We only have the means to generate a transient NameID. If a different
one was requested, the code would crash because nameIdValue would
be unset. Fix that we fall back to transient in such a case.

No functional changes

This reverts commit cd4cb9d4.

Add some controllers + tests

Added ability to skip validating the AuthnRequest response destination against metadata if the message is signed and the endpoint doesn't already exist in the SP metadata.

This was already the result after processing previously.

This commit consists of patches automatically generated for this project on https://scrutinizer-ci.com

SAML2INT:  default attrname-format to uri

* Migrate email utils to non-static

* Migrate http utils to non-static

* Migrate net utils to non-static

* Migrate random utils to non-static

* Migrate system utils to non-static

* Migrate time utils to non-static

* Migrate xml utils to non-static

* Upgrade notes

* Update test-framework

* Fix tests

* Migrate array utils to non-static

* Migrate attribute utils to non-static

* Migrate auth utils to non-static

* Migrate config utils to non-static

* Migrate crypto utils to non-static

* Raise coverage

* Fix rebase issue

Convert to our wrapper class for assertions

* Remove deprecated classes

* Remove support for certificate fingerprints

* Remove many deprecated methods and pieces of code

* Remove SAML1.1/Shib1.3 support

* Remove many superfluous annotations

* Update unit test to work with new PHPunit

Closes #1268 
Closes #1020 
Closes #431 
Closes #167 
Closes #151 

* Migrate assertions to Webmozart

* Upgrade saml2-library to v4

* Stop considering Issuer-strings

* Stop considering NameID-arrays

* Raise minimum PHP version to 7.0

* Remove tests pre-PHP 7.2

* Upgrade dev dependencies

* Ignore tests for deprecated class

* Add typehints; not touching public API

* Remove none-array replacements-param; old behaviour from pre-1.4 release

* Psalm fixes

* Add upgrade notes

* PSR-12