SAML2P Downloads

Rsk.Saml 5.0.0 is in preview with expected release in Jan 2022

• IdP & SP: Added support for .NET 6
• IdP: Added support for Duende IdentityServer v6.0.0-preview.4
• IdP & SP: Added support for HTTP Artifact binding for sending and receiving all SAML message types
• IdP: Added support for setting NameIdFormat per Service Provider
• SP: Added support for configuring Signing Options
• SP: Added bugfix for signature validation failure for encrypted assertions

• IdP: Handle numerical boolean values for the AllowCreate attribute in an authentication request
• IdP: Handle the scenario where the user is already signed out upon receiving a SAML logout request 

• SP: Added support for the Duende IdentityServer's dynamic auth providers feature
• SP: Added support for sending login hints to IdP, using the `Subject` element in Authentication Requests
• SP: Added support for IdP-initiated RelayState. Added `AllowedIdpInitiatedRelayStates` configuration option
• SP: Use ISamlKeyService for retrieving validation keys in metadata generation

• Use the original URL paths to generate SAML messages, avoiding formatting around port numbers
• SP: Support decryption of assertions using AES-GCM
• SP: Use the ISamlSigningCertificateStore in metadata generator

• Fixed SLO with POST binding on Linux

• IdP: Included missing user session update when using IdP-Initiated SSO

• SP: added support for AuthContextDecl attribute when validation SAML assertions

• Fixed SLO with POST binding on Linux
• SP: Use the ISamlSigningCertificateStore in metadata generator
• Use the original URL paths to generate SAML messages, avoiding formatting around port numbers

• IdP: Added support for Duende IdentityServer
• SP: Added support for .NET 5.0
• SP: Dropped dependency on IdentityServer
• IdP: Improved dev experience with ISamlInteractionService. You can now pass the full return URL to the GetRequestContext method. This is not a breaking change as the method can handle both the request ID and return URL.
• IdP and SP: Improved logging of received SAML response messages
• IdP and SP: Added ISamlSigningCertificateStore extensibility point for SAML specific signing material
• IdP: Added ISamlClientStore extensibility point for SAML specific client application configuration
• IdP: Added ISamlResourceStore extensibility for SAML specific resource & scope configuration
• Added SAML-specific configuration options for controlling Content Security Policy (CSP) headers when using the HTTP POST binding

• Use the original URL paths to generate SAML messages, avoiding formatting around port numbers

• Fixed SLO with POST binding on Linux

• IdP: Included missing user session update when using IdP-Initiated SSO

• SP: Added missing artifact binding ACS endpoint to metadata
• SP: Added support for AttributeConsumingService

• SP: Fixed NullReferenceException when loading ARS endpoint from IdP metadata

• IdP: Added "UseLegacyRsaEncryption" option to disable the use of RSAES-PKCS1-v1_5. This will be set to false by default in the next major release
• IdP: Interaction generator service is now called after user authentication, allowing for the use of a consent screen or cancel button
• SP: Added support for parsing ArtifactResolutionServices from IdP metadata
• Added support for NameIDPolicy
• Fixed issue with validating signatures containing repeated/duplicate namespaces (3+)
• Updated internal cryptography libraries to use .NET Core implementations

• October security update

• SP: Updated the default correlation cookie store's delete method to use SP cookie options
• SP: Improved handling of missing correlation cookie
• Logging improvements

• IdP: Metadata now includes all IdentityServer validation keys
• SP: The metadata parser now treats SLO endpoints as optional

New SP library: Rsk.Saml. To use IdP functionality, specific to IdentityServer4, please continue to use Rsk.IdentityServer4.Saml.

• IdP: Added support for IdP-Initiated SSO
• SP: Added support for IdP-Initiated SLO
• IdP: ACS endpoint preference is now ordered by index
• SP: Now uses the correlation cookie name configured in the handlers cookie builder
• SP: SamlBindingService extended to include support for building SOAP binding payloads
• All custom component exceptions inherit from SamlException
• SP: Breaking change on ISamlCorrelationStore

• October security update

• SP: Fixed metadata parsing for multiple signing certificates

• Fixed nonce size when using AES-256-GCM

• SP: Added support for Home Realm Discovery (using "IDPList" and "IDPEntry")
• SP: Added "SamlChallengeProperties" allowing a challenge request to override Home Realm Discovery and Force Authentication

• October security update

• SP: Added support for WantAssertionsSigned

• SP: Support for the artifact binding type
• SP: Added ValidationCertificates for request signing key rollover
• SP: Added RequireEncryptedAssertions option to disallow unencrypted assertions
• SP: Enabled organization and contact metadata options
• Bug fix for signature transforms
• SP: Added support for RequestedAuthenticationContext and validation of AuthnContextClassRef
• SP: Set correlation cookie to essential
• SP: Added RequireSignedSingleLogoutResponses option
• SP: Fix for SLO request using POST binding
• IdP: Added missing serialization for AuthnStatement SessionNotOnOrAfter

• October security update

• IdP & SP: Improved metadata signature generation
• SP: Improved metadata signature validation
• IdP: Added ISamlEndpointService extensibility point for choosing which ACS or SLO endpoint to use

• October security update

• SP: Added missing SLO endpoints to metadata
• SP: Added option to disable Destination validation
• Updated form POST HTML

• October security update

• SP: Added missing SLO endpoint to metadata
• Internal build version fix

• Changed minimum version of IdentityServer4 v3 to v3.1.2
• IdP: Added ISamlNameIdService extensibility point for NameID format handling
• SP: Added AuthenticationProperties to failure results

• October security update

• ASP.NET Core 3.0 and 3.1 support
• IdP & SP: Updated metadata document to place signature as the first element
• SP: Added IdP metadata loading
• SP: Added support for multiple IdP signing certificates
• SP: Added support for SLO response parsing

• SP: Added support for decryption of assertions using:
  • AES-192-CBC
  • AES-128-CBC
• SP: Added support for decryption of assertions with an encrypted key linked by reference

• SP: Added property "SkipUnrecognizedRequests". This property prevents errors from being thrown on invalid SAML requests but allows multiple SP's to share a single metadata endpoint and ACS endpoint

• SP: Added support for encrypted assertions with RSA-OAEP encryption keys

• SP: Added handling for off-spec element "AuthnContextDeclRef"

• SP: Fixed issue with empty name claim being generated from SAMLResponse

• IdP: Fixed CSP for logout page when logout response received
• IdP: Added handling for logout responses sent to SLO endpoint

• SP: Added support for HTTP Redirect binding responses
• SP: Added support for IdP-Initiated SSO
• IdP: Added support for full SAML SP-Initiated SLO
• IdP: Added support for SAML IdP-Initiated SLO

Supports IdentityServer v2.2. This version is no longer actively maintained.