Package org.apache.jackrabbit.oak.spi.security.authentication.external.impl.principal

Class ExternalPrincipalConfiguration

  • All Implemented Interfaces:
    PrincipalConfiguration, SecurityConfiguration
    @Service({PrincipalConfiguration.class,SecurityConfiguration.class})
@Property(name="protectExternalId",label="External Identity Protection",description="If disabled rep:externalId properties won\'t be properly protected (backwards compatible behavior). NOTE: for security reasons it is strongly recommend to keep the protection enabled!",boolValue=true) @Property(name="protectExternalIdentities",label="External User and Group Protection",description="If \'None\' is selected the synchronized external users/groups won\'t be protected (backwards compatible behavior) and can be edited like local users/groups. NOTE: in order to avoid having inconsistencies between the IDP that defines the external identities and local synced identities it is recommend to enable the protection. With option \'Warn\' the protection is disabled but warnings will be logged.",options={@PropertyOption(name="None",value="None"),@PropertyOption(name="Warn",value="Warn"),@PropertyOption(name="Protected",value="Protected")}) @Property(name="systemPrincipalNames",label="System Principal Names",description="Names of additional \'SystemUserPrincipal\' instances that are excluded from the protection check. Note that this configuration does not grant the required permission to perform the operation.",value={},cardinality=10) @Property(name="oak.security.name",propertyPrivate=true,value="org.apache.jackrabbit.oak.spi.security.authentication.external.impl.principal.ExternalPrincipalConfiguration")
public class ExternalPrincipalConfiguration
extends ConfigurationBase
implements PrincipalConfiguration
    Implementation of the PrincipalConfiguration interface that provides principal management for Group principals associated with external identities managed outside of the scope of the repository by an ExternalIdentityProvider.
    Since:
    Oak 1.5.3
    See Also:
    OAK-4101