Category Archives: SimpleSAMLphp

Catalyst IT Ltd offers commercial support on SimpleSAMLphp

Posted on August 19, 2010 by andreas

Yet another company added to the list of commercial support options. Catalyst IT are an Open Source services company based in New Zealand, and we have been engaged by the Ministry of Education here to help design and implement an … Continue reading →

Posted in SimpleSAMLphp | Leave a comment

SSOeasy offers commercial support to SimpleSAMLphp

Posted on August 18, 2010 by andreas

I’ve added yet another company that offers commercial support on SimpleSAMLphp: SSOeasy. http://simplesamlphp.org/support

Posted in SimpleSAMLphp | Leave a comment

9star research now offers SimpleSAML Services

Posted on August 17, 2010 by andreas

9star research now announces commercial support for SimpleSAML Services. We are thrilled to learn that the company 9star research, well-known in the community, now are including SimpleSAMLphp in its list of official services. Our team of dependable SimpleSAMLphp experts and … Continue reading →

Posted in SimpleSAMLphp | 1 Comment

Commercial Support on SimpleSAMLphp in Spain

Posted on August 17, 2010 by andreas

PRiSE has got an expert team on digital identity who has worked in middleware and digital identity international projects. PRiSE announces commercial support on SimpleSAMLphp. More information about commercial support on SimpleSAMLphp

Posted in SimpleSAMLphp | Leave a comment

New mailinglist SimpleSAMLphp Announce

Posted on August 2, 2010 by andreas

The SimpleSAMLphp User’s mailinglist is a pretty high volume list. We have now created a new mailinglist SimpleSAMLphp Announce, that will be moderated, which is dedicated for important announcements only.

Information posted to this list will be such as:

  • Security issues
  • Information about new releases

Members may not post to this list. We provide an RSS feed as well, for those that do prefer that over e-mail.

Continue reading →
Posted in SimpleSAMLphp | Leave a comment

New SimpleSAMLphp Homepage

Posted on August 2, 2010 by andreas

I’ve moved information about SimpleSAMLphp to a separate web site:

Continue reading →
Posted in SimpleSAMLphp | Leave a comment

SimpleSAMLphp version 1.6.2

Posted on July 29, 2010 by andreas

Version 1.6.2 of simpleSAMLphp is available from:

SHA1SUM:

  • 2f4e0b59f03af6fec79004546b439eeaaeac0182 simplesamlphp-1.6.2.tar.gz

This release contains security fixes since version 1.6.1.

During an inspection of the various templates, several cross-site scripting vulnerabilities were discovered. They are mostly related to displaying of metadata or user-attributes, and thus require the attacker to be able to change the metadata or attributes your installation receives.

Except for the issues with attributes and metadata, you may be vulnerable if:

  • You use the InfoCard module.
  • You use the openid authentication source.
  • You use the oauth module.

All users of simpleSAMLphp are encouraged to upgrade.

Continue reading →
Posted in InfoCard, OpenID, SAML Metadata, SimpleSAMLphp | Leave a comment

Attribute Collector Implementation from Spain

Posted on July 26, 2010 by andreas

The Spanish Andalusian federation, CONFIA, has implemented an attribute collector.

Documentation of “attribute collector” is available here:

Continue reading →
Posted in SimpleSAMLphp | Leave a comment

Basic Metadata Aggregation Profile

Posted on July 26, 2010 by andreas

These days federations are connecting to each other in inter-federation arrangements such as eduGAIN and Kalmar.

These first generation inter-federations, all, rely on the same architectural concept of a central Metadata aggregator. We are seeing multiple implementations of metadata aggregators:

  • SimpleSAMLphp Aggregator
  • Leif’s saml-md-aggregator
  • Chad’s aggregator
  • eduGAIN MDS from GÉANT2

These implementations are very unlikely to behave the same way. All those that have implemented or spent time thinking of aggregation of metadata has probably noticed that there are a bunch of special cases where there yet is not a well-defined expectation of what is correct.

Relying on a component in which the behaviour is not well-defined and understood may have security implications. It is also is desired that multiple implementation of the same role have equivalent, such that implementations can be used in the same infrastructure, and easily replacing each other.

With that background, the GÉANT3 Identity Federations working group, have started the work on a Basic Metadata Aggregator Profile, which is intended to define the basic expected behavior of an aggregator, being easily extendable. I do not expect that there at this moment is a consensus on this behavior; but the work with this profile might hopefully lead to that.

Let me introduce the first publicly available draft:

Continue reading →
Posted in SAML Metadata, SimpleSAMLphp | Leave a comment

SimpleSAMLphp version 1.6.1

Posted on July 2, 2010 by andreas

Version 1.6.1 of simpleSAMLphp is now available for download at:

This release only contains bugfixes since version 1.6.0. No new features have been added. Changelog:

  • saml:SP: Fix SingleLogoutService endpoint in SSP-format metadata array.
  • Shib13:IdP: Add urn:mace:shibboleth:1.0 to supported protocols.
  • Fix SAMLParser::parseElement().
  • SAML2:IdP: Fix persistent NameID generation.
  • Fix scoping on IdP discovery page.
  • metaedit: Fix endpoints parsed from XML.
  • Dictionary update.
  • Documentation fixes.
Continue reading →
Posted in SAML Metadata, SimpleSAMLphp | Leave a comment