python3-saml 1.2.1

Warning

Update python3-saml to 1.2.1 that patch 1.2.0 (that had a bug on signature validation process (when using wantAssertionsSigned and wantMessagesSigned).

1.2.0 version includes a security patch that contains extra validations that will prevent signature wrapping attacks.

python3-saml < v1.2.0 is vulnerable and allows signature wrapping!

Why add SAML support to my software?

SAML is an XML-based standard for web browser single sign-on and is defined by the OASIS Security Services Technical Committee. The standard has been around since 2002, but lately it is becoming popular due its advantages:

• Usability - One-click access from portals or intranets, deep linking, password elimination and automatically renewing sessions make life easier for the user.

• Security - Based on strong digital signatures for authentication and integrity, SAML is a secure single sign-on protocol that the largest and most security conscious enterprises in the world rely on.

• Speed - SAML is fast. One browser redirect is all it takes to securely sign a user into an application.

• Phishing Prevention - If you don’t have a password for an app, you can’t be tricked into entering it on a fake login page.

• IT Friendly - SAML simplifies life for IT because it centralizes authentication, provides greater visibility and makes directory integration easier.

• Opportunity - B2B cloud vendor should support SAML to facilitate the integration of their product.

General description

OneLogin’s SAML Python toolkit let you build a SP (Service Provider) over your Python application and connect it to any IdP (Identity Provider).

Supports:

• SSO and SLO (SP-Initiated and IdP-Initiated).

• Assertion and nameId encryption.

• Assertion signature.

• Message signature: AuthNRequest, LogoutRequest, LogoutResponses.

• Enable an Assertion Consumer Service endpoint.

• Enable a Single Logout Service endpoint.

• Publish the SP metadata (which can be signed).

Key features:

• saml2int - Implements the SAML 2.0 Web Browser SSO Profile.

• Session-less - Forget those common conflicts between the SP and the final app, the toolkit delegate session in the final app.

• Easy to use - Programmer will be allowed to code high-level and low-level programming, 2 easy to use APIs are available.

• Tested - Thoroughly tested.

• Popular - OneLogin’s customers use it. Add easy support to your django/flask web projects.

Installation

pip install python3-saml

Security Guidelines

If you believe you have discovered a security vulnerability in this toolkit, please report it at https://www.onelogin.com/security with a description. We follow responsible disclosure guidelines, and will work with you to quickly find a resolution.