OneLogin's SAML PHP Toolkit v2.3.0

This 2.3.0 version:

• Resolve namespace problem. Some IdPs uses saml2p:Response and saml2:Assertion instead of samlp:Response saml:Assertion.
• Improve test and documentation.
• Improve ADFS compatibility.
• Remove unnecessary XSDs files.
• Make available the reason for the saml message invalidation.
• Adding ability to set idp cert once the Setting object initialized.
• Fix status info issue.
• Reject SAML Response if not signed and strict = false.
• Support NameId and SessionIndex in LogoutRequest.
• Add ForceAuh and IsPassive support.

OneLogin's SAML PHP Toolkit v2.2.0

This 2.2.0 version:

• Fix bug with Encrypted nameID on LogoutRequest
• Fixed usability bug. SP will inform about AuthFail status after process a Response.
• Added SessionIndex support on LogoutRequest, and know is accesible from the Auth class.
• LogoutRequest and LogoutResponse classes now accept non deflated xml
• Improved the XML metadata/ Decrypted Assertion output. (prettyprint)
• Fix bug in formatPrivateKey method, the key could be not RSA
• Explicit warning message for signed element problem
• Decrypt method improved
• Support more algorithm at the SigAlg in the Signed LogoutRequests and LogoutResponses
• AuthNRequest now stores ID (it can be retrieved later)
• Fixed a typo on the 'NameIdPolicy' attribute that appeared at the README and settings_example file.

OneLogin's SAML PHP Toolkit v2.1.0

This 2.1.0 version:

• The isValid method of the Logout Request is now non-static. (affects processSLO method of Auth.php)
• Logout Request constructor now accepts encoded logout requests
• Now after validate a message, if fails a method getError of the object will return the cause
• Fix typos
• Added extra parameters option to login and logout methods.
• Improve Test (new test, use the new getError method for testing)
• Bugfix namespace problem when getting Attributes

New OneLogin's SAML PHP Toolkit v2.0.0

This 2.0.0 version has a new library (new interesting functionality like SSO, Sign, Encryptation).

The old code that you used in order to add SAML support gonna continue working with minor changes. You only need to load the files of the lib/Saml folder. (notice that the compatibility.php file do that).

The old-demo folder contains code from an old app that uses the old version of the toolkit (v.1). Take a look.

Sometimes the names of the classes of the old code could be a bit different and if is your case you must change them for OneLogin_Saml_Settings, OneLogin_Saml_Response, OneLogin_Saml_AuthRequest or OneLogin_Saml_Metadata.

We recommend that you migrate the old code to the new one to be able to use the new features that the new library Saml2 carries.

Release of the old PHP toolkit

Release of the old PHP toolkit before the release of the new 2.0.0