[NIFI-11554] Upgrade to OpenSAML 4.3.0

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 2.0.0-M1
• Component/s: Core Framework
• Epic Link: Remove Support for Java 8
• Assignee: David Handermann
• Reporter: David Handermann
• Created: 16/May/23 02:39
• Updated: 16/May/23 12:34
• Resolved: 16/May/23 08:34

Description

OpenSAML 3 has reached end of life and Spring Security 5 deprecated support for OpenSAML 3 in recent releases.

OpenSAML 4 requires Java 11 and provides the current supported version, integrated with Spring Security 5. Spring Security SAML2 Migrations highlights the dependency management settings necessary to use OpenSAML 4, along with the related component changes required.

OpenSAML does not publish to Maven Central according to project document on use of Maven Central. The Shibboleth repository must be added to resolve the latest OpenSAML versions.