diff --git a/docs/simplesamlphp-upgrade-notes-2.0.md b/docs/simplesamlphp-upgrade-notes-2.0.md index 013b077445be34c50317137105c5ec83cb3e1be3..4e20c01304fa9000e7673ac8597b4799817e12b7 100644 --- a/docs/simplesamlphp-upgrade-notes-2.0.md +++ b/docs/simplesamlphp-upgrade-notes-2.0.md @@ -39,6 +39,11 @@ composer require simplesamlphp/simplesamlphp-module-ldap --update-no-dev `metadata/saml20-idp-hosted.php` (or to the existing entityID when upgrading an existing installation). If you are using a database to store metadata, make sure to replace any __DYNAMIC% entityID's with a real value manually. Dynamic records are no longer loaded from the database. +- SAML endpoints have changed, meaning that a metadata exchange with your peers _could_ be necessary depending on + your configuration. If you are an IDP, you are fine, because the old endpoints still work and you can still + receive authentication requests there. If you're an SP, it is dependent on you IDPs.. For example, Azure AD is known + to break and will require a new metadata exchange. However, any SAML2INT compliant IDP should accept the new endpoint + out-of-the-box _if_ you are signing your authentication requests. ## Configuration changes