SAML

Release date 2024/09/11

Deprecation

• Standardized Redis configuration across plugins. The Redis configuration now follows a common schema shared with other plugins.

Release date 2024/02/12

Breaking Change

• adjust the priority of the SAML plugin to 1010 to correct the integration between the SAML plugin and other consumer-based plugins

Bugfix

• support for consumer group scoping by using pdk kong.client.authenticate function

Release date 2024/05/20

Bugfix

• support for consumer group scoping by using pdk kong.client.authenticate function

Release date 2023/12/21

Breaking Change

• adjust the priority of the SAML plugin to 1010 to correct the integration between the SAML plugin and other consumer-based plugins

Release date 2023/11/08

Bugfix

• When the redis session storage is incorrectly configured, users now receive a 500 error instead of being redirected endlessly

• Reduce severity of ‘session was not found’ messages to ‘info’

Release date 2024/03/21

Bugfix

• support for consumer group scoping by using pdk kong.client.authenticate function

Release date 2023/12/15

Breaking Change

• adjust the priority of the SAML plugin to 1010 to correct the integration between the SAML plugin and other consumer-based plugins

Release date 2023/10/12

Bugfix

• Reduce severity of ‘session was not found’ messages to ‘info’

Release date 2023/09/28

Bugfix

• When the redis session storage is incorrectly configured, users now receive a 500 error instead of being redirected endlessly

Release date 2023/10/12

Bugfix

• When the redis session storage is incorrectly configured, users now receive a 500 error instead of being redirected endlessly

Release date 2023/10/12

Bugfix

• Users will now receive a 500 error instead of being endlessly redirected when the Redis session storage is incorrectly configured.

Release date 2023/03/22

Bugfix

• The SAML plugin now works on read-only file systems.

• The SAML plugin can now handle the field session_auth_ttl (removed since 3.2.0.0).

Release date 2023/02/28

Feature

• These plugins now use lua-resty-session v4.0.0.

  This update includes new session functionalities such as configuring audiences to manage multiple sessions in a single cookie, global timeout, and persistent cookies.

  Due to this update, there are also a number of deprecated and removed parameters in these plugins. See the invidividual plugin documentation for the full list of changed parameters in each plugin.

  • Session changelog
  • OpenID Connect changelog
  • SAML changelog

• Session changelog

• OpenID Connect changelog

• SAML changelog

• Improved Plugin Documentation: Revised docs for the following plugins to include examples:

  • CORS
  • File Log
  • HTTP Log
  • JWT Signer
  • Key Auth
  • OpenID Connect
  • Rate Limiting Advanced
  • SAML
  • StatsD

• Improved Plugin Documentation: SAML

Bugfix

• Fixed an issue where the session_cookie_httponly parameter would always be set to true, even if it was configured as false.

Release date 2022/12/06

Feature

• Provides SAML v2.0 authentication and authorization between a service provider (Kong Gateway) and an identity provider (IdP).

• The anonymous field can now be configured as the username of the consumer. This field allows you to configure a string to use as an “anonymous” consumer if authentication fails.