[CXF-4464] Support ClaimsHandler per realm

• Type: New Feature
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.6.1
• Fix Version/s: 2.7.6, 3.0.0-milestone1
• Component/s: Services
• Estimated Complexity: Unknown
• Assignee: Oliver Wulff
• Reporter: Oliver Wulff
• Created: 08/Aug/12 21:31
• Updated: 14/Aug/13 15:49
• Resolved: 30/May/13 21:32

Description

A ClaimsHandler is independent of the STS realm.

Example: The LdapClaimsHandler is configured to support the claims firstname and lastname. The principal (ws-sec header, onbehalfof, actas) is mapped to the STS realm. But you must use another principal to access the claims data from the LDAP directory. Thus a claimshandler must know which principal of which realm must be used to retrieve the claims.

Therefore, the ClaimsHandler must provide the information in which realm he is applicable thus the ClaimsManager can map the identity before calling retrieveClaimValues.

Issue Links

• Is contained by: CXF-5039 IdentityMapping support in ClaimsManager