Class ExtensionX509IdentityProvider.Builder
- java.lang.Object
-
- com.oracle.bmc.identitydomains.model.ExtensionX509IdentityProvider.Builder
-
- Enclosing class:
- ExtensionX509IdentityProvider
public static class ExtensionX509IdentityProvider.Builder extends Object
-
-
Constructor Summary
Constructors Constructor Description Builder()
-
Method Summary
All Methods Instance Methods Concrete Methods Modifier and Type Method Description ExtensionX509IdentityProviderbuild()ExtensionX509IdentityProvider.BuildercertMatchAttribute(String certMatchAttribute)X509 Certificate Matching AttributeExtensionX509IdentityProvider.Buildercopy(ExtensionX509IdentityProvider model)ExtensionX509IdentityProvider.BuildercrlCheckOnOCSPFailureEnabled(Boolean crlCheckOnOCSPFailureEnabled)Fallback on CRL Validation if OCSP fails.ExtensionX509IdentityProvider.BuildercrlEnabled(Boolean crlEnabled)Set to true to enable CRL ValidationExtensionX509IdentityProvider.BuildercrlLocation(String crlLocation)CRL Location URLExtensionX509IdentityProvider.BuildercrlReloadDuration(Integer crlReloadDuration)Fetch the CRL contents every X minutesExtensionX509IdentityProvider.BuilderekuValidationEnabled(Boolean ekuValidationEnabled)Set to true to enable EKU ValidationExtensionX509IdentityProvider.BuilderekuValues(List<ExtensionX509IdentityProvider.EkuValues> ekuValues)List of EKU which needs to be validatedExtensionX509IdentityProvider.BuilderocspAllowUnknownResponseStatus(Boolean ocspAllowUnknownResponseStatus)Allow access if OCSP response is UNKNOWN or OCSP Responder does not respond within the timeout durationExtensionX509IdentityProvider.BuilderocspEnabled(Boolean ocspEnabled)Set to true to enable OCSP ValidationExtensionX509IdentityProvider.BuilderocspEnableSignedResponse(Boolean ocspEnableSignedResponse)Describes if the OCSP response is signedExtensionX509IdentityProvider.BuilderocspResponderURL(String ocspResponderURL)This property specifies OCSP Responder URL.ExtensionX509IdentityProvider.BuilderocspRevalidateTime(Integer ocspRevalidateTime)Revalidate OCSP status for user after X hoursExtensionX509IdentityProvider.BuilderocspServerName(String ocspServerName)This property specifies the OCSP Server alias nameExtensionX509IdentityProvider.BuilderocspTrustCertChain(List<String> ocspTrustCertChain)OCSP Trusted Certificate ChainExtensionX509IdentityProvider.BuilderotherCertMatchAttribute(String otherCertMatchAttribute)Check for specific conditions of other certificate attributesExtensionX509IdentityProvider.BuildersigningCertificateChain(List<String> signingCertificateChain)Certificate alias list to create a chain for the incoming client certificateExtensionX509IdentityProvider.BuilderuserMatchAttribute(String userMatchAttribute)This property specifies the userstore attribute value that must match the incoming certificate attribute.
-
-
-
Method Detail
-
certMatchAttribute
public ExtensionX509IdentityProvider.Builder certMatchAttribute(String certMatchAttribute)
X509 Certificate Matching Attribute*Added In:** 2010242156
*SCIM++ Properties:** - caseExact: false - idcsSearchable: false - multiValued: false - mutability: readWrite - required: true - returned: default - type: string - uniqueness: none
- Parameters:
certMatchAttribute- the value to set- Returns:
- this builder
-
userMatchAttribute
public ExtensionX509IdentityProvider.Builder userMatchAttribute(String userMatchAttribute)
This property specifies the userstore attribute value that must match the incoming certificate attribute.*Added In:** 2010242156
*SCIM++ Properties:** - caseExact: false - idcsSearchable: false - multiValued: false - mutability: readWrite - required: true - returned: default - type: string - uniqueness: none
- Parameters:
userMatchAttribute- the value to set- Returns:
- this builder
-
otherCertMatchAttribute
public ExtensionX509IdentityProvider.Builder otherCertMatchAttribute(String otherCertMatchAttribute)
Check for specific conditions of other certificate attributes*Added In:** 2010242156
*SCIM++ Properties:** - caseExact: false - idcsSearchable: false - multiValued: false - mutability: readWrite - required: false - returned: default - type: string - uniqueness: none
- Parameters:
otherCertMatchAttribute- the value to set- Returns:
- this builder
-
signingCertificateChain
public ExtensionX509IdentityProvider.Builder signingCertificateChain(List<String> signingCertificateChain)
Certificate alias list to create a chain for the incoming client certificate*Added In:** 2010242156
*SCIM++ Properties:** - caseExact: false - idcsSearchable: false - multiValued: true - mutability: readWrite - required: true - returned: default - type: string - uniqueness: none
- Parameters:
signingCertificateChain- the value to set- Returns:
- this builder
-
ocspEnabled
public ExtensionX509IdentityProvider.Builder ocspEnabled(Boolean ocspEnabled)
Set to true to enable OCSP Validation*Added In:** 2010242156
*SCIM++ Properties:** - caseExact: false - idcsSearchable: false - multiValued: false - mutability: readWrite - required: false - returned: default - type: boolean - uniqueness: none
- Parameters:
ocspEnabled- the value to set- Returns:
- this builder
-
ocspServerName
public ExtensionX509IdentityProvider.Builder ocspServerName(String ocspServerName)
This property specifies the OCSP Server alias name*Added In:** 2010242156
*SCIM++ Properties:** - caseExact: false - idcsSearchable: false - multiValued: false - mutability: readWrite - required: false - returned: default - type: string - uniqueness: none
- Parameters:
ocspServerName- the value to set- Returns:
- this builder
-
ocspResponderURL
public ExtensionX509IdentityProvider.Builder ocspResponderURL(String ocspResponderURL)
This property specifies OCSP Responder URL.*Added In:** 2010242156
*SCIM++ Properties:** - caseExact: false - idcsSearchable: false - multiValued: false - mutability: readWrite - required: false - returned: default - type: string - uniqueness: none
- Parameters:
ocspResponderURL- the value to set- Returns:
- this builder
-
ocspAllowUnknownResponseStatus
public ExtensionX509IdentityProvider.Builder ocspAllowUnknownResponseStatus(Boolean ocspAllowUnknownResponseStatus)
Allow access if OCSP response is UNKNOWN or OCSP Responder does not respond within the timeout duration*Added In:** 2010242156
*SCIM++ Properties:** - caseExact: false - idcsSearchable: false - multiValued: false - mutability: readWrite - required: false - returned: default - type: boolean - uniqueness: none
- Parameters:
ocspAllowUnknownResponseStatus- the value to set- Returns:
- this builder
-
ocspRevalidateTime
public ExtensionX509IdentityProvider.Builder ocspRevalidateTime(Integer ocspRevalidateTime)
Revalidate OCSP status for user after X hours*Added In:** 2010242156
*SCIM++ Properties:** - idcsMaxValue: 24 - idcsMinValue: 0 - idcsSearchable: false - multiValued: false - mutability: readWrite - required: false - returned: default - type: integer - uniqueness: none
- Parameters:
ocspRevalidateTime- the value to set- Returns:
- this builder
-
ocspEnableSignedResponse
public ExtensionX509IdentityProvider.Builder ocspEnableSignedResponse(Boolean ocspEnableSignedResponse)
Describes if the OCSP response is signed*Added In:** 2010242156
*SCIM++ Properties:** - caseExact: false - idcsSearchable: false - multiValued: false - mutability: readWrite - required: false - returned: default - type: boolean - uniqueness: none
- Parameters:
ocspEnableSignedResponse- the value to set- Returns:
- this builder
-
ocspTrustCertChain
public ExtensionX509IdentityProvider.Builder ocspTrustCertChain(List<String> ocspTrustCertChain)
OCSP Trusted Certificate Chain*Added In:** 2010242156
*SCIM++ Properties:** - caseExact: false - idcsSearchable: false - multiValued: true - mutability: readWrite - required: false - returned: default - type: string - uniqueness: none
- Parameters:
ocspTrustCertChain- the value to set- Returns:
- this builder
-
crlEnabled
public ExtensionX509IdentityProvider.Builder crlEnabled(Boolean crlEnabled)
Set to true to enable CRL Validation*Added In:** 2010242156
*SCIM++ Properties:** - caseExact: false - idcsSearchable: false - multiValued: false - mutability: readWrite - required: false - returned: default - type: boolean - uniqueness: none
- Parameters:
crlEnabled- the value to set- Returns:
- this builder
-
crlCheckOnOCSPFailureEnabled
public ExtensionX509IdentityProvider.Builder crlCheckOnOCSPFailureEnabled(Boolean crlCheckOnOCSPFailureEnabled)
Fallback on CRL Validation if OCSP fails.*Added In:** 2010242156
*SCIM++ Properties:** - caseExact: false - idcsSearchable: false - multiValued: false - mutability: readWrite - required: false - returned: default - type: boolean - uniqueness: none
- Parameters:
crlCheckOnOCSPFailureEnabled- the value to set- Returns:
- this builder
-
crlLocation
public ExtensionX509IdentityProvider.Builder crlLocation(String crlLocation)
CRL Location URL*Added In:** 2010242156
*SCIM++ Properties:** - caseExact: false - idcsSearchable: false - multiValued: false - mutability: readWrite - required: false - returned: default - type: string - uniqueness: none
- Parameters:
crlLocation- the value to set- Returns:
- this builder
-
crlReloadDuration
public ExtensionX509IdentityProvider.Builder crlReloadDuration(Integer crlReloadDuration)
Fetch the CRL contents every X minutes*Added In:** 2010242156
*SCIM++ Properties:** - idcsSearchable: false - multiValued: false - mutability: readWrite - required: false - returned: default - type: integer - uniqueness: none
- Parameters:
crlReloadDuration- the value to set- Returns:
- this builder
-
ekuValidationEnabled
public ExtensionX509IdentityProvider.Builder ekuValidationEnabled(Boolean ekuValidationEnabled)
Set to true to enable EKU Validation*Added In:** 2304270343
*SCIM++ Properties:** - caseExact: false - idcsSearchable: false - multiValued: false - mutability: readWrite - required: false - returned: default - type: boolean - uniqueness: none
- Parameters:
ekuValidationEnabled- the value to set- Returns:
- this builder
-
ekuValues
public ExtensionX509IdentityProvider.Builder ekuValues(List<ExtensionX509IdentityProvider.EkuValues> ekuValues)
List of EKU which needs to be validated*Added In:** 2304270343
*SCIM++ Properties:** - caseExact: false - idcsSearchable: false - multiValued: true - mutability: readWrite - required: false - returned: default - type: string - uniqueness: none
- Parameters:
ekuValues- the value to set- Returns:
- this builder
-
build
public ExtensionX509IdentityProvider build()
-
copy
public ExtensionX509IdentityProvider.Builder copy(ExtensionX509IdentityProvider model)
-
-