diff --git a/docs/simplesamlphp-upgrade-notes-1.14.md b/docs/simplesamlphp-upgrade-notes-1.14.md index f08b5fdcaf49cb46722027efc3bc54a62a46a87a..dc7eda6b4e4120b5d934e4f26e8096a1c17e55cd 100644 --- a/docs/simplesamlphp-upgrade-notes-1.14.md +++ b/docs/simplesamlphp-upgrade-notes-1.14.md @@ -3,7 +3,7 @@ Upgrade notes for SimpleSAMLphp 1.14 The `mcrypt` extension is no longer required by SimpleSAMLphp, so if no signatures or encryption are being used, it can be skipped. It is still a requirement for `xmlseclibs` though, so for those verifying or creating signed -documents, or using encryption, is is still needed. +documents, or using encryption, it is still needed. PHP session cookies are now set to HTTP-only by default. This relates to the `session.phpsession.httponly` configuration option. @@ -14,6 +14,15 @@ insecure redirections. The jQuery version in use has been bumped to the latest 1.8.X version. +Service Providers using the eduPersonTargetedID attribute, will get a DOMNodeList object instead of the NameID value. In +order to process the NameID, a SAML2_XML_saml_NameID object can be used: + +```php +$attributes = $as->getAttributes(); +$eptid = $attributes['eduPersonTargetedID'][0]->item(0); +$nameID = new SAML2_XML_saml_NameID($eptid); +``` + The following deprecated files, directories and endpoints have been removed: * `bin/pack.php`