Released: Mar 4, 2024

v5.0.0 中的更新

特性

• Targets .NET 8.0 as well as.NET 6.0 and .NET Core 3.1.
• Includes .NET 8 example projects.
• Adds the ISAMLConfigurationNameResolver interface to support Entra ID multi-tenant applications and any other use cases where SAML message issuer names don't map directly to partner configuration names.

修補程式

• When importing metadata, default the WantAuthnRequestsSigned and AuthnRequestsSigned flags to false as per the SAML specification.

Released: Nov 8, 2023

v4.10.0 中的更新

特性

• Added support for the AuthnRequest’s ProtocolBinding field.
• Added support for the ECP profile when acting as the identity provider.
• Added support for RSA-OAEP XML encryption through the RSA-OAEP security extension.

Released: Sep 7, 2023

v4.9.0 中的更新

特性

• Adds the ability to include the certificate thumbprint in the certificate filename to ensure it is unique, as different certificates may have the same subject DN, when importing metadata.
• Uses millisecond precision in timestamps.
• Adds support for customization of the transport classes.
• Allows validating certificates before signature verification to handle active and expired certificates with the same public key.
• In the SAML middleware, if SSO fails to complete because the user isn’t...

Released: May 19, 2023

v4.8.0 中的更新

特性

• Updated the ISamlClaimFactory interface that is used by the SAML middleware to include the partner provider name.
• Added NameIDQualifier and IssuerQualifier to partner provider configuration.
• Added NameIDFormat to SSO options.

修補程式

• Fixed issue with SpSsoStatus.IsSsoCompletionPending.

Released: Mar 15, 2023

v4.7.0 中的更新

特性

• Added ClearSessionAsync overload that clears the session for the named partner only.
• Added the DisableClearAllSessionsOnLogout flag to configure how multi-session SLO is handled.
• Added ISamlCachedConfigurationResolver and support explicit clearing of the SAML configuration cache.
• Added ICertificateImporter to make storage of certificates more flexible when importing SAML metadata.
• Defaulted the configuration flags SignLogoutRequest, SignLogoutResponse, WantLogoutRequestSigned and...

Released: Jan 11, 2023

v4.6.0 中的更新

特性

• Add artifact resolve and response related events.
• Used a typed HTTP client to provide tailored configuration of client certificates etc.
• When verifying signatures, only check the validity of the certificate used for the verification.
• When generating signatures, use a valid (i.e. non-expired) certificate.
• When sending a logout request, start with the most recent rather than the oldest session.
• Include AddConfigurationResolver, AddSamlDatabaseConfigurationResolver and...

Released: Nov 17, 2022

v4.5.0 中的更新

特性

• Added support for encrypted Name IDs.
• Added support for multiple pending SAML responses within the one browser session.
• You can now signout the user in the SAML authentication handler on a local signout.
• Added the ability to use the IHttpClientFactory – only affects SOAP, PAOS,URI bindings and metadata download.
• Use IOptionsMonitor rather than IOptionsSnapshot as it is more performant.

Released: Sep 7, 2022

v4.4.0 中的更新

特性

• Added SAMLAttribute.ToString(separator) overload.
• Use the System.Security.Cryptography.Xml update that addresses Microsoft Security Advisory CVE-2022-34716.

Released: Jul 5, 2022

v4.3.0 中的更新

特性

• Made the SamlSchemaValidationException.Errors property public.

修補程式

• Fixed database configuration licensed package to reference the licensed ComponentSpace.Saml2 package.

Released: Apr 26, 2022

v4.2.0 中的更新

特性

• Support WebHosting and other Windows certificate stores.