FIPS Compliance

Support for FIPS Compliance

v2.9.2

• Security Fix: Bind state and assertion to response issuer.
• Security Fix: Bind request state to module path to prevent substitution.

v1.0.3

• Security Fix: Bind state and assertion to response issuer.
• Security Fix: Bind request state to module path to prevent substitution.

V2.9.1

support modern crypto providers

v2.9.0

• Add runtime detection for .NET 5+
• Deserialize LogoutResponse

v2.8.0

Add runtime detection for .NET 5
Enable adding support for AES-GCM (http://www.w3.org/2009/xmlenc11#aes128-gcm)
Bug fix: Do not crash on duplicate language entries for localized strings in metadata

v2.7.0 - Security and Compatibility

• Security Fix: Ensure received token is a bearer token.
• Compatibility flag to allow unsigned logout responses

v.1.0.2 - Security Fix

• Security Fix: Ensure received token is a bearer token.

v2.6.0

• Xml Created Notifications

v2.5.0 Security Fix

• Security Fix: Token Replay Detection
• Configuration of TokenValidationParameters
• Use CookieManager in Asp.Net Core and Owin
• Bug fixes to Artifact binding, AuthnRequest, Owin Logout

See GitHub milestone issue list for details.