Upgrade notes for simpleSAMLphp 1.5
SimpleSAML_Session::isValid()If your code calls
$session->isValid()without an argument, you will now have to update it to pass an argument (probablysaml2). The reason for this change is that calling$session->isValid()without an argument can easily create a security hole.We have introduced a new module for SAML authentication. This authentication module supports both SAML 1.1 and SAML 2.0 IdPs.
We have also added a new authentication framework which should replace the previous redirects to the initSSO-scripts. Relating to this change, we have also deprecated the
initSSO-scripts for SAML 1.1 and SAML 2.0 authentication. The old methods will still be supported for a while, but new code should probably use the new code.See the migration guide for more information about this.
The
request.signingoption has been removed. That option was replaced with theredirect.signandredirect.validateoptions, and has been depreceated for one year.The
aggregatormodule's configuration file has changed name. It was changed fromaggregator.phptomodule_aggregator.php.
