Adding support for the IdP-first flow with SAML 2.0, where there is no authentication request, and an unsolited response is sent back to the SP.



git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@1242 44740490-163a-0410-bde0-09ae8108e29a

Removed deprecated attribute handling code. Replaced by auth proc filters... Full documentation will be published tomorrow.

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@1106 44740490-163a-0410-bde0-09ae8108e29a

Minor change to syntax on authproc parameter, and also add support for adding authproc definitions in config.php globally. I am soon posting a document describing this in detail

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@1097 44740490-163a-0410-bde0-09ae8108e29a

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@1088 44740490-163a-0410-bde0-09ae8108e29a

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@1066 44740490-163a-0410-bde0-09ae8108e29a

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@1016 44740490-163a-0410-bde0-09ae8108e29a

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@939 44740490-163a-0410-bde0-09ae8108e29a

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@929 44740490-163a-0410-bde0-09ae8108e29a

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@918 44740490-163a-0410-bde0-09ae8108e29a

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@917 44740490-163a-0410-bde0-09ae8108e29a

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@900 44740490-163a-0410-bde0-09ae8108e29a

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@889 44740490-163a-0410-bde0-09ae8108e29a

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@864 44740490-163a-0410-bde0-09ae8108e29a

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@854 44740490-163a-0410-bde0-09ae8108e29a

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@848 44740490-163a-0410-bde0-09ae8108e29a

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@816 44740490-163a-0410-bde0-09ae8108e29a

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@815 44740490-163a-0410-bde0-09ae8108e29a

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@755 44740490-163a-0410-bde0-09ae8108e29a

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@742 44740490-163a-0410-bde0-09ae8108e29a

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@727 44740490-163a-0410-bde0-09ae8108e29a

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@711 44740490-163a-0410-bde0-09ae8108e29a

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@697 44740490-163a-0410-bde0-09ae8108e29a

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@694 44740490-163a-0410-bde0-09ae8108e29a

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@663 44740490-163a-0410-bde0-09ae8108e29a

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@662 44740490-163a-0410-bde0-09ae8108e29a

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@661 44740490-163a-0410-bde0-09ae8108e29a

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@656 44740490-163a-0410-bde0-09ae8108e29a

A config option is added which enables this: 'idpdisco.enableremember'
A checkbox allowing the user to save his choice of IdP appears on the IdP
selection page if this option is enabled.

This patch breaks backwards-compatibility for the selectidp-links page. Also,
the selectidp-dropdown page must be modified to show the checkboxk.

An additional page (https://.../simplesaml/cleardiscochoices.php) has been
added to make it possible to delete the current IdP choices.

There are also some dictionary updates which are not part of this patch:
frontpage.php:
+	'link_cleardiscochoices' => array (
+		'en' => 'Delete my choices of IdP in the IdP discovery services',
+		'no' => 'Slett mitt valg av IdP i IdP discovery tjenestene',
+	),
disco.php:
+	'remember' => array (
+		'en' => 'Remember my choice',
+		'no' => 'Husk mitt valg',
+	),


git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@652 44740490-163a-0410-bde0-09ae8108e29a

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@623 44740490-163a-0410-bde0-09ae8108e29a

Change "idpdisco.url.saml2" to "idpdisco.url.saml20", to be consistent with the rest of simpleSAMLphp. Also include a forgotten change from the last patch.


git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@616 44740490-163a-0410-bde0-09ae8108e29a

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@615 44740490-163a-0410-bde0-09ae8108e29a

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@610 44740490-163a-0410-bde0-09ae8108e29a

This patch adds metadata signing. It can be enabled globally by setting
the 'metadata.sign.enable' global option, or per SP/IdP by setting
the same option in the metadata of the SP/IdP.

To sign the metadata, both a private key and a certificate is used. The
following configuration options determine which key and certificate files
will be used:

- per SP/IdP metadata:
  'metadata.sign.privatekey' & 'metadata.sign.certificate'
- globally:
  'metadata.sign.privatekey' & 'metadata.sign.certificate'
- per SP/IdP metadata: (fallback)
  'privatekey' & 'certificate'


git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@593 44740490-163a-0410-bde0-09ae8108e29a

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@580 44740490-163a-0410-bde0-09ae8108e29a

This also changes the declaration of the setData method, as the $timeout
parameter moves to the end of the list.

If no $timeout parameter is supplied, then the 'session.datastore.timeout'
configuration option will be used. If this option doesn't exist, the
'session.requestcache' option will be used. If neither of these are used, then
four hours will be used as the timeout.


git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@576 44740490-163a-0410-bde0-09ae8108e29a

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@569 44740490-163a-0410-bde0-09ae8108e29a

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@567 44740490-163a-0410-bde0-09ae8108e29a

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@544 44740490-163a-0410-bde0-09ae8108e29a

This prevents the RelayState parameter from being passed to the IdP, and also
removes the length limitation some IdPs have on the RelayState parameter.


git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@543 44740490-163a-0410-bde0-09ae8108e29a

If NoPassive is returned (ie. user not logged in) AuthnResponse.process creates
a valid session with an empty set of attributes.


git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@537 44740490-163a-0410-bde0-09ae8108e29a