Guy Halse

SAML2INT: add support for errorURL

5

**Is your feature request related to a problem? Please describe.** SAML2INT V2.0 now [requires the inclusion of an errorURL](https://kantarainitiative.github.io/SAMLprofiles/saml2int.html#_metadata_and_trust_management) in identity provider metadata: > [SDP-MD12] > An IdP’s metadata MUST...

check_http does caseful comparison of header field names

3

The `-d` option of check_http allows matching of a string in the HTTP response headers. The current implementation of this makes doing any comparison that includes the header field name...

Custom error handler crashes when session is invalid

1

**Describe the bug** The custom error handlers throw an exception when there is no valid session. This results in a fatal error, early enough to cause PHP to display a...

Allow setting autheap for phase2

1

In order to test some phase2 types, we need to use `autheap=` rather than `auth=` in the eapol_test config. An example of where this is necessary is with EAP-TTLS/EAP-GTC or...

## Organisation - Name: Coalition for Seamless Access - Website: https://seamlessaccess.org/ ## Scope SeamlessAccess is an identity provider discovery service specifically targeting academia, and is increasingly widely used within it....

Add support for filtering Subject Identifier Attributes

2

SSP has support for generating the two "new" SAML subject identifier attributes in saml:SubjectID and saml:PairwiseID. However, it seems that the requirements signalling part of the specification was overlooked. This...