Open Source implementation of the SAML standard providing functionality as an Identity Provider, as a Service Provider and even as a proxy. Written in PHP.

Joined September 2016
Using SimpleSAMLphp as an IdP? Please, read this carefully! simplesamlphp.org/security/2…
SimpleSAMLphp 2.0 is finally out after years of work! 🎉🍾 simplesamlphp.org/download/
1
6
192
We're hiring! SimpleSAMLphp is looking for a new person to be our lead developer and maintainer. Come join us! simplesamlphp.org/developers…
1
1
Wonderful little crowd we gathered in Madrid! Thank you all for joining us!
2
SimpleSAMLphp retweeted
XML Signature Wrapping attach revisited
After a longer time, we had again a look at SAML...resulted in a complete signature bypass in SimpleSAMLphp and xmlseclibs, and my coolest (public) Signature Wrapping exploit. Please patch. Writeup: hackmanit.de/en/blog-en/82-x… (CVE-2019-3465) // cc @hackmanit
1
8
5
SimpleSAMLphp retweeted
Single Sign On with #SAML get's even more secure, when using #2FA privacyidea.org/privacyidea-… @privacyidea @simplesamlphp
1
3
Hi Maxime! It’s actually correct, as it is later explained that “example.pem” is the PEM-encoded certificate. File extensions are irrelevant here, you just need to make sure you point to the right file, but given that the cert must be in PEM format, that extension sounds fine.
SimpleSAMLphp workshop in Valencia! Contributors from several places in Europe working hard on a new user interface for SimpleSAMLphp.
Hi Vishal! Please ask in our mailing list detailing your setup as much as possible: groups.google.com/group/simp…
Replying to @Salva_bg
Hola Salva, What are you trying to achieve?
Hi Jordan! SimpleSAMLphp works just fine in PHP 7.2. There’s been a lot of confusion around that, but asserts are only deprecated in PHP 7.2. That doesn’t mean they won’t work or break execution in any way...
1
Do you use @simplesamlphp? Would you like a generic OAuth2/OIDC to SAML module. We just released one with support from @BigTenAcademic and the University of Illinois at Urbana Champaign. Enjoy! bit.ly/2HJgdFj #OIDC #SAML #identitymanagement #OSS
9
2
15
Replying to @longwave
Hi Dave! To the best of our knowledge SSP is not affected by Duo’s finding. The release today fixes a completely different issue. We’ll lift the embargo as soon as we know no other big actors are affected or when we have proper remediation in place, whatever happens first.
1
Using SimpleSAMLphp? Upgrade immediately to 1.15.3! simplesamlphp.org/download
8
2
13
SimpleSAMLphp 1.15.2 is out now, and it includes fixes for three security issues (SSPSA 201801-01, 201801-02 & 201801-03). Upgrade as soon as possible! simplesamlphp.org/download
4
2
Replying to @feelmyanger
Olá André! I’m afraid it’s not possible, you need to use PEM encoding.
SimpleSAMLphp 1.15.0 is finally out! Download it here simplesamlphp.org/download or update your composer dependencies.
6
4
Come join us in the next SimpleSAMLphp workshop in Utrecht, NL! eventr.geant.org/events/2794
2
2
Using SimpleSAMLphp as a Service Provider with SAML 1.1 Identity Providers? Please upgrade ASAP! simplesamlphp.org/security/2…
4
1