saml_sp_drupal_login.module has several references to $_SESSION left over from its 7.x days. Drupal 8 and later recommend using \Drupal::service('session') instead.
MR attached to this issue updates the code, and includes two additional pieces of data available at authentication time (the IdP and its session index) for use in logout code such as 📌 Enabled hook_user_logout functionality Needs work .
It’s possible some code external to this module also relies on $_SESSION['authenticated_via_saml_sp'], so I preserved it but left a reminder to remove it at our next major version.
Three new keys in the session:
saml_sp__authenticatedsaml_sp__idpsaml_sp__session_indexFixed
4.0
Code
Not all content is available!
It's likely this issue predates Contrib.social: some issue and comment data are missing.
Issue #3330489 by jproctor: Use Drupal/Symfony session instead of $...
Automatically closed - issue fixed for 2 weeks with no activity.