Using SimpleSAMLphp as an IdP? Please, read this carefully! simplesamlphp.org/security/2…
SimpleSAMLphp 2.0 is finally out after years of work! 🎉🍾
simplesamlphp.org/download/
We're hiring! SimpleSAMLphp is looking for a new person to be our lead developer and maintainer. Come join us! simplesamlphp.org/developers…
SimpleSAMLphp retweeted
XML Signature Wrapping attach revisited
After a longer time, we had again a look at SAML...resulted in a complete signature bypass in SimpleSAMLphp and xmlseclibs, and my coolest (public) Signature Wrapping exploit. Please patch. Writeup: hackmanit.de/en/blog-en/82-x… (CVE-2019-3465) // cc @hackmanit
SimpleSAMLphp retweeted
Single Sign On with #SAML get's even more secure, when using #2FA
privacyidea.org/privacyidea-… @privacyidea @simplesamlphp
Hi Maxime! It’s actually correct, as it is later explained that “example.pem” is the PEM-encoded certificate. File extensions are irrelevant here, you just need to make sure you point to the right file, but given that the cert must be in PEM format, that extension sounds fine.
SimpleSAMLphp retweeted
Version 2 of an #OAuth2/#OIDC authentication module for the open-source @SimpleSAMLphp from @CirrusIdentity github.com/cirrusidentity/si…
SimpleSAMLphp workshop in Valencia! Contributors from several places in Europe working hard on a new user interface for SimpleSAMLphp.
Replying to @VishalPlaysOn @vishal_kamal
Hi Vishal! Please ask in our mailing list detailing your setup as much as possible: groups.google.com/group/simp…
Replying to @Salva_bg
Hola Salva,
What are you trying to achieve?
Replying to @jordanpittman @CalEvans
Hi Jordan!
SimpleSAMLphp works just fine in PHP 7.2. There’s been a lot of confusion around that, but asserts are only deprecated in PHP 7.2. That doesn’t mean they won’t work or break execution in any way...
SimpleSAMLphp retweeted
Do you use @simplesamlphp? Would you like a generic OAuth2/OIDC to SAML module. We just released one with support from @BigTenAcademic and the University of Illinois at Urbana Champaign. Enjoy! bit.ly/2HJgdFj #OIDC #SAML #identitymanagement #OSS
Replying to @longwave
Hi Dave! To the best of our knowledge SSP is not affected by Duo’s finding. The release today fixes a completely different issue. We’ll lift the embargo as soon as we know no other big actors are affected or when we have proper remediation in place, whatever happens first.
Using SimpleSAMLphp? Upgrade immediately to 1.15.3! simplesamlphp.org/download
SimpleSAMLphp 1.15.2 is out now, and it includes fixes for three security issues (SSPSA 201801-01, 201801-02 & 201801-03). Upgrade as soon as possible! simplesamlphp.org/download
Replying to @feelmyanger
Olá André! I’m afraid it’s not possible, you need to use PEM encoding.
SimpleSAMLphp 1.15.1 is out, go get it! simplesamlphp.org/download
SimpleSAMLphp 1.15.0 is finally out! Download it here simplesamlphp.org/download or update your composer dependencies.
Come join us in the next SimpleSAMLphp workshop in Utrecht, NL! eventr.geant.org/events/2794
Using SimpleSAMLphp as a Service Provider with SAML 1.1 Identity Providers? Please upgrade ASAP! simplesamlphp.org/security/2…








