{"categories":[{"label":"Security","url":"https://skillfed.io/packages/category/security"}],"enrichment":{"capability":"Turns a Python application into a SAML 2.0 Service Provider, enabling single sign-on and single logout with identity providers through standardized XML-based federation.","skillfed_tags":["saml-federation","sso-authentication","xml-security"],"use_cases":["Integrate enterprise SSO into a SaaS application to allow users to authenticate via corporate identity providers","Build a federated B2B platform where partner organizations can authenticate their users without sharing credentials","Implement single logout across multiple applications by handling IdP-initiated SLO requests","Publish SP metadata for discovery and automated configuration by identity provider administrators","Validate digitally signed SAML assertions and encrypted nameIds from trusted identity providers"],"what_it_does":"python3-saml is a SAML 2.0 toolkit that converts your Python application into a Service Provider capable of federating with identity providers. It handles the full SSO and SLO lifecycle\u2014both SP-initiated and IdP-initiated flows\u2014and manages assertion encryption, signature validation, and metadata publication. The library is session-less, delegating session management to your application layer, and provides both high-level and low-level APIs for flexibility.\n\nThe toolkit requires Python 3.7 or later and depends on xmlsec and lxml for XML cryptography and parsing. It implements the SAML 2.0 Web Browser SSO Profile and has been in production use since 2015. The library emphasizes security best practices, including strict mode validation by default and defenses against XML external entity attacks, signature wrapping, and replay attacks.","worth_installing":"Yes, with conditions. The library is mature, permissively licensed, and has no known vulnerabilities. Install friction is low and it covers the full SAML 2.0 SP workflow. However, maintenance is aging (last release 2023-10-09); verify that it supports your IdP's current SAML profile and that you can manage the xmlsec and lxml system dependencies in your deployment environment. Suitable for production use if you can commit to security best practices, especially enabling strict mode."},"id":"python3-saml","links":{"html":"https://skillfed.io/packages/python3-saml","md":"https://skillfed.io/packages/python3-saml.md","pypi":"https://pypi.org/project/python3-saml/"},"maintenance":{"status":"aging"},"meta":{"latest_release":"2023-10-09","license_spdx":null,"license_treatment":"permissive","name":"python3-saml","python_support":"unspecified","summary":"Saml Python Toolkit. Add SAML support to your Python software using this library"},"popularity":{"monthly_downloads":9429292,"position":1534,"tier":"top_5000"},"security":{"n_vulnerabilities":0},"version":"1.16.0"}