pysamlsp 0.1.4

Requirements

Installation

At this point in development, I have not uploaded to Pypi. Once I have, installation will be as easy as:

pip install pysqlsp

In the meantime you can clone this repository and run:

python setup.py install

Usage

Initialize the class with a configuration dictionary:

sp_config = dict( ... )

The configuration dictionary may have the following entries:

• ‘assertion_consumer_service_url’: The URL of the SSO provider.

• ‘issuer’: A unique identifier for the service provider; probably should match the entityID attribute of the SP metadata.

• ‘private_key’: A path for the private key PEM file, required for signing AuthnRequests.

• ‘sign_authnrequests’: True / False flag to indicate whether AuthnRequests should be signed.

• ‘certificate’: A path for the certificate file against which a SAMLResponse signature can be verified.

Create a redirect URL with the SAMLRequest query parameter:

sp = Pysamlsp(sp_config)
redirect_url = sp.redirect_for_idp()

The identity provider will post to the address specified in the service providers metadata.xml. The posted field “SAMLResponse” will contain a (base64encoded, gzip’d) XML response:

saml_response = query['SAMLResponse']
if sp.idp_response_is_valid(saml_response):
  ...

openssl req -x509 -days 3650 -newkey rsa:1024 -keyout saml_key_pw.pem -out saml.crt

openssl rsa -in saml_key_pw.pem -out saml_key.pem

openssl rsa -in saml_key.pem -pubout > saml.pub