Scott Koranda

Add documentation on minimal working example of an IdP

2

The documentation should cover how to create the IdP from configuration, process an authentication request, and send a signed assertion/response.

The top level documentation at https://pysaml2.readthedocs.io/en/latest/ should be re-organized in preparation for making places to put other new documentation.

Config to disable discovery initiated SAMLBackend flows

6

The current SAMLBackend allows a flow to start with the disco_response() endpoint, i.e., a client passing in the entityID of the IdP to be used for authentication. In most deployments...

LDAP Attribute Store microservice should do case-insensitive comparisons when appropriate

1

The LDAP Attribute Store microservice should allow for case-insensitive comparisons when appropriate. For example, if the primary identifier from the upstream authenticating IdP is eduPersonPrincipalName, and the microservice is searching...

LDAP attribute microservice connection pool does not reconnect

4

From a deployer: "the satosa 500 error continues - it seems to start each night when the ldap server reboots & scales down. rebuilding the satosa stack fixes it"

The SAML2 SP backend should check the scope on scoped attributes asserted by an authenticating IdP and compare with the scope from the SAML metadata for the authenticating IdP and...

Update some WordPress API calls and some PHP 7 support

2

Added multi-site support for switch to blog functionality and updated calls to use the newer WordPress user object. Replace deprecated get_usermetadata call with get_user_meta. Check for index 'redirect_to' for $_REQUEST...

invalid MDQ response when entityID ends with .xml

3

pyFF does not return SAML metadata when the entityID in the MDQ query ends with '.xml' and the request includes the header ``` Accept: application/samlmetadata+xml ``` The draft MDQ spec...