SAML2 v5 Technical Design

Technical Design

People involved in the design

• Tim van Dijen
• Jaime Perez Crespo

Coding Standards

• PSR-12

Requirements

• Relatively low-level classes to parse and generate SAML2-messages.
• Building onto simplesamlphp/xml-security.
• XML marshalling / unmarshalling.
• Helper-classes for the SAML 2.0 bindings.

Decisions:

• We leave any kind of implementation up to the IdP/SP; the saml2-lib is really a low-level XML-lib.
• XML-security: we leave signature verification up to implementor using xml-security API.
• We'd ideally keep a low amount of configuration freedom, but anything required should use Dependency Injection.