com.sun.identity.security

Class AdminTokenAction

java.lang.Object

com.sun.identity.security.AdminTokenAction

All Implemented Interfaces:

PrivilegedAction<SSOToken>

public class AdminTokenAction
extends Object
implements PrivilegedAction<SSOToken>

The class is used to perform privileged operations using AccessController.doPrivileged(PrivilegedAction) when trying to get Application single sign on token. There are three approaches to get single sign on token:

1. Return the single sign on token of the administrator configured in serverconfig.xml if the code runs on server side.
2. If #1 fails, it implies the client is using remote SDK. If com.sun.identity.security.AdminToken is specified in AMConfig.properties, we will call this application token provider plug-in to retrieve the single sign on token.
3. If #2 fails, we look for com.sun.identity.agents.app.username and com.iplanet.am.service.password in AMConfig.properties, if so, we will generate single sign token of administrator based on the user name and password.

Note: Java security permissions check for OpenAM can be enabled by setting the property com.sun.identity.security.checkcaller to true in AMConfig.properties file.

Constructor Summary

Constructors

Modifier	Constructor and Description
protected	AdminTokenAction() Default constructor

Method Summary

Modifier and Type	Method and Description
void	authenticationInitialized() Informs AdminTokenAction that Authentication has been initialized This class will start using Authentication service to obtain SSOToken for admin users
static AdminTokenAction	getInstance() Returns a cached instance AdminTokenAction.
protected void	init()
static void	invalid() Resets cached SSOToken.
SSOToken	run()

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

AdminTokenAction

protected AdminTokenAction()
                    throws SSOException

Default constructor

Throws:

SSOException

Method Detail

getInstance

public static AdminTokenAction getInstance()

Returns a cached instance AdminTokenAction.

Returns:

instance of AdminTokenAction.

init

protected void init()
             throws SSOException

Throws:

SSOException

authenticationInitialized

public void authenticationInitialized()

Informs AdminTokenAction that Authentication has been initialized This class will start using Authentication service to obtain SSOToken for admin users

invalid

public static void invalid()

Resets cached SSOToken. WITHOUT destroying. Called when we know the token is invalid

run

public SSOToken run()

Specified by:

run in interface PrivilegedAction<SSOToken>