Released: Sep 7, 2023

Aggiornamenti in v4.9.0

Funzionalità

• Adds the ability to include the certificate thumbprint in the certificate filename to ensure it is unique, as different certificates may have the same subject DN, when importing metadata.
• Uses millisecond precision in timestamps.
• Adds support for customization of the transport classes.
• Allows validating certificates before signature verification to handle active and expired certificates with the same public key.
• In the SAML middleware, if SSO fails to complete because the user isn’t...

Released: May 19, 2023

Aggiornamenti in v4.8.0

Funzionalità

• Updated the ISamlClaimFactory interface that is used by the SAML middleware to include the partner provider name.
• Added NameIDQualifier and IssuerQualifier to partner provider configuration.
• Added NameIDFormat to SSO options.

Correzioni

• Fixed issue with SpSsoStatus.IsSsoCompletionPending.

Released: Mar 15, 2023

Aggiornamenti in v4.7.0

Funzionalità

• Added ClearSessionAsync overload that clears the session for the named partner only.
• Added the DisableClearAllSessionsOnLogout flag to configure how multi-session SLO is handled.
• Added ISamlCachedConfigurationResolver and support explicit clearing of the SAML configuration cache.
• Added ICertificateImporter to make storage of certificates more flexible when importing SAML metadata.
• Defaulted the configuration flags SignLogoutRequest, SignLogoutResponse, WantLogoutRequestSigned and...

Released: Jan 11, 2023

Aggiornamenti in v4.6.0

Funzionalità

• Add artifact resolve and response related events.
• Used a typed HTTP client to provide tailored configuration of client certificates etc.
• When verifying signatures, only check the validity of the certificate used for the verification.
• When generating signatures, use a valid (i.e. non-expired) certificate.
• When sending a logout request, start with the most recent rather than the oldest session.
• Include AddConfigurationResolver, AddSamlDatabaseConfigurationResolver and...

Released: Nov 17, 2022

Aggiornamenti in v4.5.0

Funzionalità

• Added support for encrypted Name IDs.
• Added support for multiple pending SAML responses within the one browser session.
• You can now signout the user in the SAML authentication handler on a local signout.
• Added the ability to use the IHttpClientFactory – only affects SOAP, PAOS,URI bindings and metadata download.
• Use IOptionsMonitor rather than IOptionsSnapshot as it is more performant.

Released: Sep 7, 2022

Aggiornamenti in v4.4.0

Funzionalità

• Added SAMLAttribute.ToString(separator) overload.
• Use the System.Security.Cryptography.Xml update that addresses Microsoft Security Advisory CVE-2022-34716.

Released: Jul 5, 2022

Aggiornamenti in v4.3.0

Funzionalità

• Made the SamlSchemaValidationException.Errors property public.

Correzioni

• Fixed database configuration licensed package to reference the licensed ComponentSpace.Saml2 package.

Released: Apr 26, 2022

Aggiornamenti in v4.2.0

Funzionalità

• Support WebHosting and other Windows certificate stores.

Released: Feb 9, 2022

Aggiornamenti in v4.1.0

Funzionalità

• Dropped support for Microsoft .NET Core 2.1 and now targets .NET Core 3.1, .NET 5 and .NET 6.
• Includes Microsoft Visual Studio 2022 examples solution.
• For SOAP binding, you can now use asynchronous dispose of stream writers as the http.sys web server defaults to not allow synchronous I/O.
• If WantAssertionOrResponseSigned is set, the component will now attempt to verify the SAML assertion signature even if the SAML response signature failed to verify.
• Added support for specifying the...

Released: Oct 14, 2021

Aggiornamenti in v4.0.0

Funzionalità

• Adds SamlDatabaseConfigurationResolver for storing SAML configuration using the Entity Framework.
• Adds SamlCachedConfigurationResolver for caching SAML configuration.
• Defaults to the current HTTP request if the AuthenticationProperties.RedirectUri hasn’t been specified when the authentication challenge method is called.
• Updates the SamlAuthenticationOptions.LoginCompletionUrl delegate to accept the redirectUri as an input argument.
• Adds ISamlProvider.ClearSessionAsync method to...