An SSO authentication mechanism configuration.
| Name | Dynamic | Other provider points |
|---|---|---|
| org.wildfly.extension.undertow.application-security-domain.single-sign-on.credential-store | true | none |
| org.wildfly.extension.undertow.application-security-domain.single-sign-on.key-store | true | none |
| org.wildfly.extension.undertow.application-security-domain.single-sign-on.client-ssl-context | true | none |
| Attribute | Value |
|---|---|
| Capability reference | |
| Type | STRING |
| Nillable | true |
| Expressions Allowed | false |
| Storage | configuration |
| Access Type | read-write |
| Restart Required | no-services |
| Attribute | Value |
|---|---|
| Type | OBJECT |
| Nillable | false |
| Expressions Allowed | false |
| Storage | configuration |
| Access Type | read-write |
| Restart Required | no-services |
| Attribute | Value |
|---|---|
| Type | STRING |
| Nillable | true |
| Expressions Allowed | true |
| Storage | configuration |
| Access Type | read-write |
| Restart Required | all-services |
| Attribute | Value |
|---|---|
| Default Value | false |
| Type | BOOLEAN |
| Nillable | true |
| Expressions Allowed | true |
| Storage | configuration |
| Access Type | read-write |
| Restart Required | all-services |
| Attribute | Value |
|---|---|
| Type | STRING |
| Nillable | false |
| Expressions Allowed | true |
| Storage | configuration |
| Access Type | read-write |
| Restart Required | no-services |
| Attribute | Value |
|---|---|
| Capability reference | |
| Type | STRING |
| Nillable | false |
| Expressions Allowed | false |
| Storage | configuration |
| Access Type | read-write |
| Restart Required | no-services |
| Attribute | Value |
|---|---|
| Default Value | / |
| Type | STRING |
| Nillable | true |
| Expressions Allowed | true |
| Storage | configuration |
| Access Type | read-write |
| Restart Required | all-services |
| Attribute | Value |
|---|---|
| Default Value | false |
| Type | BOOLEAN |
| Nillable | true |
| Expressions Allowed | true |
| Storage | configuration |
| Access Type | read-write |
| Restart Required | all-services |
| Request Parameter | Type | Required | Expressions Allowed | Default value | Description |
|---|---|---|---|---|---|
| key-alias | STRING | true | true | Alias of the private key entry used for signing and verifying back-channel logout connection. | |
| key-store | STRING | true | false | Reference to key store containing a private key entry. | |
| client-ssl-context | STRING | false | false | Reference to the SSL context used to secure back-channel logout connection. | |
| domain | STRING | false | true | The cookie domain that will be used. | |
| path | STRING | false | true | / | Cookie path. |
| http-only | BOOLEAN | false | true | false | Set Cookie httpOnly attribute. |
| secure | BOOLEAN | false | true | false | Set Cookie secure attribute. |
| cookie-name | STRING | false | true | JSESSIONIDSSO | Name of the cookie |
| credential-reference | OBJECT | true | false | The credential reference to decrypt the private key entry. |