SimpleSAMLphp

Today I commited two new simplifications to how you configure hosted metadata in simpleSAMLphp. Earlier simpleSAMLphp figured out most of the data required for hosted metadata, but it was required to fill in the hostname and the entity ID. Now, you ... [More] can set the host to be: __DEFAULT__. If simpleSAMLphp cannot find an entry that matches the current hostname, it will use the one marked __DEFAULT__. If you run a SAML 2.0 SP and have only one entry, you can then leave the default value as it is, and you do not need to configure hostname at all. The other simplification is the possibility to automatically generate a entityId. If you set the index of a hosted metadata entry to be __DYNAMIC__, the value that will be used is the URL pointing to generated XML metadata for that entity. We will make use of this in new functionality arriving in simpleSAMLphp soon. These two new functions means that to configure a SAML 2.0 SP, you do not have to configure anything in the saml20-sp-hosted.php metadata. You can leave it to the default: '__DYNAMIC__' => array( 'host' => '__DEFAULT__', ), [Less]

Attached is an example app demonstrating how it is possible to combine simpleSAMLphp configuration with a local configuration object. At the same time the app demonstrates using the simpleSAMLphp template framework, using a template that fetches ... [More] dictionary items from both a local dictionary file and a dictionary file that is part of the simpleSAMLphp distribution. [Less]

Error text. If you have troubles viewing the quicktime view embedded above, dowload the MPEG-4 H.264 version and run it locally.

I've done some improvements to how the authentiction module for drupal handles menues. Now the menues will not be cached, and therefore works more as expected. The changes are not commited to subversion yet, but will be soon. Contact me if ... [More] authentication against rnd.feide.no does not work as it should. A session at rnd.feide.no is active for approx 20 days, and will survive closing the browser. If you want to logout, you should do that explicitly with the federated logout button. [Less]

All the functionality for mapping attribute names, filtering attributes and dynamically generating new attributes was only available in the IdP side of simpleSAMLphp until now. Now you can in example dynamically generate a group attribute on the SP. Read more about attribute tweaking Commited in revision 502/503.

I've rewritten the DokuWiki simpleSAMLphp integration component to be more generic, flexible and easier to install. I have also updated the documentation. Read more about DokuWiki simpleSAMLphp integration

Today we commited a client TLS authentication module to the simpleSAMLphp repository. The module uses Apache (mod_ssl) and extract the DN and CN as attributes sent with SAML 2.0. The module can simply be extended to retrieve attributes from LDAP based on the DN. This work is a contribution from Enrique de la Hoz, which is working with Feide RnD.

I've now finally completed the drupal simpleSAMLphp authentication module. Project homepage and downoad I appreciate if people test it, and report issues to me. The module implements Single Sign-On and Single Log-Out, and also have functionality ... [More] for automatic role population from SAML attributes. I have setup this module on this blog right now. So if you want to test it, then click "federated login" and login with either Feide Test Environment or with Open IdP (guest users). When you have logged in, you may add a comment on this blog entry! Thanks! [Less]

We got a message from the award comitee at the European Identity Conference saying that simpleSAMLphp was nominated as one of three finalists for an Identity Award. We appreciate the nomination, and are exited to hear the final result this week. Thanks to Paul Madsen that hinted the nomination comitee about the simpleSAMLphp project.

We now control these domain names: simplesamlphp.net simplesamlphp.com simplesamlphp.org