Spring Security SAML v2 library availability

[carl@convio.com]

Hello-

The link for downloading the distribution for SAML Security extension is broken:

http://static.springsource.org/sprin...aml/index.html

Found this git repository and from that I have built and integrated SAML 2.0
support into my spring webapp:

git://git.springsource.org/spring-security/se-security.git

Here are the maven artifact definitions from the files in the repository:

<parent>
<artifactId>spring-security-saml2-parent</artifactId>
<groupId>org.springframework.security.extensions </groupId>
<version>1.0.0-RC1-SNAPSHOT</version>
</parent>

<artifactId>spring-security-saml2-core</artifactId>
<packaging>jar</packaging>
<name>Spring Security SAML v2 library</name>


Can you all tell me if this extension is about to be GA released and if so when
we might expect that to take place?

Thank you,
Carl

[Luke Taylor]

There are no plans for a GA release of the SAML extension at the moment.

[carl@convio.com]

Thanks Luke. Good to know. We'll use it as-is then.

[carl@convio.com]

There are no plans for a GA release of the SAML extension at the moment.

Just out of curiosity, is there a reason for that?

[john.worrell]

It would be very good to get some understanding of when this will be GAed. This is potentially a very valuable extension IMO.

[bbacsu]

I agree, SAML support is an essential component of Spring Security for it to remain a viable enterprise option for medium/large projects. Virtually all projects in the last 12 months that I have been involved with in the Financial Services and Government/Public Sector have included SAML support as a prerequisite.

[albiii]

SAML2 are mandatory for every program that I am on. Wide use. The Rest is no where near as secure. Will SAML2 w/extension capability be rolled out to GA soon ?

[thobson]

I don't think the Spring-SAML extension is being actively maintained. In the end we created a fork of the project and we maintain it ourselves.

[adben]

Hi guys,

My client has a security policy against the use of snapshots for their third party artifacts, due the actual status regarding this discussion, the best strategy in order to use this feature is to fork the project and release it? Why is that?

@thobson Did you published and released your fork as a forked open source project?

[vsch]

Hi,

The RC2 release is coming up in very near future. Followed some time after by a GA with possible bug fixes, there are no more features planned for it. The current trunk version is stable and will not be significantly changed. The main missing part is additional documentation.

The reason for limited progress is lack of my time-to-code-during-nights-and-weekends.

Vladimír Schäfer