{"id":36700345,"url":"https://github.com/litsec/swedish-eid-shibboleth-base","last_synced_at":"2026-01-12T11:37:40.517Z","repository":{"id":29339373,"uuid":"82965612","full_name":"litsec/swedish-eid-shibboleth-base","owner":"litsec","description":"Packaging of Shibboleth IdP 3.X prepared for the Swedish eID Framework","archived":false,"fork":false,"pushed_at":"2025-09-18T00:39:42.000Z","size":4132,"stargazers_count":0,"open_issues_count":56,"forks_count":1,"subscribers_count":2,"default_branch":"opensaml3","last_synced_at":"2025-09-18T02:39:24.056Z","etag":null,"topics":["opensaml","saml","shibboleth","swedish-eid"],"latest_commit_sha":null,"homepage":null,"language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/litsec.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2017-02-23T19:54:15.000Z","updated_at":"2022-01-26T20:06:57.000Z","dependencies_parsed_at":"2024-03-04T21:36:41.292Z","dependency_job_id":"bef27f61-6ae5-48d1-9189-25ca2ba1f988","html_url":"https://github.com/litsec/swedish-eid-shibboleth-base","commit_stats":null,"previous_names":[],"tags_count":26,"template":false,"template_full_name":null,"purl":"pkg:github/litsec/swedish-eid-shibboleth-base","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/litsec%2Fswedish-eid-shibboleth-base","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/litsec%2Fswedish-eid-shibboleth-base/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/litsec%2Fswedish-eid-shibboleth-base/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/litsec%2Fswedish-eid-shibboleth-base/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/litsec","download_url":"https://codeload.github.com/litsec/swedish-eid-shibboleth-base/tar.gz/refs/heads/opensaml3","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/litsec%2Fswedish-eid-shibboleth-base/sbom","scorecard":{"id":592921,"data":{"date":"2025-08-11","repo":{"name":"github.com/litsec/swedish-eid-shibboleth-base","commit":"b6ca56cb6d6c20f2c10e54cee3643c3828c1eb28"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":1.6,"checks":[{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Token-Permissions","score":-1,"reason":"No tokens found","details":null,"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Code-Review","score":0,"reason":"Found 0/17 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":-1,"reason":"no workflows found","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Binary-Artifacts","score":9,"reason":"binaries present in source code","details":["Warn: binary detected: shibboleth-base/idp/src/main/resources/bin/lib/bcprov-jdk15on-1.59.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":-1,"reason":"no dependencies found","details":null,"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'opensaml3'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 24 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":0,"reason":"35 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-h46c-h94j-95f3","Warn: Project is vulnerable to: GHSA-57j2-w4cx-62h2","Warn: Project is vulnerable to: GHSA-jjjh-jjxp-wpff","Warn: Project is vulnerable to: GHSA-rgv9-q543-rqg4","Warn: Project is vulnerable to: GHSA-3f7h-mf4q-vrm4","Warn: Project is vulnerable to: GHSA-5mg8-w23w-74h3","Warn: Project is vulnerable to: GHSA-7g45-4rm6-3mm3","Warn: Project is vulnerable to: GHSA-gvpg-vgmx-xg6w","Warn: Project is vulnerable to: GHSA-xwmg-2g98-w7v9","Warn: Project is vulnerable to: GHSA-j288-q9x7-2f5v","Warn: Project is vulnerable to: GHSA-493p-pfq6-5258","Warn: Project is vulnerable to: GHSA-v528-7hrm-frqp","Warn: Project is vulnerable to: GHSA-4q98-wr72-h35w","Warn: Project is vulnerable to: GHSA-j8wc-gxx9-82hx","Warn: Project is vulnerable to: GHSA-xfrj-6vvc-3xm2","Warn: Project is vulnerable to: GHSA-8xfc-gm6g-vgpv","Warn: Project is vulnerable to: GHSA-hr8g-6v94-x4m9","Warn: Project is vulnerable to: GHSA-v435-xc8x-wvr9","Warn: Project is vulnerable to: GHSA-wjxj-5m7g-mg7q","Warn: Project is vulnerable to: GHSA-x64g-4xx9-fh6x","Warn: Project is vulnerable to: GHSA-36p3-wjmg-h94x","Warn: Project is vulnerable to: GHSA-hh26-6xwr-ggv7","Warn: Project is vulnerable to: GHSA-4gc7-5j7h-4qph","Warn: Project is vulnerable to: GHSA-4wp7-92pw-q264","Warn: Project is vulnerable to: GHSA-g5mm-vmx4-3rg7","Warn: Project is vulnerable to: GHSA-ffvq-7w96-97p7","Warn: Project is vulnerable to: GHSA-558x-2xjg-6232","Warn: Project is vulnerable to: GHSA-564r-hj7v-mcr5","Warn: Project is vulnerable to: GHSA-9cmq-m9j5-mvww","Warn: Project is vulnerable to: GHSA-wxqc-pxw9-g2p8","Warn: Project is vulnerable to: GHSA-2rmj-mq67-h97g","Warn: Project is vulnerable to: GHSA-2wrp-6fg6-hmc5","Warn: Project is vulnerable to: GHSA-4wrc-f8pq-fpqp","Warn: Project is vulnerable to: GHSA-ccgv-vj62-xf9h","Warn: Project is vulnerable to: GHSA-hgjh-9rj2-g67j"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-20T22:25:11.329Z","repository_id":29339373,"created_at":"2025-08-20T22:25:11.329Z","updated_at":"2025-08-20T22:25:11.329Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":28338971,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-01-12T10:58:46.209Z","status":"ssl_error","status_checked_at":"2026-01-12T10:58:42.742Z","response_time":98,"last_error":"SSL_connect returned=1 errno=0 peeraddr=140.82.121.5:443 state=error: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["opensaml","saml","shibboleth","swedish-eid"],"created_at":"2026-01-12T11:37:40.458Z","updated_at":"2026-01-12T11:37:40.512Z","avatar_url":"https://github.com/litsec.png","language":"Java","funding_links":[],"categories":[],"sub_categories":[],"readme":"![Logo](https://github.com/litsec/eidas-opensaml/blob/master/docs/img/litsec-small.png)\n\n------\n\n# swedish-eid-shibboleth-base\n\n[![License](https://img.shields.io/badge/License-Apache%202.0-blue.svg)](https://opensource.org/licenses/Apache-2.0) [![Maven Central](https://maven-badges.herokuapp.com/maven-central/se.litsec.sweid.idp/shibboleth-base/badge.svg)](https://maven-badges.herokuapp.com/maven-central/se.litsec.sweid.idp/shibboleth-base)\n\nPackaging of Shibboleth IdP 3.4.X prepared for the Swedish eID Framework\n\nThe swedish-eid-shibboleth-base repository is a re-packaging of the [Shibboleth Identity Provider](https://wiki.shibboleth.net/confluence/display/IDP30/Home) to enable a quick setup for an Identity Provider wanting to be compliant with the [Swedish eID Framework](https://github.com/swedenconnect/technical-framework).\n\nThe repository consists of the following components:\n\n* dependency-bom - BOM (Bill of Materials) of dependencies for users of the base packaging of Shibboleth IdP 3.4.X for the Swedish eID Framework.\n\n* shibboleth-base/shibboleth-extensions - Implementations that extend the core Shibboleth functionality with:\n\t* Contexts and extended sub-system support.\n\t\n\t* Extensions to Shibboleth's attribute support with converters and resolvers. The `SAML2AttributeNameToIdMapperService` is a service bean that maps between an SAML v2 attribute name and its corresponding Shibboleth attribute ID. This is useful for external authentication implementations that only knows about the actual SAML attribute name and not its Shibboleth ID.\n\n\t* Shibboleth's support for publishing IdP metadata is limited to a static JSP-file. Therefore a `MetadataPublishingController` class that supports publishing of signed, and up-to-date, metadata is added.\n\n\t* A framework for building and deploying an \"external authentication\" component in Shibboleth. The component comprises of the `AbstractExternalAuthenticationController` MVC-controller which is sub-classed to implement your own authentication, service implementations conforming to the Swedish eID Framework (signature services support, authentication context handling, ...) and other required extensions to support the Swedish eID Framework.\n\n\n* shibboleth-base/idp - The actual re-packaging of the Shibboleth Identity Provider. It contains:\n\t- Definitions for all attributes defined in the Swedish eID Framework.\n\t- Attribute release rules for the Swedish eID Framework.\n\t- Extensions of the core SAML error codes with error codes defined within the Swedish eID Framework.\n\t- Metadata publishing support (via the `MetadataPublishingController` and metadata template support).\n\t- MVC setup for external authentication that enables us to implement an external authentication component in a Spring MVC controller instead of in a \"raw\" servlet.\n\t- The Shibboleth messages files in Swedish.\n\t- Some extensions to the core Shibboleth beans and flows.\n\t\n### Upgrade notice\n\nWhen upgrading to version 1.7.0 of the swedish-eid-shibboleth-base you should be aware that the version of the underlying Shibboleth version has been upgraded to v 3.4.4.\n\nSee the [Shibboleth 3.4 Release notes](https://wiki.shibboleth.net/confluence/display/IDP30/ReleaseNotes) for details.\n\nAlso note that if you have modifications to `services.xml` in the `conf` directory, you need to make sure that the `%{idp.home}/conf/custom-security-configuration.xml` is added to the `shibboleth.RelyingPartyResolverResources` bean.\n\n```\n\u003cutil:list id=\"shibboleth.RelyingPartyResolverResources\"\u003e\n  \u003cvalue\u003e%{idp.home}/conf/custom-security-configuration.xml\u003c/value\u003e\n  \u003cvalue\u003e%{idp.home}/conf/relying-party.xml\u003c/value\u003e\n  \u003cvalue\u003e%{idp.home}/conf/credentials.xml\u003c/value\u003e\n  \u003cvalue\u003e%{idp.home}/system/conf/relying-party-system.xml\u003c/value\u003e\n\u003c/util:list\u003e\n```\n\n------\n\nCopyright \u0026copy; 2017-2022, [Litsec AB](http://www.litsec.se). Licensed under version 2.0 of the [Apache License](http://www.apache.org/licenses/LICENSE-2.0).\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Flitsec%2Fswedish-eid-shibboleth-base","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Flitsec%2Fswedish-eid-shibboleth-base","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Flitsec%2Fswedish-eid-shibboleth-base/lists"}