git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@737 44740490-163a-0410-bde0-09ae8108e29a

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@736 44740490-163a-0410-bde0-09ae8108e29a

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@726 44740490-163a-0410-bde0-09ae8108e29a

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@725 44740490-163a-0410-bde0-09ae8108e29a

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@610 44740490-163a-0410-bde0-09ae8108e29a

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@595 44740490-163a-0410-bde0-09ae8108e29a

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@566 44740490-163a-0410-bde0-09ae8108e29a

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@554 44740490-163a-0410-bde0-09ae8108e29a

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@546 44740490-163a-0410-bde0-09ae8108e29a

Added code to retrieve the ID used in a LogoutRequest and the InResponseTo attribute from a LogoutResponse.


git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@541 44740490-163a-0410-bde0-09ae8108e29a

Change SAML2 LogoutRequest and LogoutResponse to use generateID and generateTimestamp from Utilities.


git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@540 44740490-163a-0410-bde0-09ae8108e29a

If NoPassive is returned (ie. user not logged in) AuthnResponse.process creates
a valid session with an empty set of attributes.


git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@537 44740490-163a-0410-bde0-09ae8108e29a

Added support for __default__ host configuration and __dynamic__ entity pointing to generated metadata

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@522 44740490-163a-0410-bde0-09ae8108e29a

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@509 44740490-163a-0410-bde0-09ae8108e29a

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@505 44740490-163a-0410-bde0-09ae8108e29a

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@481 44740490-163a-0410-bde0-09ae8108e29a

Added support for leaving out the samlp:NameIDPolicy in the request by setting the NameIDFormat to null in the SAML 2.0 SP metadata. Requested by James Hartford.

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@424 44740490-163a-0410-bde0-09ae8108e29a

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@373 44740490-163a-0410-bde0-09ae8108e29a

Adding a SIMPLESAML_INCPREFIX parameter before the inclusion of new files. This workaround was neccessary for university of oslo to make simplesamlphp work when ini_Set was not available.

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@353 44740490-163a-0410-bde0-09ae8108e29a

Adding option for protecting metadata. Default is that metadata is not protected (publicly available)

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@340 44740490-163a-0410-bde0-09ae8108e29a

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@287 44740490-163a-0410-bde0-09ae8108e29a

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@250 44740490-163a-0410-bde0-09ae8108e29a

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@249 44740490-163a-0410-bde0-09ae8108e29a

Implementeed better error handling. Separate static function for fatal error in utitilies that present a error the user. This page to the user shows a error text that can be localized to several languages, the error page also shows debug text, and a way to submit errors to the administrators.



git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@232 44740490-163a-0410-bde0-09ae8108e29a

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@231 44740490-163a-0410-bde0-09ae8108e29a

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@229 44740490-163a-0410-bde0-09ae8108e29a

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@222 44740490-163a-0410-bde0-09ae8108e29a

Improved the SAML messages templates regarding XML namespaces optimalization etc. in the logout request and response.

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@221 44740490-163a-0410-bde0-09ae8108e29a

The session class now takes the nameid as an array with value and format, instead of two separate methods. this resulted in changes in several files.

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@218 44740490-163a-0410-bde0-09ae8108e29a

Removed references to SPNameIdentifier, and added support for at SP to define ForceAuthn = true in metadata.


git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@216 44740490-163a-0410-bde0-09ae8108e29a

Changed the authentication request in SAML 2.0. More effective xml namespaces, removed some unneccessary optional fields, etc.

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@213 44740490-163a-0410-bde0-09ae8108e29a

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@207 44740490-163a-0410-bde0-09ae8108e29a

More efficient session usage. Now caching only assoc array for values from logout request. Also implemented a clean() function to call after successfully logged out.


git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@205 44740490-163a-0410-bde0-09ae8108e29a

Removed caching of AuthnResponses in Session object. This reduces the session storage with approx 90%!!



git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@203 44740490-163a-0410-bde0-09ae8108e29a

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@201 44740490-163a-0410-bde0-09ae8108e29a

Implemented more efficient storage of AuthnRequests in session. Instead of caching the complete request object, we now
cache an assoc array with the neccessary parameters. Both for SAML 2.0 and Shib 1.3.


git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@200 44740490-163a-0410-bde0-09ae8108e29a

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@190 44740490-163a-0410-bde0-09ae8108e29a

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@184 44740490-163a-0410-bde0-09ae8108e29a

Implemented verification of authenticationrequest, logoutrequest and logoutresponse. 

Moved config of signing and verification to individual metadata entries. 

To sign/verify on hosted SP there must be a certificate and a privatekey. The normal certificate and privatekey of the IdP are reused when signing is enabled.

To verify remote SP and/or IdP the remote certificate must be present.

This commit is tested to some extend - please post bugs on google code project page.  


git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@178 44740490-163a-0410-bde0-09ae8108e29a

Updating the SAML 2.0 authnresponse generation to use the new API in xmlseclibs for adding reference ID attribute... Basicly an updated needed to make the saml 2 part work with the new xmlseclib version

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@176 44740490-163a-0410-bde0-09ae8108e29a