Version 4.15.3

• Change submit in post form to improve Chrome custom tab and Android app support.
• Support certificate load of Pkcs12 file without a password in .NET 9.

NuGet package released:
https://www.nuget.org/packages/ITfoxtec.Identity.Saml2/
https://www.nuget.org/packages/ITfoxtec.Identity.Saml2.Mvc/
https://www.nuget.org/packages/ITfoxtec.Identity.Saml2.MvcCore/

Version 4.14.1

• Support .NET 9.
• Use X509CertificateLoader in .NET 9 instead of X509Certificate2.

NuGet package released:
https://www.nuget.org/packages/ITfoxtec.Identity.Saml2/
https://www.nuget.org/packages/ITfoxtec.Identity.Saml2.Mvc/
https://www.nuget.org/packages/ITfoxtec.Identity.Saml2.MvcCore/

Version 4.13.3

• Nuget package updates

Nuget package updates in .NET 8.0

• Microsoft.Extensions.Http updated from version 8.0.0 to version 8.0.1
• Microsoft.IdentityModel.Tokens.Saml updated from version 8.0.2 to version 8.2.1
• System.Security.Cryptography.Xml updated from version 8.0.1 to version 8.0.2

NuGet package released:
https://www.nuget.org/packages/ITfoxtec.Identity.Saml2/
https://www.nuget.org/packages/ITfoxtec.Identity.Saml2.Mvc/
https://www.nuget.org/packages/ITfoxtec.Identity.Saml2.MvcCore/

Version 4.13.2

• Make the KeyName element in the signatures KeyInfo element configurable. Default not included.

NuGet package released:
https://www.nuget.org/packages/ITfoxtec.Identity.Saml2/
https://www.nuget.org/packages/ITfoxtec.Identity.Saml2.Mvc/
https://www.nuget.org/packages/ITfoxtec.Identity.Saml2.MvcCore/

Version 4.13.1

• Add the KeyName element to signatures in the KeyInfo element.

Signature eksample:

 <Signature xmlns="http://www.w3.org/2000/09/xmldsig#">
    <SignedInfo>
      <CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" />
      <SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256" />
      <Reference URI="#_a425a45e-d384-4513-8bc4-1e265611e305">
        <Transforms>
          <Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" />
          <Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" />
        </Transforms>
        <DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" />
        <DigestValue>ZPpcgQxkNsP9v3fZHeCRLw6VNyWyBFaVSorlDMr7lvQ=</DigestValue>
      </Reference>
    </SignedInfo>
    <SignatureValue>TIkglNgY/Rb8OeafHcoJ ... /SnYPRymovw==</SignatureValue>
    <KeyInfo>
      <KeyName>CybsnsH2VizGs9Mzdl8l+6gkoBs=</KeyName>
      <X509Data>
        <X509Certificate>MIIDKjCCAhIC ... WlLINBSPArTQ==</X509Certificate>
      </X509Data>
    </KeyInfo>
  </Signature>

NuGet package released:
https://www.nuget.org/packages/ITfoxtec.Identity.Saml2/
https://www.nuget.org/packages/ITfoxtec.Identity.Saml2.Mvc/
https://www.nuget.org/packages/ITfoxtec.Identity.Saml2.MvcCore/

Version 4.12.7

Resolve bug:

• Authn context comparison types do not accept lowercase values.

NuGet package released:
https://www.nuget.org/packages/ITfoxtec.Identity.Saml2/
https://www.nuget.org/packages/ITfoxtec.Identity.Saml2.Mvc/
https://www.nuget.org/packages/ITfoxtec.Identity.Saml2.MvcCore/

Version 4.12.6

• Support an Assertion element in the Advice element by allowing nested assertions.
• Add support for EntitiesDescriptor with nested EntityDescriptor in metadata.
• Make Index and IsDefault configurable for AttributeConsumingService in metadata.
• Added cookieName parameter to AddSaml2.
• Resolve null pointer bug if Logout request is without a NameID.
• NuGet package updates.

NuGet package released:
https://www.nuget.org/packages/ITfoxtec.Identity.Saml2/
https://www.nuget.org/packages/ITfoxtec.Identity.Saml2.Mvc/
https://www.nuget.org/packages/ITfoxtec.Identity.Saml2.MvcCore/

Version 4.12.0-beta1

• Support an Assertion element in the Advice element by allowing nested assertions.
• Add support for EntitiesDescriptor with nested EntityDescriptor in metadata.
• Make Index and IsDefault configurable for AttributeConsumingService in metadata.

NuGet package released:
https://www.nuget.org/packages/ITfoxtec.Identity.Saml2/
https://www.nuget.org/packages/ITfoxtec.Identity.Saml2.Mvc/
https://www.nuget.org/packages/ITfoxtec.Identity.Saml2.MvcCore/

Version 4.11.3

• Remove local repeated namespace from Scoping, IDPList and IDPEntry.
• Resolve Scoping.RequesterID and IDPList.GetComplete created as an attributes instead of an elements bug.
• Resolve scoping bug "Unable to convert element ITfoxtec.Identity.Saml2.Schemas.Scoping".

NuGet package released:
https://www.nuget.org/packages/ITfoxtec.Identity.Saml2/
https://www.nuget.org/packages/ITfoxtec.Identity.Saml2.Mvc/
https://www.nuget.org/packages/ITfoxtec.Identity.Saml2.MvcCore/

Version 4.11.1

• Add support for NameQualifier and SPNameQualifier.
• Add support for AuthnRequest Scoping.
• Add support for ProviderName property as part of the AuthnRequest.
• Add fix for scoping namespace.
• Bug fix: Use protocol instead of assertion namespace in metadata IDPEntry, IDPList and Scoping.

Metadata:

• Add support for ServiceNames [1..*] according to SAML 2.0 spec, to provide service names for different languages in metadata.
• Add support for the FriendlyName property as part of the RequestedAttribute in metadata.
• Add support for Extensions property as part of the EntityDescriptor and the SP/IDPSSODescriptor in metadata.
• Add support for multiple translation for Organization elements.

Braking changes in metadata:

• The type ServiceName is changed to LocalizedNameType.

General:

• Update vulnerable dependencies for System.IdentityModel.Tokens.Jwt and System.Security.Cryptography.Xml.
• Removed support for .NET 5.0 and .NET Core 3.1, still indirectly supported with .NET Standard 2.1.
• Change the access level to protected in related to the SamlBinding to make inheritance possible.
• In Saml2Configuration, change the set property to public for SignatureValidationCertificates and AllowedAudienceUris.

NuGet package released:
https://www.nuget.org/packages/ITfoxtec.Identity.Saml2/
https://www.nuget.org/packages/ITfoxtec.Identity.Saml2.Mvc/
https://www.nuget.org/packages/ITfoxtec.Identity.Saml2.MvcCore/