PHPackages                             uhi67/simplesamlphp-module-aa - PHPackages - PHPackages  [Skip to content](#main-content)[PHPackages](/)[Directory](/)[Categories](/categories)[Trending](/trending)[Leaderboard](/leaderboard)[Changelog](/changelog)[Analyze](/analyze)[Collections](/collections)[Log in](/login)[Sign up](/register)

1. [Directory](/)
2. /
3. [Authentication & Authorization](/categories/authentication)
4. /
5. uhi67/simplesamlphp-module-aa

ActiveSimplesamlphp-module[Authentication & Authorization](/categories/authentication)

uhi67/simplesamlphp-module-aa
=============================

Attribute Authority for simpleSAMLphp

086↓50%PHP

Since Dec 30Pushed 4mo agoCompare

[ Source](https://github.com/uhi67/simplesamlphp-module-aa)[ Packagist](https://packagist.org/packages/uhi67/simplesamlphp-module-aa)[ RSS](/packages/uhi67-simplesamlphp-module-aa/feed)WikiDiscussions master Synced 1mo ago

READMEChangelogDependenciesVersions (1)Used By (0)

Attribute Authority for simpleSAMLphp
=====================================

[](#attribute-authority-for-simplesamlphp)

- Author: Gyula Szabó , NIIF Institute, Hungary

This module provides back-end SAML Attribute Authority functionality.

Install module
--------------

[](#install-module)

You can install the module with composer:

```
composer require niif/simplesamlphp-module-aa:2.*

```

Apache configuration
--------------------

[](#apache-configuration)

The following Apache configuration is required for the SimpleSAMLphp request path:

```
    SSLOptions +StdEnvVars +ExportCertData
    SSLVerifyClient optional_no_ca

```

Module configuration
--------------------

[](#module-configuration)

The module configuration example is in `config-templates/module-aa.php`. You can configure the response validity time, the defined authsource and the signing properties.

### Authentication Source

[](#authentication-source)

Because the principal can not be authenticated, there must be an authsource that populates the query subject in an attribute, that can be further processed by Authentication Processing Filters. It is implemented by a dummy authsource called `aa:Bypass`.

You can configure the field that will hold the query subject in `config/authsources.php` as the following:

```
   'default-aa' => array(
            'aa:Bypass',
            'uid' => 'subject_nameid',
    ),

```

### Authproc Filters

[](#authproc-filters)

In the `config/config.php` you can define an array named "authproc.aa", just like authproc.sp or authproc.idp. The NameID of the request will be in the attribute as defined above. For example, you can add attributes to the response with `attributecollector:AttributeCollector` or `ldap:AttributeAddFromLDAP`.

### Metadata

[](#metadata)

You should copy `metadata-templates/attributeauthority-hosted.php` to the `metadata` directory and customise it. The metadata is published at

```
/module.php/aa/metadata.php?output=xhtml

```

URL in the usual formats. The metadata contains the proper signing certificate.

This code has derived from the old [aa4ssp code](https://code.google.com/p/aa4ssp).

###  Health Score

21

—

LowBetter than 18% of packages

Maintenance51

Moderate activity, may be stable

Popularity10

Limited adoption so far

Community9

Small or concentrated contributor base

Maturity12

Early-stage or recently created project

 Bus Factor1

Top contributor holds 77.8% of commits — single point of failure

How is this calculated?**Maintenance (25%)** — Last commit recency, latest release date, and issue-to-star ratio. Uses a 2-year decay window.

**Popularity (30%)** — Total and monthly downloads, GitHub stars, and forks. Logarithmic scaling prevents top-heavy scores.

**Community (15%)** — Contributors, dependents, forks, watchers, and maintainers. Measures real ecosystem engagement.

**Maturity (30%)** — Project age, version count, PHP version support, and release stability.

### Community

Maintainers

![](https://www.gravatar.com/avatar/1ad1219ce8d5edfe285bbe8b2f13f3075f4b87311f42e5e227b31b1159418ea1?d=identicon)[uhi67](/maintainers/uhi67)

---

Top Contributors

[![szabogyula](https://avatars.githubusercontent.com/u/3406217?v=4)](https://github.com/szabogyula "szabogyula (63 commits)")[![wknopki](https://avatars.githubusercontent.com/u/64404037?v=4)](https://github.com/wknopki "wknopki (13 commits)")[![bajnokk](https://avatars.githubusercontent.com/u/9942990?v=4)](https://github.com/bajnokk "bajnokk (5 commits)")

### Embed Badge

![Health badge](/badges/uhi67-simplesamlphp-module-aa/health.svg)

```
[![Health](https://phpackages.com/badges/uhi67-simplesamlphp-module-aa/health.svg)](https://phpackages.com/packages/uhi67-simplesamlphp-module-aa)
```

###  Alternatives

[bezhansalleh/filament-shield

Filament support for `spatie/laravel-permission`.

2.8k2.9M88](/packages/bezhansalleh-filament-shield)[gesdinet/jwt-refresh-token-bundle

Implements a refresh token system over Json Web Tokens in Symfony

70516.4M35](/packages/gesdinet-jwt-refresh-token-bundle)[illuminate/auth

The Illuminate Auth package.

9327.3M1.0k](/packages/illuminate-auth)[beatswitch/lock

A flexible, driver based Acl package for PHP 5.4+

870304.7k2](/packages/beatswitch-lock)[amocrm/amocrm-api-library

amoCRM API Client

182728.5k6](/packages/amocrm-amocrm-api-library)[vonage/jwt

A standalone package for creating JWTs for Vonage APIs

424.1M4](/packages/vonage-jwt)

PHPackages © 2026

[Directory](/)[Categories](/categories)[Trending](/trending)[Changelog](/changelog)[Analyze](/analyze)