SAML Integration Kits for Java, .NET and PHP

• Added POST Transport Method for OpenToken when used by an SP
• Added configuration option to specify session vs. persistent cookie
• Added option to set the Secure attribute on an OpenToken when a cookie is used
• Added ability to bypass password obfuscation and strength enforcement for backward compatibility with previous Java OpenToken agents
• Correctly handles null parameters for single logout via the back-channel (SOAP)
• Empty query string (?) is not automatically appended to the URL when redirecting to the Target Resource
• Target Resource URL is URL-encoded

.NET Integration Kit 2.3 – November 2008
• Added POST Transport Method for OpenToken when used by a Service Provider
• Added configuration to specify session cookie vs. persistent cookie
• Added option to set the “Secure” attribute on an OpenToken when cookie is used
• Added ability to bypass password obfuscation and strength enforcement for backward compatibility with previous .NET OpenToken agents
• Correctly handles null parameters for SOAP SLO
• Empty query string (?) is not automatically appended to the URL when redirecting to TargetResource
• TargetResource URL is URL encoded
• Corrected not-before tolerance processing

PHP Integration Kit 2.3 – November 2008
• Added POST Transport Method for OpenToken when used by a Service Provider
• Added configuration to specify session cookie vs. persistent cookie
• Added option to set the “Secure” attribute on an OpenToken when cookie is used
• Correctly handles null parameters for SOAP SLO
• Empty query string (?) is not automatically appended to the URL when redirecting to TargetResource
• TargetResource URL is URL encoded