v3.15.0

This release introduces a new feature that allows the extraction of custom attributes from the SAML Response during user identity processing. The new hook function, TRIGGER.EXTRACT_USER_IDENTITY, accepts two parameters:

1. A user dictionary that has been processed by the extract_user_identity function.
2. A decoded but unvalidated AuthnResponse object, provided as a raw XML string.

If this function is implemented, it MUST return the user dictionary or optionally enrich it with additional attributes extracted from the AuthnResponse.

Warning

This hook function receives an unvalidated and unverified raw XML string. Extreme caution is required to validate the attributes before using them. For example, the Issuer and NameID attributes should at minimum be verified to contain a valid URL and URN, respectively. For further details, refer to this discussion.

What's Changed

• Extract user identity hook by @mostafa in #344

Full Changelog: v3.13.0...v3.15.0