Skip to main content

Federation Feeder

Project description

python SAML metadata aggregator

License Travis Build Coverage Requirements Status Maintainability Format PyPI Version Documentation

This is a SAML metadata aggregator written in python. It is based on the model for metadata exchange by Ian Young:


  • Fully customizable processing pipelines in yaml.

  • Easy to retrieve, analyze, transform, sign and publish SAML metadata.

  • Operate in batch or online mode using embedded HTTP server.

  • Provide a full MDX implementation.

  • Make use of PKCS#11 tokens and HSMs for key protection.

  • Fully compatible with discovery service.

  • Fully compatible with mdq-browser frontend app.


  • pyXMLSecurity

  • PyKCS11 (optional)



Release date: UNRELEASED


Release date: Tue Jul 10 15:48:07 CEST 2012

  • Schema validation

  • Refactor dynamic loading framework


Release date: Wed Jul 11 16:31:06 CEST 2012

Because of the way OpenSSL handles self-signed certificates the XML validation extracts the public key from the certificate and uses that instead of the X509 certificate to validate an XML signature. Right now this introduces a dependency on M2Crypto which will be removed in the fugure. Note that ubuntu/debian users should install python-m2crypto instead of installing M2Crypto (


Release date: Thu Aug 30 08:00:00 CEST 2012

  • XML signing and validation using pyXMLSecurity

  • Support for PKCS#11-based HSMs using pykcs11

We are now using a (limited) pure-python implmementation of xmlsec which makes it easier to sign using HSMs. The only mandatory non-python dependency now is lxml.


Release date: Fri Sep 7 10:13:33 CEST 2012

  • support breaking out of pipelines using exceptions

  • kill the pipeline if selects picks 0 elements

  • more debug logging

  • more robust handling of zero-length selectors

  • completely remove pyOpenSSL dependency

  • many bugfixes and cleanup


Release date: Fri Nov 30 09:37:59 CET 2012

  • HTTP-based pyffd with MDX support

  • several bugfixes

  • indexing in MDRepository

  • completely rewritten URL fetcher with monitoring

0.9 and 0.9.1

Release date: Tue Apr 9 18:03:13 CEST 2013

  • Lots of bugfixes

  • pep8 cleanup

  • stability & testcases


  • Release date: Mon Apr 15 13:19:14 CEST 2013*

  • caching in pyffd now works

  • version information on cmdline

  • ‘remove’ merge strategy from Peter S

  • cleanup & bugfixes


  • Release date: Wed May 15 12:09:57 CEST 2013*

  • better discovery UI


  • Release date: Mon Sep 23 14:11:16 CEST 2013*

  • bugfixes, minor UI improvements

  • documentation imporovements


  • Release date: Fre 14 jun 2019 11:42:56 CEST

  • Major changes to the backend subsystem

  • New redis+whoos-based backend

  • Standalone API with WSGI-support based on pyramid

  • apscheduler used for backround tasks including resource fetch

1.0.1 — * Release date: tis 18 jun 2019 12:13:41 CEST * A samldiff tool * Minor fixes to align requirements for docker package

1.1.0 — * Release date: fre 12 jul 2019 10:27:05 CEST * simplify resource management and introduce new thread-based fetcher architecture * new icon fetching infrastructure * re-introduce predictive load order * multiple bug fixes and cleanup * documentation restructure and rewrite

Project details

Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

pyFF-1.1.0.tar.gz (2.0 MB view hashes)

Uploaded source

Supported by

AWS AWS Cloud computing and Security Sponsor Datadog Datadog Monitoring Fastly Fastly CDN Google Google Download Analytics Microsoft Microsoft PSF Sponsor Pingdom Pingdom Monitoring Sentry Sentry Error logging StatusPage StatusPage Status page