Interface PostRegistrationSessionAwareAdapter


  • public interface PostRegistrationSessionAwareAdapter
    An interface that allows an IdP adapter to authenticate a user after that user is registered via a Local Identity Profile

    PingFederate's Authentication Sessions capability allows any adapter to be wrapped in a session. If a session has been created for a user and has not expired, PingFederate will use the stored authentication attributes instead of invoking the adapter's lookupAuthN method.

    By implementing this interface, an adapter can authenticate the user and update the attributes provided in the user's Authentication Session.

    Since:
    10.1.0
    See Also:
    IdpAuthenticationAdapterV2
    • Method Detail

      • authenticateUser

        Map<String,​Object> authenticateUser​(String username,
                                                  String password,
                                                  Map<String,​Object> extraParams)
        A method that the PingFederate server calls after a local user is registered through a Local Identity Profile. This method can be used to establish an Authentication Session. The attributes returned here will uniquely identify the authenticated security context of the user.
        Parameters:
        username - The value of the username field for the newly registered user. By default this would be the value of Unique ID field defined in the Local Identity Profile.
        password - The password of the newly registered user.
        extraParams - Extra params that may be needed to authenticate this user successfully.
        Returns:
        A map of attributes. See AuthnAdapterResponse.getAttributeMap().