RelaxedTime is a version of time.Time that supports the time format found in SAML documents.

ErrIncorrectKeyType is returned when the key is not the correct type

Duration is a time.Duration that uses the xsd:duration format for text marshalling and unmarshalling.

ErrIncorrectKeyLength is returned when the fixed length key is not of the required length.

ErrAlgorithmNotImplemented is returned when encryption used is not supported.

NameIDFormat is the format of the id

ErrCannotFindRequiredElement is returned by Decrypt when a required element cannot be found.

AffiliationDescriptor represents the SAML AffiliationDescriptor object. See http://docs.oasis-open.org/security/saml/v2.0/saml-metadata-2.0-os.pdf §2

ArtifactResolve represents the SAML object of the same name.

ArtifactResponse represents the SAML object of the same name.

Assertion represents the SAML element Assertion. See http://docs.oasis-open.org/security/saml/v2.0/saml-core-2.0-os.pdf §2.3.3

AssertionAttribute represents an attribute of the user extracted from a SAML Assertion.

AssertionAttributes is a list of AssertionAttribute

AssertionMaker is an interface used by IdentityProvider to construct the assertion for a request. The default implementation is DefaultAssertionMaker,

Attribute represents the SAML element Attribute. See http://docs.oasis-open.org/security/saml/v2.0/saml-core-2.0-os.pdf §2.7.3.1

AttributeAuthorityDescriptor represents the SAML AttributeAuthorityDescriptor object. See http://docs.oasis-open.org/security/saml/v2.0/saml-metadata

AttributeConsumingService represents the SAML AttributeConsumingService object. See http://docs.oasis-open.org/security/saml/v2.0/saml-metadata-2.0-o

AttributeStatement represents the SAML element AttributeStatement. See http://docs.oasis-open.org/security/saml/v2.0/saml-core-2.0-os.pdf §2.7.3

AttributeValue represents the SAML element AttributeValue. See http://docs.oasis-open.org/security/saml/v2.0/saml-core-2.0-os.pdf §2.7.3.1.1

Attributes is a map of attributes provided in the SAML assertion

Audience represents the SAML element Audience. See http://docs.oasis-open.org/security/saml/v2.0/saml-core-2.0-os.pdf §2.5.1.4

AudienceRestriction represents the SAML element AudienceRestriction. See http://docs.oasis-open.org/security/saml/v2.0/saml-core-2.0-os.pdf §2.5.1.4

AuthnAuthorityDescriptor represents the SAML AuthnAuthorityDescriptor object. See http://docs.oasis-open.org/security/saml/v2.0/saml-metadata-2.0-os.

AuthnContext represents the SAML element AuthnContext. See http://docs.oasis-open.org/security/saml/v2.0/saml-core-2.0-os.pdf §2.7.2.2

AuthnContextClassRef represents the SAML element AuthnContextClassRef. See http://docs.oasis-open.org/security/saml/v2.0/saml-core-2.0-os.pdf §2.7.2.

AuthnRequest represents the SAML object of the same name, a request from a service provider to authenticate a user. See http://docs.oasis-open.org/se

AuthnStatement represents the SAML element AuthnStatement. See http://docs.oasis-open.org/security/saml/v2.0/saml-core-2.0-os.pdf §2.7.2

BlockCipher implements a cipher with a fixed size key like AES or 3DES.

CBC implements Decrypter and Encrypter for block ciphers in CBC mode

Conditions represents the SAML element Conditions. See http://docs.oasis-open.org/security/saml/v2.0/saml-core-2.0-os.pdf §2.5.1

ContactPerson represents the SAML element ContactPerson. See http://docs.oasis-open.org/security/saml/v2.0/saml-metadata-2.0-os.pdf §2.3.2.2

CookieRequestTracker tracks requests by setting a uniquely named cookie for each request.

CookieSessionProvider is an implementation of SessionProvider that stores session tokens in an HTTP cookie.

Decrypter is an interface that decrypts things. The Decrypt() method returns the plaintext version of the EncryptedData or EncryptedKey element passed

DefaultAssertionMaker produces a SAML assertion for the given request and assigns it to req.Assertion.

DigestMethod represents a digest method such as SHA1, etc.

Encrypter is an interface that encrypts things. Given a plaintext it returns an XML EncryptedData or EncryptedKey element. The required type of `key`

EncryptionMethod represents the XMLSEC object of the same name

Endpoint represents the SAML EndpointType object. See http://docs.oasis-open.org/security/saml/v2.0/saml-metadata-2.0-os.pdf §2.2.2

EntitiesDescriptor represents the SAML object of the same name. See http://docs.oasis-open.org/security/saml/v2.0/saml-metadata-2.0-os.pdf §2.3.1

EntityDescriptor represents the SAML EntityDescriptor object. See http://docs.oasis-open.org/security/saml/v2.0/saml-metadata-2.0-os.pdf §2.3.2

ErrBadStatus is returned when the assertion provided is valid but the status code is not "urn:oasis:names:tc:SAML:2.0:status:Success".

ErrorFunction is a callback that is invoked to return an error to the web user.

GCM implements Decrypter and Encrypter for block ciphers in struct mode

IDPSSODescriptor represents the SAML IDPSSODescriptorType object. See http://docs.oasis-open.org/security/saml/v2.0/saml-metadata-2.0-os.pdf §2.4.3

IdentityProvider implements the SAML Identity Provider role (IDP). An identity provider receives SAML assertion requests and responds with SAML Asser

IdpAuthnRequest is used by IdentityProvider to handle a single authentication request.

IdpAuthnRequestForm contans HTML form information to be submitted to the SAML HTTP POST binding ACS.

IndexedEndpoint represents the SAML IndexedEndpointType object. See http://docs.oasis-open.org/security/saml/v2.0/saml-metadata-2.0-os.pdf §2.2.3

Interface provides the minimal logging interface

InvalidResponseError is the error produced by ParseResponse when it fails. The underlying error is in PrivateErr. Response is the response as it was k

Issuer represents the SAML object of the same name. See http://docs.oasis-open.org/security/saml/v2.0/saml-core-2.0-os.pdf

JWTSessionClaims represents the JWT claims in the encoded session

JWTSessionCodec implements SessionCoded to encode and decode Sessions from the corresponding JWT.

JWTTrackedRequestClaims represents the JWT claims for a tracked request.

JWTTrackedRequestCodec encodes TrackedRequests as signed JWTs

KeyDescriptor represents the XMLSEC object of the same name

KeyInfo represents the XMLSEC object of the same name

Link represents a short link

LocalizedName represents the SAML type localizedNameType. See http://docs.oasis-open.org/security/saml/v2.0/saml-metadata-2.0-os.pdf §2.2.4

LocalizedURI represents the SAML type localizedURIType. See http://docs.oasis-open.org/security/saml/v2.0/saml-metadata-2.0-os.pdf §2.2.5

LogoutRequest represents the SAML object of the same name, a request from an IDP to destroy a user's session. See http://docs.oasis-open.org/securit

LogoutResponse represents the SAML object of the same name. See http://docs.oasis-open.org/security/saml/v2.0/saml-core-2.0-os.pdf

MemoryStore is an implementation of Store that resides completely in memory.

Middleware implements middleware than allows a web application to support SAML. It implements http.Handler so that it can provide the metadata and AC

NameID represents the SAML element NameID. See http://docs.oasis-open.org/security/saml/v2.0/saml-core-2.0-os.pdf §2.2.3

NameIDPolicy represents the SAML object of the same name. See http://docs.oasis-open.org/security/saml/v2.0/saml-core-2.0-os.pdf

OneTimeUse represents the SAML element OneTimeUse. See http://docs.oasis-open.org/security/saml/v2.0/saml-core-2.0-os.pdf §2.5.1.5

Options represents the parameters for creating a new middleware

Options represent the parameters to New() for creating a new IDP server

Organization represents the SAML Organization object. See http://docs.oasis-open.org/security/saml/v2.0/saml-metadata-2.0-os.pdf §2.3.2.1

PDPDescriptor represents the SAML PDPDescriptor object. See http://docs.oasis-open.org/security/saml/v2.0/saml-metadata-2.0-os.pdf §2.4.6

ProxyRestriction represents the SAML element ProxyRestriction. See http://docs.oasis-open.org/security/saml/v2.0/saml-core-2.0-os.pdf §2.5.1.6

RSA implements Encrypter and Decrypter using RSA public key encryption. Use function like OAEP(), or PKCS1v15() to get an instance of this type ready

RequestTracker tracks pending authentication requests. There are two main reasons for this: 1. When the middleware initiates an authentication reque

RequestedAttribute represents the SAML RequestedAttribute object. See http://docs.oasis-open.org/security/saml/v2.0/saml-metadata-2.0-os.pdf §2.4.4.2

RequestedAuthnContext represents the SAML object of the same name, an indication of the requirements on the authentication process.

Response represents the SAML object of the same name. See http://docs.oasis-open.org/security/saml/v2.0/saml-core-2.0-os.pdf

RoleDescriptor represents the SAML element RoleDescriptor. See http://docs.oasis-open.org/security/saml/v2.0/saml-metadata-2.0-os.pdf §2.4.1

SPSSODescriptor represents the SAML SPSSODescriptorType object. See http://docs.oasis-open.org/security/saml/v2.0/saml-metadata-2.0-os.pdf §2.4.2

SSODescriptor represents the SAML complex type SSODescriptor See http://docs.oasis-open.org/security/saml/v2.0/saml-metadata-2.0-os.pdf §2.4.2

Server represents an IDP server. The server provides the following URLs: /metadata - the SAML metadata /sso - the SAML endpoint to ini

Service represents a configured SP for whom this IDP provides authentication services.

ServiceProvider implements SAML Service provider. In SAML, service providers delegate responsibility for identifying clients to an identity provider.

ServiceProviderProvider is an interface used by IdentityProvider to look up service provider metadata for a request.

Session is an interface implemented to contain a session.

Session represents a user session. It is returned by the SessionProvider implementation's GetSession method. Fields here are used to set fields in the

SessionCodec is an interface to convert SAML assertions to a Session. The default implementation uses JWTs, JWTSessionCodec.

SessionIndex represents the SAML element SessionIndex. See http://docs.oasis-open.org/security/saml/v2.0/saml-core-2.0-os.pdf §3.7.1

SessionProvider is an interface used by IdentityProvider to determine the Session associated with a request. For an example implementation, see GetSes

SessionProvider is an interface implemented by types that can track the active session of a user. The default implementation is CookieSessionProvider

SessionWithAttributes is a session that can expose the attributes provided by the SAML identity provider.

Shortcut represents an IDP-initiated SAML flow. When a user navigates to /login/:shortcut it initiates the login flow to the specified service provide