I have a rather complex setup using simpleSAMLphp to run a number of service providers. For regionalization reasons (thanks, GDPR), they all respond to the same entityID. My primary SP also includes the regional ACS endpoints so that folks at the various regions can be passed along appropriately.

I would like the ability to be able to configure certain parts of the SP metadata output (ACS endp

There is no proper documentation to explain what are the values for accountState identity claim and what is the meaning of each value.

The Exception 'str' object has no attribute 'c_namespace' throws in the web page, without let the users logout.

Python 3.5.2 (Ubuntu 16.04)

Code Version

master branch

Expected Behavior

Logout without exceptions

Steps to Reproduce

Execute the test in example folder: ./all.sh start
Login as roland dianakra, then logout

It would be great if we can specify the DurationSeconds parameter as MaxSessionDuration while assuming the role. Currently the code uses the default 1 hour

The docs here say:

/** @var \LightSaml\Model\Protocol\Response $response */
$response = $binding->receive($request, $messageContext);
print $response->getID();

However the binding::receive function doesn't return anything.
https://github.com/lightSAML/lightSAML/blob/877b07915202d6ce344836c930557aed4

e.g. letsencrypt

NB: find out what the standard chain presentation order is: in xmldsig interop materials it appears to be (intermediates, cert), in fullchain.pem files handled by openssl it's (cert, intermediates)

Following the instructions at https://www.lightsaml.com/SP-Bundle/Getting-started/, the app will create and use an 'IdEntry' db table, where entities get added but never removed from.

I think that it is good practice to avoid that table from growing unbounded.

The getting-started tutorial could give an example of a cleanup cronjob, or at least recommend setting one up.

Q: is everything in

Steps to reproduce