SAML Service Provider Release Notes

Notes

This is the initial NES release of the SAML Service Provider module.

Changes

• Security: Enable SAML strict protocol validation by default, enforcing Destination/Audience/Issuer checks.
• Security: Pass the tracked request ID into response validation so InResponseTo is checked under strict mode.
• Security: Require a signed assertion or message by default when security settings have never been saved.
• Security: Update existing sites to enable strict validation via a DB update.
• Testing: Add coverage for the security defaults, settings merge, status report, update hook, and response validation.

Download: https://registry.nes.herodevs.com/composer/pkg/neverendingsupport/saml_sp/7.3.5+7.3.4:saml_sp/release.zip