSaml.php.

◆ $lng

readonly ilLanguage ilAuthProviderSaml::$lng

private

Definition at line 33 of file class.ilAuthProviderSaml.php.

◆ $migration_account

string ilAuthProviderSaml::$migration_account = ''

private

Definition at line 40 of file class.ilAuthProviderSaml.php.

Referenced by getExternalAccountName().

◆ $profile

readonly Profile ilAuthProviderSaml::$profile

private

Definition at line 34 of file class.ilAuthProviderSaml.php.

◆ $return_to

string ilAuthProviderSaml::$return_to = ''

private

Definition at line 37 of file class.ilAuthProviderSaml.php.

◆ $uid

string ilAuthProviderSaml::$uid = ''

private

Definition at line 38 of file class.ilAuthProviderSaml.php.

◆ $user_defined_fields

array ilAuthProviderSaml::$user_defined_fields = null

private

Definition at line 44 of file class.ilAuthProviderSaml.php.

◆ ERR_WRONG_LOGIN

const string ilAuthProviderSaml::ERR_WRONG_LOGIN = 'err_wrong_login'

private

Definition at line 27 of file class.ilAuthProviderSaml.php.

◆ LOG_COMPONENT

const string ilAuthProviderSaml::LOG_COMPONENT = 'auth'

private

Definition at line 25 of file class.ilAuthProviderSaml.php.

◆ SESSION_TMP_ATTRIBUTES

const string ilAuthProviderSaml::SESSION_TMP_ATTRIBUTES = 'tmp_attributes'

private

Definition at line 29 of file class.ilAuthProviderSaml.php.

◆ SESSION_TMP_RETURN_TO

const string ilAuthProviderSaml::SESSION_TMP_RETURN_TO = 'tmp_return_to'

private

Definition at line 30 of file class.ilAuthProviderSaml.php.

The documentation for this class was generated from the following file:

components/ILIAS/Saml/classes/class.ilAuthProviderSaml.php

Public Member Functions

Private Member Functions

Private Attributes

Additional Inherited Members

Detailed Description

Constructor & Destructor Documentation

◆ __construct()

Member Function Documentation

◆ buildUserAttributeXml()

◆ createNewAccount()

◆ determineUidFromAttributes()

◆ doAuthentication()

◆ getExternalAccountName()

◆ getTriggerAuthMode()

◆ getUserAuthModeName()

◆ handleSamlAuth()

◆ importUser()

◆ initUserDefinedFields()

◆ migrateAccount()

◆ setExternalAccountName()

Field Documentation

◆ $attributes

◆ $force_new_account

◆ $idp

◆ $lng

◆ $migration_account

◆ $profile

◆ $return_to

◆ $uid

◆ $user_defined_fields

◆ ERR_WRONG_LOGIN

◆ LOG_COMPONENT

◆ SESSION_TMP_ATTRIBUTES

◆ SESSION_TMP_RETURN_TO