Skip to content

Change SAML 2.0 status to deprecated#214

Open
udf2457 wants to merge 1 commit into
dexidp:mainfrom
udf2457:patch-1
Open

Change SAML 2.0 status to deprecated#214
udf2457 wants to merge 1 commit into
dexidp:mainfrom
udf2457:patch-1

Conversation

@udf2457

@udf2457 udf2457 commented Jul 7, 2026

Copy link
Copy Markdown

Updated the status of the SAML 2.0 connector to 'deprecated' and modified the definition section to include 'deprecated'.

See the warning header at the top of SAML:

The SAML connector is unmaintained, likely vulnerable to authentication bypass vulnerabilities, and is under consideration for deprecation (see #1884). Please consider switching to OpenID Connect, OAuth2, or LDAP for identity providers that support these protocols. If you have domain expertise in SAML/XMLDSig and would like to volunteer to maintain the connector please comment on the discussion.

It is therefore not reasonable to describe SAML support as 'stable'.

Describing SAML support as stable is not an accurate description of its present state, nor is it in-line with general industry acceptance of what the word 'stable' means. 'obsolete' is likely a fairer term, but I was being generous with 'deprecated'. 😉

(ping dexidp/dex#1884)

Updated the status of the SAML 2.0 connector to 'deprecated' and modified the definition section to include 'deprecated'.

Signed-off-by: udf2457 <udf2457@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant