Automic VaultAutomic Vault

brew

opensaml を Homebrew, MacPorts, apt, zypper でインストール

opensaml のインストール経路、実行ファイル、メタデータ、AI エージェント向けセキュリティノートを確認します。

インストールコマンドセキュリティノート

インストール

追加のインストールコマンド

macOS

Homebrew確認済み · 100%
brew install opensaml

local Homebrew formula metadata

MacPorts確認済み · 94%
sudo port install opensaml

MacPorts ports tree · lang/opensaml/Portfile · ソース: api.github.com

Linux

Debian apt確認済み · 92%
sudo apt install libsaml-dev

Debian stable package indexes · libsaml-dev · ソース: deb.debian.org

openSUSE zypper確認済み · 92%
sudo zypper install libsaml-devel

openSUSE Tumbleweed package metadata · libsaml-devel · ソース: download.opensuse.org

概要

パッケージ概要

Library for Security Assertion Markup Language

コマンドとエイリアス

  • samlsign

履歴

プロジェクトの歴史と使われ方

OpenSAML is a Shibboleth-family implementation library for the OASIS Security Assertion Markup Language. The Homebrew opensaml formula packages the native C++ line, including the samlsign command-line tool, for software that needs SAML message construction, parsing, signing, and validation primitives.

プロジェクトの歴史

OpenSAML grew around the Shibboleth identity-federation project, where SAML is the core protocol vocabulary for browser single sign-on and attribute exchange. The OpenSAML 2 documentation describes the project as open-source C++ and Java libraries for developers working with SAML 1.0, 1.1, and 2.0.

The project deliberately distinguishes the library from a complete identity provider or service provider. The documentation warns that OpenSAML does not provide a full SAML IdP/SP and is meant for developers who already understand the SAML specifications.

For the C++ 3.x line, Shibboleth documents OpenSAML-C as a separate project but supported only as a dependency of the Shibboleth Service Provider. The build documentation places it in the native Shibboleth stack with dependencies such as log4shib, OpenSSL, libcurl, Xerces-C, XML-Security-C, and XMLTooling-C.

採用の歴史

OpenSAML's adoption is strongest inside identity middleware rather than end-user CLI workflows. The historical OpenSAML page lists Shibboleth, Globus Toolkit components, grid identity projects, Apache WSS4J, Apache Rampart, eduGAIN, OpenLiberty Wakame, SuisseID SDK/Java, and other projects as users or integrators.

Distribution packaging follows that dependency role. openSUSE's Apache:Shibboleth package describes opensaml as a C++ implementation supporting SAML 1.0, 1.1, and 2.0, while Homebrew, Debian, Ubuntu, MacPorts, and zypper package it for native Shibboleth and SAML tooling stacks.

使われ方

Developers use OpenSAML-C as a library inside SAML-capable services rather than as an application framework. It supplies C++ classes and XML/security integration for SAML assertions, protocol messages, bindings, signatures, and related metadata operations.

Operators encounter the package as part of Shibboleth Service Provider builds and security maintenance. The C++ product version policy explains that native Shibboleth and OpenSAML components use MAJOR.MINOR.PATCH versioning and track compatibility across binary linkage, public APIs, configuration, and protocol behavior.

パッケージ好きにとっての重要性

opensaml is a dependency-heavy security library package where ABI compatibility matters. Package maintainers care about coordinated versions of XMLTooling-C, XML-Security-C, Xerces-C, OpenSSL, log4shib, and Shibboleth SP, because C++ API changes can force recompilation and soname changes.

タイムライン

  • 2016-07-31: security maintenance ceased for the OpenSAML V2 Java release branch.
  • 2018-07-17: security maintenance ceased for the OpenSAML V2 C++ release branch.
  • 2021-08-17: Shibboleth's C++ product version policy page documented native/OpenSAML versioning and compatibility rules.
  • 2021-11-24: the OpenSAML-C page for Shibboleth SP 3 was updated and documented C++ 3.x support as part of Shibboleth SP.
  • 2025-03-13: the Shibboleth download index lists opensaml-3.3.1 source artifacts.

Related projects

  • Related Shibboleth native components include XMLTooling-C, XML-Security-C, log4shib, and the Shibboleth Service Provider. Protocol-adjacent projects include Apache WSS4J, Apache Rampart, Globus Toolkit components, eduGAIN, and other SAML federation software.

セキュリティ状態

リスクレベル: グリーン

library-like package without higher-risk signals.

リスク分類器

リスク グリーン · 信頼度 低 · appliance

理由

  • library-like package without higher-risk signals

信号

  • metadata:library-like

インストール挙動

  • formula メタデータに Homebrew post-install フックは記録されていません。
  • Homebrew bottle メタデータは 8 個のプラットフォームターゲットで利用できます。
  • 5 件の実行時依存関係とともにインストールされます。
  • ビルドメタデータには 1 件のビルド依存関係があります。

推奨レビュー

エージェントに無人実行させる前に、このツールが平文の認証情報を読むか、リモート状態を書き込むか、成果物を公開するか、プラグインを起動するかを確認してください。

実行可能ファイル

インストールされる実行可能ファイル

コマンド種類公開範囲メモ
samlsigncliグローバル実行可能ファイル

鮮度

バージョンと鮮度

これらの信号は、ページ生成時期、パッケージマネージャの活動、上流リリース比較を分けて示します。バージョン遅れは、証拠 URL と比較可能なバージョンがある場合だけ警告されます。

ページ生成日2026-07-10
マネージャ版3.3.1
マネージャ更新日
ローカルデータOK
上流not checked
検出された最新未検出

https://wiki.shibboleth.net/confluence/display/OpenSAML/Home

インストールメタデータ

パッケージメタデータ

パッケージキーbrew:opensaml
バージョン3.3.1
パッケージマネージャHomebrew
パッケージマネージャページhttps://formulae.brew.sh/formula/opensaml
ホームページhttps://wiki.shibboleth.net/confluence/display/OpenSAML/Home
リポジトリhttps://codeberg.org/Shibboleth/cpp-opensaml
上流ドキュメントhttps://shibboleth.atlassian.net/wiki/spaces/OSAML/overview
ライセンスApache-2.0
ソースアーカイブhttps://shibboleth.net/downloads/c++-opensaml/3.3.1/opensaml-3.3.1.tar.bz2
依存関係log4shib, openssl@3, xerces-c, xml-security-c, xml-tooling-c
ビルド依存関係pkgconf
Bottle利用可能 (対象 arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, arm64_ventura, sonoma, ventura, x86_64_linux)
Homebrew post-install未定義
サービス宣言なし

レジストリ情報

ソースデータベース詳細

Source DatabaseHomebrew formula API
Taphomebrew/core
Full Nameopensaml
Version Scheme0
Revision1
Bottle Stable Root URLhttps://ghcr.io/v2/homebrew/core
Deprecatedno
Disabledno
Keg Onlyno
URL Keys
  • stable

ソースデータベース一致

他のパッケージマネージャ記録

一致は外部パッケージマネージャインデックスから取得され、ローカルの Automic Vault パッケージリンクとは分けて表示されます。

Debian apt95%

libsaml-dev 3.3.1-2

Security Assertion Markup Language library (development)

https://wiki.shibboleth.net/confluence/display/OpenSAML/Home

sudo apt install libsaml-dev
  • Section: libdevel
  • Architecture: amd64
  • Source Package: opensaml
  • 3 依存関係
  • 1 任意依存関係
  • normalized package name match
  • 一致条件: Opensaml
Debian stable package indexes · deb.debian.org · Debian stable package indexes: libsaml-dev from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Debian apt95%

libsaml-doc 3.3.1-2

Security Assertion Markup Language library (API docs)

https://wiki.shibboleth.net/confluence/display/OpenSAML/Home

sudo apt install libsaml-doc
  • Section: doc
  • Architecture: all
  • Source Package: opensaml
  • normalized package name match
  • 一致条件: Opensaml
Debian stable package indexes · deb.debian.org · Debian stable package indexes: libsaml-doc from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Debian apt95%

libsaml13 3.3.1-2

Security Assertion Markup Language library (runtime)

https://wiki.shibboleth.net/confluence/display/OpenSAML/Home

sudo apt install libsaml13
  • Section: libs
  • Architecture: amd64
  • Source Package: opensaml
  • 7 依存関係
  • normalized package name match
  • 一致条件: Opensaml
Debian stable package indexes · deb.debian.org · Debian stable package indexes: libsaml13 from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Debian apt95%

opensaml-schemas 3.3.1-2

Security Assertion Markup Language library (XML schemas)

https://wiki.shibboleth.net/confluence/display/OpenSAML/Home

sudo apt install opensaml-schemas
  • Section: text
  • Architecture: all
  • Source Package: opensaml
  • normalized package name match
  • 一致条件: Opensaml
Debian stable package indexes · deb.debian.org · Debian stable package indexes: opensaml-schemas from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Debian apt95%

opensaml-tools 3.3.1-2

Security Assertion Markup Language command-line tools

https://wiki.shibboleth.net/confluence/display/OpenSAML/Home

sudo apt install opensaml-tools
  • Section: text
  • Architecture: amd64
  • Source Package: opensaml
  • 7 依存関係
  • normalized package name match
  • 一致条件: Opensaml
Debian stable package indexes · deb.debian.org · Debian stable package indexes: opensaml-tools from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Ubuntu apt95%

libsaml-dev 3.2.1-4.1build2

Security Assertion Markup Language library (development)

https://wiki.shibboleth.net/confluence/display/OpenSAML/Home

sudo apt install libsaml-dev
  • Section: universe/libdevel
  • Architecture: amd64
  • Source Package: opensaml
  • 3 依存関係
  • 1 任意依存関係
  • normalized package name match
  • 一致条件: Opensaml
Ubuntu 24.04 LTS package indexes · archive.ubuntu.com · Ubuntu 24.04 LTS package indexes: libsaml-dev from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz
Ubuntu apt95%

libsaml-doc 3.2.1-4.1build2

Security Assertion Markup Language library (API docs)

https://wiki.shibboleth.net/confluence/display/OpenSAML/Home

sudo apt install libsaml-doc
  • Section: universe/doc
  • Architecture: all
  • Source Package: opensaml
  • normalized package name match
  • 一致条件: Opensaml
Ubuntu 24.04 LTS package indexes · archive.ubuntu.com · Ubuntu 24.04 LTS package indexes: libsaml-doc from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz
Ubuntu apt95%

libsaml12t64 3.2.1-4.1build2

Security Assertion Markup Language library (runtime)

https://wiki.shibboleth.net/confluence/display/OpenSAML/Home

sudo apt install libsaml12t64
  • Section: universe/libs
  • Architecture: amd64
  • Source Package: opensaml
  • 7 依存関係
  • 1 提供
  • normalized package name match
  • 一致条件: Opensaml
Ubuntu 24.04 LTS package indexes · archive.ubuntu.com · Ubuntu 24.04 LTS package indexes: libsaml12t64 from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz
Ubuntu apt95%

opensaml-schemas 3.2.1-4.1build2

Security Assertion Markup Language library (XML schemas)

https://wiki.shibboleth.net/confluence/display/OpenSAML/Home

sudo apt install opensaml-schemas
  • Section: universe/text
  • Architecture: all
  • Source Package: opensaml
  • normalized package name match
  • 一致条件: Opensaml
Ubuntu 24.04 LTS package indexes · archive.ubuntu.com · Ubuntu 24.04 LTS package indexes: opensaml-schemas from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz
Ubuntu apt95%

opensaml-tools 3.2.1-4.1build2

Security Assertion Markup Language command-line tools

https://wiki.shibboleth.net/confluence/display/OpenSAML/Home

sudo apt install opensaml-tools
  • Section: universe/text
  • Architecture: amd64
  • Source Package: opensaml
  • 7 依存関係
  • normalized package name match
  • 一致条件: Opensaml
Ubuntu 24.04 LTS package indexes · archive.ubuntu.com · Ubuntu 24.04 LTS package indexes: opensaml-tools from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz
zypper95%

libsaml-devel 3.3.1-2.3

OpenSAML development Headers

https://wiki.shibboleth.net/confluence/display/OpenSAML/

sudo zypper install libsaml-devel
  • License: Apache-2.0
  • Category: Development/Libraries/C and C++
  • Architecture: x86_64
  • Source Package: opensaml
  • 7 依存関係
  • 3 提供
  • normalized package name match
  • 一致条件: Opensaml
openSUSE Tumbleweed package metadata · download.opensuse.org · openSUSE Tumbleweed package metadata: libsaml-devel from https://download.opensuse.org/tumbleweed/repo/oss/repodata/be8d3611d25469107f32075a1697e69ec57a2b850b42348a658cc671ad5ec2b50760d02c3e59524d50da9a11d5be799bdaffba2e166e8ca8858512e3c0bd665d-primary.xml.zst
zypper95%

libsaml13 3.3.1-2.3

Security Assertion Markup Language library

https://wiki.shibboleth.net/confluence/display/OpenSAML/

sudo zypper install libsaml13
  • License: Apache-2.0
  • Category: System/Libraries
  • Architecture: x86_64
  • Source Package: opensaml
  • 8 依存関係
  • 3 提供
  • normalized package name match
  • 一致条件: Opensaml
openSUSE Tumbleweed package metadata · download.opensuse.org · openSUSE Tumbleweed package metadata: libsaml13 from https://download.opensuse.org/tumbleweed/repo/oss/repodata/be8d3611d25469107f32075a1697e69ec57a2b850b42348a658cc671ad5ec2b50760d02c3e59524d50da9a11d5be799bdaffba2e166e8ca8858512e3c0bd665d-primary.xml.zst
zypper95%

opensaml-bin 3.3.1-2.3

Utilities for OpenSAML library

https://wiki.shibboleth.net/confluence/display/OpenSAML/

sudo zypper install opensaml-bin
  • License: Apache-2.0
  • Category: Development/Libraries/C and C++
  • Architecture: x86_64
  • Source Package: opensaml
  • 7 依存関係
  • 1 提供
  • normalized package name match
  • 一致条件: Opensaml
openSUSE Tumbleweed package metadata · download.opensuse.org · openSUSE Tumbleweed package metadata: opensaml-bin from https://download.opensuse.org/tumbleweed/repo/oss/repodata/be8d3611d25469107f32075a1697e69ec57a2b850b42348a658cc671ad5ec2b50760d02c3e59524d50da9a11d5be799bdaffba2e166e8ca8858512e3c0bd665d-primary.xml.zst
zypper95%

opensaml-schemas 3.3.1-2.3

OpenSAML schemas and catalog

https://wiki.shibboleth.net/confluence/display/OpenSAML/

sudo zypper install opensaml-schemas
  • License: Apache-2.0
  • Category: Development/Libraries/C and C++
  • Architecture: x86_64
  • Source Package: opensaml
  • 1 提供
  • normalized package name match
  • 一致条件: Opensaml
openSUSE Tumbleweed package metadata · download.opensuse.org · openSUSE Tumbleweed package metadata: opensaml-schemas from https://download.opensuse.org/tumbleweed/repo/oss/repodata/be8d3611d25469107f32075a1697e69ec57a2b850b42348a658cc671ad5ec2b50760d02c3e59524d50da9a11d5be799bdaffba2e166e8ca8858512e3c0bd665d-primary.xml.zst
MacPorts95%

opensaml

sudo port install opensaml
  • normalized package name match
  • 一致条件: Opensaml
MacPorts ports tree · api.github.com · MacPorts ports tree: lang/opensaml/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1

パッケージグラフ

リンクは、ローカルのパッケージ関係グラフ、補足データ、依存関係、エコシステム一致、パッケージハブ所属から来ています。

関連ツール

同じワークフロー

  • cyrus-saslShares av.db curated category or tags: authentication, cli, library, security.
  • dexidpShares av.db curated category or tags: authentication, cli, identity, security.
  • okta-aws-cliShares av.db curated category or tags: cli, identity, security.
  • spiffe-helperShares av.db curated category or tags: cli, identity, security.
  • authoscopeShares av.db curated category or tags: authentication, cli, security.
  • botanShares av.db curated category or tags: cli, library, security.

エージェント安全ガイド

ソース経路

リポジトリデータから生成

このページは scripts/generate-pkg-sqlite.py が生成した非公開のパッケージ SQLite アーティファクトから av-web によって提供されます。

使用ソース

  • Geiger risk classifier
  • Nucleus package database
  • av.db category and tag curation
  • cross-ecosystem install command graph
  • curated package history
  • external package-manager database matches
  • package relationship graph
  • package version freshness
  • package-page enrichment