Plan for OneLogin SAML-PHP 4.1

The PHP-SAML 4.x versions remove support for PHP 7.3, which is still allowed by Drupal 9 (until it reaches end of life in a few months). We cannot require 4.x until we stop supporting Drupal 9, which will be next year at the earliest.

I’m running PHP-SAML 3.6.1 in PHP 8.1, so I don’t think there’s a serious compatibility issue, despite the release notes suggesting that isn’t added until 4.0.1. My guess, without chasing the code changes, is that this module does not touch any of the PHP-SAML code that needed to be updated. Do you have a specific need for the new $spValidationOnly feature introduced in PHP-SAML 4.1.0?

I agree we should work on allowing 4.x, which will mostly amount to editing composer.json and testing to make sure it doesn’t break anything.

Thanks @Jae for your prompt reply.

I tested on one of my sites allowing for onelogin/php-saml: ^3.3.1 | ^4.0 - 4.1.0 was installed and it works so I have committed.

Automatically closed - issue fixed for 2 weeks with no activity.