Issues

• xmlenc GCM.Encrypt encrypts a zero buffer and omits the nonce — output cannot be decrypted

  crewjam/saml#670 · Filter by author aibeshkov opened on Sep 16, 2026

• Add a scoped verification clock for ParseXMLResponse

  crewjam/saml#666 · Filter by author kaptinlin opened on Aug 9, 2026
  6

• samlidp: login is not constant-time — response timing reveals whether a username exists (user enumeration)

  crewjam/saml#665 · Filter by author avinashdhanshetty opened on Jul 27, 2026

• Support Cloud signing (like GCP KMS) which doesn't provide the private key outside the cloud

  crewjam/saml#657 · Filter by author dineshudayakumar opened on Feb 6, 2026

• Request to Update Transitive Dependency golang-jwt/jwt v4.5.0 Used via SAML Component

  crewjam/saml#651 · Filter by author ShivaliBandi opened on Jan 12, 2026

• [Feature] Allow configuration of AssertionConsumerService Bindings in SP Metadata

  crewjam/saml#650 · Filter by author f-kanari opened on Dec 12, 2025

• [Question/Bug] Default value of WantAssertionsSigned contradicts SAML Metadata Specification

  crewjam/saml#649 · Filter by author f-kanari opened on Dec 12, 2025

• RSA-OAEP decryption fails when DigestMethod uses http://www.w3.org/2001/04/xmlenc#sha256 (Keycloak SAML IdP)

  crewjam/saml#647 · Filter by author jiqingchen-sys opened on Dec 5, 2025

• [feat] MakeLogoutRequest need support sessionIndex params

  crewjam/saml#643 · Filter by author xiscoming opened on Oct 30, 2025

• Upgrade gotest.tools to latest maintained version in saml

  crewjam/saml#641 · Filter by author ShivaliBandi opened on Oct 7, 2025

• Request to upgrade EOL dependency github.com/crewjam/httperr:v0.2.0

  crewjam/saml#640 · Filter by author ShivaliBandi opened on Oct 7, 2025

• Concerns about multiple pending PRs and lack of active reviews

  crewjam/saml#634 · Filter by author gsaandy opened on Aug 9, 2025
  3

• Signature key and encryption key should be different

  crewjam/saml#623 · Filter by author dellekappa opened on Jun 4, 2025
  1

• QUESTION

  crewjam/saml#618 · Filter by author rabarar opened on May 5, 2025

• Upgrade goxmldsig from v1.4.0 to v.1.5.0

  crewjam/saml#616 · Filter by author Pe-te opened on Apr 29, 2025
  2

• Add new encryption algorithms to init()

  crewjam/saml#615 · Filter by author wz2b opened on Apr 27, 2025

• Since 0.5.0 the default login form no longer completes SAML flow

  crewjam/saml#613 · Filter by author huin opened on Apr 23, 2025

• Add Service Provider test cases for Microsoft Entra ID SAML Responses

  help wanted
  crewjam/saml#609 · Filter by author OscarVanL opened on Apr 14, 2025
  1

• Better support for permitting expired IdP signing certificates

  crewjam/saml#585 · Filter by author OscarVanL opened on Jan 6, 2025
  1

• Support validUntil as optional

  crewjam/saml#584 · Filter by author wz2b opened on Dec 30, 2024
  1

• saml:Assertion is not found without a namespace

  crewjam/saml#578 · Filter by author LauraBeatris opened on Oct 23, 2024
  1

• When encrypting SAML assertion only SHA1 option can be used

  crewjam/saml#569 · Filter by author yvgenyvp opened on Jun 19, 2024

• encrypt use pkcs1v5

  crewjam/saml#568 · Filter by author sy2339226 opened on Jun 13, 2024

• How to create a SAML response with Response and Assertion signature

  crewjam/saml#566 · Filter by author BalaGanaparthi opened on May 26, 2024

• can't figure out how to implement IDP initiated from IDP (for writing tests)

  crewjam/saml#564 · Filter by author rubensayshi opened on May 16, 2024
  2