Delphi SAML is a SAML implementation written on top of xmlsec. The basic idea behind the code comes from samltools.

• Clone the repo
• Copy all the DLL in the Demos\bin folder (see installation)
• Setup a loopback mapping to "sp.samltools.com". On windows:
  • Open C:\Windows\System32\drivers\etc\hosts
  • Add 127.0.0.1 sp.samltools.com
• Compile Demos\SAML\SPDemo.dpr
• Run it
• Choose idp-auth0.ini in Identity Provider settings
• Choose sp-auth0.ini in Serivce Provider settings
• Click Open Browser and follow the instructions

Download the zip files for your platform and extract all DLLs into the demos\bin folder. You can found the precompiled binaries of the DLL here:

• 32bit: https://www.zlatkovic.com/pub/libxml/
• 64bit: https://www.aleksey.com/xmlsec/download/win64/

The required DLL are:

• libxmlsec.dll: main DLL
  • libxml2.dll: to handle XML
    • iconv.dll: to convert between charsets
  • libxmlsec-mscrypto.dll: if you want to use cryptographics functions from msCrypto (install msCrypto from MS)
  • libxmlsec-openssl.dll: or if you want to use cryptographics functions from OpenSSL
    • libeay32.dll
    • ssleay32.dll
  • zlib1.dll: compression... but I'm not sure who need it
  • libexslt.dll: xsl transformations (optional)
  • libxslt.dll: xsl transformations (optional)

If you want you can extract xmlsec.exe and openssl.exe. The first can be used to test XML signing and encryption, and the second to handle certificates and cryptography.

• 📌 Better metadata support
• ✨ Identity provider implementation
• ✨ Basic key format conversion (PEM, DER, ...)

Delphi SAML consists of some modules:

• The cryptographic units: used to handle signing and encryption
• The SAML message units: to build request and parse response
• The metadata unit: to read and write metadata
• The demos: to see how Delphi SAML works

If you need more help you can read the API documentation.

Delphi SAML is released under the term of the Apache License. Here follows the licenses of all dependencies:

SAML documentation:

• http://docs.oasis-open.org/security/saml/v2.0/saml-2.0-os.zip
• https://developer.okta.com/docs/concepts/saml/
• https://shibboleth.atlassian.net/wiki/spaces/CONCEPT/overview
• https://en.wikipedia.org/wiki/SAML_2.0

XML-Sec API:

• https://www.aleksey.com/xmlsec/api/

Resources:

• https://samltest.id/
• https://www.samltool.com/online_tools.php
• https://github.com/monmohan/samltools

If you want to sign you request you need a private and a public key. You can generate both with this command:

keygen.bat -h sp.samltools.com -e urn:msingh.samltools:sp -y 10

See command line for further detail.