After many late nights and tedious editing, I have finished my book on OpenSAML, based on my experiences working with the OpenSAML library. A Guide to OpenSAML is a short book that introduces SAML, the SAML Web Browser Profile and the use of OpenSAML. Buy the book on Payhip! The book has three parts, the first of which …

After many late nights and tedious editing, I have finished my book on OpenSAML, based on my experiences working with the OpenSAML library. A Guide to OpenSAML is a short book that introduces SAML, the SAML Web Browser Profile and the use of OpenSAML. Buy the book on Payhip! The book has three parts, the first of which …

On this page I have tried to create the ultimate pitstop for people trying to learn and use the OpenSAML library. I'll start out with an introduction to OpenSAML and move on to a some resources that might be of help. I will also introduce my blog post on this subject and my book, A Guide to OpenSAML. What is OpenSAML? …

Explanation and examples of how to decrypt an encrypted SAML assertion with OpenSAML V3

Information and example on how to sign and send authnrequests in OpenSAML

Here is the happy news of the day. Verifying a signature in OpenSAML V3 is done almost identical to how it is done in V2, so the blog post on the process from OpenSAML V2 is still very much relevant and worth checking out. The only difference between the two version is that the SignatureValidator is no longer …

As many of you know, version 2 of OpenSAML will officially reach its end of life at July 31 of 2016. This means that the library will not be receiving any new updates, not even critical security updates. Because of this, everyone currently using version 2 of OpenSAML is strongly advised to migrate to OpenSAML version …

One notable thing that changed going from version 2 to 3 of OpenSAML is that the library was split in to. This first post on OpenSAML V3 try to help by linking to the javadoc of all different libraries

I have been working with SAML for a while now and I have always used Firefox for debugging instead of my favorite browser, Chrome. Why? you ask. Because there is a plugin called SAML tracer on firefox that is excellent for viewing the SAML messages going across the browser. There have been no such plugin for Chrome. …

Information and example on how to sign and send authnrequests in OpenSAML