Issues

• SAML ACS accepts signed assertions bound to a different Recipient/Destination (missing binding checks)

  Clever/saml2#293 · Filter by author ksanjeev284 opened on Oct 1, 2026

• Update xmlbuilder2 to >=4.0 to fix js-yaml vulnerability

  Clever/saml2#291 · Filter by author brokenpc00 opened on Nov 17, 2025
  1

• Some way to disable certificate expiration (validUntil) enforcement

  Clever/saml2#286 · Filter by author ajmichels opened on Apr 9, 2025

• Encryption certificate

  Clever/saml2#284 · Filter by author psuhas opened on Jan 24, 2025

• Dependency updates

  Clever/saml2#283 · Filter by author Ben-CA opened on Dec 26, 2024
  1

• Fork with up-to-date dependencies

  Clever/saml2#280 · Filter by author darioackermann opened on Jun 5, 2024
  1

• Error sp.create_login_request_url with vitejs

  Clever/saml2#277 · Filter by author joseronero opened on Nov 22, 2023
  1

• create_metadata validuntil same as the time you get the file

  Clever/saml2#276 · Filter by author DanielKB-K opened on Nov 8, 2023
  1

• Feature Request: Return Assertion ID during SAML binding

  Clever/saml2#274 · Filter by author Birajpjpt opened on May 25, 2023

• Error handling: avoid uncaught errors

  Clever/saml2#251 · Filter by author antoinep92 opened on Mar 22, 2022
  2

• Feat: get AuthnRequest xml pre encoding

  Clever/saml2#247 · Filter by author gideonm-pangea opened on Dec 9, 2021

• [FR] Add accountChooser Url support

  Clever/saml2#244 · Filter by author FossPrime opened on Oct 8, 2021

• Revealing too much info about the error using util.inspec

  Clever/saml2#242 · Filter by author ipetrovic11 opened on Sep 21, 2021

• zlib callback throws error which cannot be captured by caller

  Clever/saml2#236 · Filter by author zyf0330 opened on Jun 7, 2021

• Regression: xmlbuilder2 may have removed some non-essential properties

  Clever/saml2#230 · Filter by author mcab opened on Feb 8, 2021
  3

• Throw Errors generated during attribute population

  Clever/saml2#224 · Filter by author mcab opened on Jan 26, 2021

• Feature request: Metadata only serves one encryption certificate

  Clever/saml2#223 · Filter by author mcab opened on Jan 15, 2021

• LogoutRequest NameID Format is Required?

  Clever/saml2#220 · Filter by author gcabrerap opened on Dec 22, 2020
  1

• Worked example

  Clever/saml2#207 · Filter by author pbrickell opened on Aug 11, 2020
  1

• Signature Invalidated and still passes validation test - Potential Security Issue - Option to validate not found v1.12.4

  Clever/saml2#206 · Filter by author Himself132 opened on Aug 5, 2020
  4

• Parse metadata

  Clever/saml2#202 · Filter by author FreifeldRoyi opened on May 11, 2020
  1

• How to check for this condition of login and logout err != null

  Clever/saml2#194 · Filter by author dhyanaswain opened on Nov 4, 2019
  1

• [Question] What is the purpose of create_logout_response_url under SP

  Clever/saml2#179 · Filter by author nkumarcc opened on Jul 6, 2019

• force_authn flag

  Clever/saml2#175 · Filter by author sylido opened on May 10, 2019

• Feature Request: Subject in AuthnRequest

  Clever/saml2#174 · Filter by author tboman opened on May 7, 2019
  2