SimpleSAMLphp

simpleSAMLphp got a logo! Do you like it? Alternate versions will arrive later; how to use it on black, mini-size, favicons, slide-backgrounds etc.

The Web Browser SSO Profile of SAML 2.0 as well as the Single Log-Out profile have several options for almost everything. Some of the functionality, that is optional to use, is complex to implement, and may seem uneccessary because they does not give ... [More] new functionality, only alternative ways of achiving the same goals. Consequently it is tempting to implement a subset of the profile. The Simplified Web Browser Single Sign-On and Sign-Out Profile for SAML 2.0 is an attempt to standarize a minimalistic subset of the full Web Browser SSO Profile and the Logout-Profile, that will be sufficiently secure, and not lack any significant functionality, be fully compatible with the full version of the profile at the same time that is really easy to implement. [Less]

This presentation was held at the NORDUnet 2008 conference, April 9th. It is about what simpleSAMLphp is, and how to make things the simple way.

Here are some slides from the Kalmar Union Technical overview session at the GNOMIS meeting in Espoo, Finland.

This document specifies a means for transporting authenticated identity info during Session Initiation Protocol signaling without the need for a fully deployed Public Key Infrastructure. The established trust is transfered to the following media ... [More] session and used to perform secure key agreement between the end-points for encryption of the media session. This paper was written as a final year project assignment by Jøran Vagnby Lillesand at Department of Telematics at the Norwegian University of Science and Technology. [Less]

This is the 10th language to which simpleSAMLphp is translated. Thanks to Alex Mihicinac for this contribution. Unfortunately we branched the 1.0 release before this arrived, but if you need slovenian before we release 1.0.1, then just checkout the current version of trunk in subversion.

Finally! simpleSAMLphp homepage for more information Download zip Version 1.0 corresponds to subversion revision 470. It's there. Enjoy. Thanks a lot to the simpleSAMLphp developer team and contributors.

simpleSAMLphp is written in PHP, and therefore best suited for web-applications that are written in PHP. But, today Olav Morken added support for integration with Auth MemCookie. Auth MemCookie is a well-known apache module that checks memcache for ... [More] sessions stored in a special format. The good news is, that now simpleSAMLphp supports putting such special cookies in memcache working with Auth MemCookie. The code is complete, tested and included in the version 1.0 release, but not yet fully documented. There is a configfile in config-templates that should be self-explanatory if you read the Auth MemCookie documentation. There is also an example Apache configuration file in extra/. This means if you run Apache, you can use simpleSAMLphp to protect applications written in Java, Python, ruby, Perl or whatever in CGI! Although this is really great, the setup of simpleSAMLphp in non-PHP environment is a bit more complex, as it includes having both Apache PHP your other programming language memcache Auth MemCookie. Still, may be it is simpler than the alternative ;) [Less]

The documentation is updated to match simpleSAMLphp version 1.0. Ketil Albertsen has done major review of the documentation and improved the language and readability. Thanks alot Ketil! [ simpleSAMLphp documentation ]

This morning simpleSAMLphp existed only in English. Thanks to some really talented and kind persons around Europe, we manage to translate simpleSAMLphp into 9 languages. Thanks to everybody that contributed!