Issues

• Issue #2623 persists in 2.5.4 full release

  simplesamlphp/simplesamlphp#2694 · Filter by author gvde opened on Nov 10, 2026
  12

• 2.5.3.1 - Unsolicited Response MUST NOT contain InResponseTo

  simplesamlphp/simplesamlphp#2692 · Filter by author Ukuser36 opened on Nov 5, 2026
  11

• (Obsolete) ExpectedIssuer mismatch exception added again?

  simplesamlphp/simplesamlphp#2691 · Filter by author lhaemmerle opened on Nov 2, 2026
  3

• Add support for xmlseclibs 4.x

  simplesamlphp/simplesamlphp#2690 · Filter by author akinspe opened on Oct 17, 2026
  2

• SAML2 Exception when clicking browser's back button after successful login

  simplesamlphp/simplesamlphp#2689 · Filter by author DSK-IFJ opened on Oct 14, 2026
  2

• Release tarball contains deprecated Twig includes

  simplesamlphp/simplesamlphp#2687 · Filter by author jornane opened on Sep 30, 2026
  1

• Auth\Simple class creates unnecessary sessions

  simplesamlphp/simplesamlphp#2684 · Filter by author jornane opened on Sep 17, 2026

• Unexpected version format change in simplesamlphp/simplesamlphp

  simplesamlphp/simplesamlphp#2683 · Filter by author maheshv546 opened on Sep 11, 2026

• Hard dependency on ADFS module in Admin Federation page

  simplesamlphp/simplesamlphp#2674 · Filter by author cicnavi opened on Aug 14, 2026 · 2.6

• [Informational] libpcre2 10.45–10.47 breaks XML string validation

  simplesamlphp/simplesamlphp#2673 · Filter by author cicnavi opened on Aug 12, 2026
  1

• SimpleSAMLphp does not handle asynchronous logout requests according to spec

  Confirmedenhancement
  Feature

  simplesamlphp/simplesamlphp#2664 · Filter by author kwessel opened on Aug 4, 2026
  2

• Configured IDPList is not enforced after Discovery response

  simplesamlphp/simplesamlphp#2656 · Filter by author cg-lux opened on Jul 24, 2026

• AssertionConsumerServiceURL mismatch between Request and configured metadata is handled too gracefully

  simplesamlphp/simplesamlphp#2653 · Filter by author restena-sw opened on Jul 14, 2026
  3

• After a wiki authorization port 80 is added to the baseurlpath

  simplesamlphp/simplesamlphp#2652 · Filter by author s0rin opened on Jul 8, 2026
  20

• 3.0: Fix PSR-4 issues

  enhancement
  simplesamlphp/simplesamlphp#2646 · Filter by author tvdijen opened on Jun 17, 2026 · 3.0
  

• remember_organization cookie is never sent on successful LdapMulti/UserPassOrg login

  simplesamlphp/simplesamlphp#2643 · Filter by author szabogyula opened on Jun 3, 2026
  1

• Add 'login_hint' and 'LoginHint' as additional supported username hints from SPs

  simplesamlphp/simplesamlphp#2609 · Filter by author mrdevon opened on Mar 10, 2026

• Failed authentication results in unhandled exception at SP

  simplesamlphp/simplesamlphp#2594 · Filter by author dnmvisser opened on Feb 13, 2026
  5

• \SimpleSAML\Utils\System::resolvePath fails for UNC Paths

  feedback needed
  simplesamlphp/simplesamlphp#2586 · Filter by author raubv0gel opened on Jan 22, 2026
  7

  

• Add public health check endpoint

  simplesamlphp/simplesamlphp#2583 · Filter by author mehradn7 opened on Jan 8, 2026
  4

• Pen-test suggestion - loginuserpassorg.php returns a 200 response

  feedback needed
  simplesamlphp/simplesamlphp#2578 · Filter by author gregharvey opened on Dec 15, 2025
  2

• Option to disable DiscoveryResponse (issue with external Discovery Service)

  simplesamlphp/simplesamlphp#2573 · Filter by author daludo opened on Dec 8, 2025
  4

• Attributes translation doesn't work?

  fix merged
  simplesamlphp/simplesamlphp#2572 · Filter by author Kojiro-Goto opened on Dec 3, 2025
  4

  

• Impossible to roll the keys when IDP encrypts assertions

  simplesamlphp/simplesamlphp#2571 · Filter by author RoSk0 opened on Dec 1, 2025

• Consolidate SAML related classes in module-saml

  simplesamlphp/simplesamlphp#2563 · Filter by author m0ark opened on Nov 21, 2025
  1