Why Go
- Case Studies
  
  Common problems companies solve with Go
- Use Cases
  
  Stories about how and why companies use Go
- Security
  
  How Go can help keep you secure by default
Learn
Docs
- Effective Go
  
  Tips for writing clear, performant, and idiomatic Go code
- Go User Manual
  
  A complete introduction to building software with Go
- Standard library
  
  Reference documentation for Go's standard library
- Release Notes
  
  Learn what's new in each Go release
- API
  
  Reference documentation for the pkg.go.dev API
Packages
Community
- Recorded Talks
  
  Videos from prior events
- Meetups
  
  Meet other local Go developers
- Conferences
  
  Learn and network with Go developers from around the world
- Go blog
  
  The Go project's official blog.
- Go project
  
  Get help and stay informed from Go
- Get connected

saml

package

Go to main page

Versions in this module

v0

v0.5.81

Sep 5, 2026

v0.5.9

Sep 8, 2026

v0.5.8

Sep 3, 2026

v0.5.7

Aug 24, 2026

Changes in this version

type Config

+ SigningCertPEM string

+ SigningKeyPEM string

v0.5.6

Aug 19, 2026

v0.5.5

Aug 5, 2026

v0.5.4

Jul 6, 2026

v0.5.3

Jun 12, 2026

Changes in this version

+ const DefaultGroupsAttribute

+ const DefaultReplayWindow

+ const DefaultUsernameAttribute

+ var ErrGroupNotAllowed = errors.New("saml: user not in required group")

+ var ErrMissingSAMLResponse = errors.New("saml: SAMLResponse missing from request")

+ var ErrParseResponse = errors.New("saml: assertion validation failed")

+ var ErrReplay = errors.New("saml: assertion replay detected")

+ var ErrStateMismatch = errors.New("saml: state mismatch")

+ var ErrUsernameInvalid = errors.New("saml: username failed character validation")

+ type Config struct

+ ACSURL string

+ EntityID string

+ ForceAuthn bool

+ GroupsAttribute string

+ IDPMetadataURL string

+ IDPMetadataXML string

+ JITProvision bool

+ LegacyPermissiveUsername bool

+ ReplayWindow int

+ RequireAssertionSigned bool

+ RequiredGroups []string

+ SignOnURL string

+ SigningCertPath string

+ SigningKeyPath string

+ UsernameAttribute string

+ func (c Config) Validate() error

+ type Provider struct

+ func NewSAMLProvider(ctx context.Context, cfg Config) (*Provider, error)

+ func (p *Provider) HandleCallback(_ context.Context, r *http.Request, state auth.State) (auth.ResolvedIdentity, error)

+ func (p *Provider) LoginURL(_ context.Context, state auth.State) (string, error)

+ func (p *Provider) LoginURLWithRequestID(state auth.State) (loginURL string, requestID string, err error)

+ func (p *Provider) Metadata() ([]byte, error)

+ func (p *Provider) Type() string