Lucas Manuel Rodriguez c69d56ed64 Replace home-made SAML implementation with https://github.com/crewjam/saml (#28486) ... For https://github.com/fleetdm/confidential/issues/9931. [Here](ec3e8edbdc/docs/Contributing/Testing-and-local-development.md (L339))'s how to test SAML locally with SimpleSAML. - [X] Changes file added for user-visible changes in `changes/`, `orbit/changes/` or `ee/fleetd-chrome/changes`. See [Changes files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/Committing-Changes.md#changes-files) for more information. - [x] Added/updated automated tests - [x] A detailed QA plan exists on the associated ticket (if it isn't there, work with the product group's QA engineer to add it) - [x] Manual QA for all new/changed functionality <!-- This is an auto-generated comment: release notes by coderabbit.ai --> ## Summary by CodeRabbit * **New Features** * Improved SSO and SAML integration with enhanced session management using secure cookies. * Added support for IdP-initiated login flows. * Introduced new tests covering SSO login flows, metadata handling, and error scenarios. * **Bug Fixes** * Enhanced validation and error handling for invalid or tampered SAML responses. * Fixed session cookie handling during SSO and Apple MDM SSO flows. * **Refactor** * Replaced custom SAML implementation with the crewjam/saml library for improved reliability. * Simplified SAML metadata parsing and session store management. * Streamlined SSO authorization request and response processing. * Removed deprecated fields and redundant code related to SSO. * **Documentation** * Updated testing and local development docs with clearer instructions for SSO and IdP-initiated login. * **Chores** * Upgraded dependencies including crewjam/saml and related packages. * Cleaned up tests and configuration by removing deprecated fields and unused imports. <!-- end of auto-generated comment: release notes by coderabbit.ai -->		2025-07-07 15:13:46 -03:00
..
calendar	Fixed error deleting calendar event for non-existent user. (#30009)	2025-06-18 17:03:06 -05:00
integrationtest/scim	Update PATCH /fleet/scim/Groups/<group name> endpoint to handle duplicate entries (#30533)	2025-07-07 09:33:17 -05:00
licensing	Allow certain licenses to disable telemetry (#29093)	2025-05-22 14:27:07 -04:00
scim	Update PATCH /fleet/scim/Groups/<group name> endpoint to handle duplicate entries (#30533)	2025-07-07 09:33:17 -05:00
service	Replace home-made SAML implementation with https://github.com/crewjam/saml (#28486)	2025-07-07 15:13:46 -03:00
webhooks	Feature 10196: Add filepath to end-points and third party integrations (#11285)	2023-05-17 16:53:15 -04:00