OpenSAML v5 development status

[Cantor, Scott]

> Unicon is the developer of the Shibboleth IDP UI (ShibUI) application. We have a
> work segment to upgrade our libraries to OpenSAML v5. It was only after
> starting the work segment that the development status of OpenSAML v5 was
> looked at more thoroughly, noting that it is still in development.

It is a bit premature to really be actively focused on moving to it. Just in case this stems from something I communicated a few times by mistake, Spring 5.3 is EOL at the end of 2024, NOT 2023, which means that the likely EOL for our V4 stack is probably going to be not much sooner than end of 2024.

It's also nice to see people moving off old releases, but you're fine for a while is what I'm saying.

> We're moving forward as well as we can, using snapshot builds and the source
> code branch. I haven't tried myself, but the developer working on it mentioned
> some compile difficulties related to classes being in multiple packages.

Obviously by definition a class named Foo in 2 different packages is 2 different classes. There are certainly plenty of cases like that, usually when one extends the other.

Our stack is being continuously tested all the way up through the IdP, so it's rarely broken longer than a day until it gets fixed.

> Also, is the release still Q2/Q3?

Q3 at best.

> (Tried to send to the dev list, but subscription wasn't going through)

Your spam filter is catching it.

-- Scott