Upgrade notes for SimpleSAMLphp 1.16

The default signature algorithm is now SHA-256 (SHA-1 has been considered obsolete since 2014). For entities that need it, you can switch back to SHA-1 by setting the signature.algorithm option in the remote entity metadata.

In the Consent module, the noconsentattributes has been renamed to attributes.exclude . The old name continues to work but is considered deprecated.

The class SimpleSAML_Error_BadUserInnput has been renamed to SimpleSAML_Error_BadUserInput .

The authmyspace module has been removed since the service is no longer available.

The casserver module has been removed because it was an outdated version, the up to date module is maintained in the simplesamlphp-module-casserver repository. It can be installed with composer:

composer require simplesamlphp/simplesamlphp-module-casserver