XmBindIdRequest

class XmBindIdRequest

Shared parameters for a BindID request configuration.

Members

public String getRedirectUri()

URL to which BindID will redirect on process completion, to convey results back to the calling application.

public void setRedirectUri(String redirectUri)

URL to which BindID will redirect on process completion, to convey results back to the calling application.

public String getNonce()

Optional.

A nonce value to be included in the generated ID Token. This is typically provided by the application backend, and can be used to ensure at the backend that the authentication response corresponds to a specific request issued by the application.

public void setNonce(@Nullable String nonce)

Optional.

A nonce value to be included in the generated ID Token. This is typically provided by the application backend, and can be used to ensure at the backend that the authentication response corresponds to a specific request issued by the application.

public String getState()

Optional.

A state value to be included in the BindID response issued through redirect. This is typically generated at the front-end, and verified at the front-end upon processing the redirect. This ensures that the redirect request corresponds to the BindID authentication request.

public void setState(@Nullable String state)

Optional.

A state value to be included in the BindID response issued through redirect. This is typically generated at the front-end, and verified at the front-end upon processing the redirect. This ensures that the redirect request corresponds to the BindID authentication request.

public List< XmBindIdScopeType > getScope()

Optional.

A set of BindID scopes that will include additional information in the result claims. If not provided, only 'Openid' scope is sent

public void setScope(@Nullable List< XmBindIdScopeType > scope)

Optional.

A set of BindID scopes that will include additional information in the result claims. If not provided, only 'Openid' scope is sent

public List< XmRequiredVerifications > getVerifications()

A collection of verifications to try and execute for this request.

It is not guaranteed that each requested verification will be fulfilled. The acr claim of the resulting access token should be examined to determine which verifications were fulfilled.

public void setVerifications(@Nullable List< XmRequiredVerifications > verifications)

A collection of verifications to try and execute for this request.

It is not guaranteed that each requested verification will be fulfilled. The acr claim of the resulting access token should be examined to determine which verifications were fulfilled.

public String getCustomMessage()

Optional.

A custom message to present as part of the authentication context detail screen.

public void setCustomMessage(@Nullable String customMessage)

Optional.

A custom message to present as part of the authentication context detail screen.

public Boolean getUsePkce()

Indicates if the BindID request will initiate a PKCE flow.

In that case, the SDK will generate a code challenge using the S256 hashing algorithm and return the code verifier that can be used for a token exchange. Default is True.

public void setUsePkce(Boolean usePkce)

Indicates if the BindID request will initiate a PKCE flow.

In that case, the SDK will generate a code challenge using the S256 hashing algorithm and return the code verifier that can be used for a token exchange. Default is True.

public Boolean getEncrypted()

A flag indicates whether the authentication request should be encrypted.

public void setEncrypted(@Nullable Boolean encrypted)

A flag indicates whether the authentication request should be encrypted.

public XmBindIdLoginHint getLoginHint()

Optional.

Type and value for the login hint, which is used as a hint for the user’s login identifier (e.g., their email address)

public void setLoginHint(@Nullable XmBindIdLoginHint loginHint)

Optional.

Type and value for the login hint, which is used as a hint for the user’s login identifier (e.g., their email address)

public XmBindIdBoundTo getBoundTo()

Used to require an authenticating device bound to the Client Application for a specified user (e.g., for step-up authentication).

This bound status is reflected in the ID token by the ts.bindid.app_bound_cred ACR value, which is set using a session-feedback request.

public void setBoundTo(@Nullable XmBindIdBoundTo boundTo)

Used to require an authenticating device bound to the Client Application for a specified user (e.g., for step-up authentication).

This bound status is reflected in the ID token by the ts.bindid.app_bound_cred ACR value, which is set using a session-feedback request.