Repository navigation
Consolidate SAML related classes in module-saml #2563
Description
While fiddling with SimpleSAMLphp I always wondered why SAML related implementations are all over the place. There are bits scattered across the base implementation, module-admin (esp. metadata federation), module-core (esp. logout) and module-saml (actual implementation of IdP and SP).
Is this by design or because of technical obstacles preventing the consolidation?
I'd really like to put in a reasonable amount of effort in order to help improving the project.
Activity
tvdijen commentedon Nov 21, 2025
I agree that the core and saml-modules do not make much sense. They always have to be enabled and you can't do without them. The idea is to add ServiceProvider and IdentityProvider classes to the saml2-library that can take over a lot of stuff from the saml-module.
First we did an entire rewrite of the saml2-library, but that was finished recently, so we could start adding those classes now.