SAML Auth Changelog

7 released changes name saml-auth, newest release first — 1 in Apache APISIX, 6 in API7 Gateway. Each row links to the change itself.

Apache APISIX

Release	Date	Type	Change
3.17.0	2026-06-11	Feature	Add saml-auth plugin

Release	Date	Type	Change
3.10.1 (opens in API7 Gateway docs)	2026-06-15	Fix	Fixed issue: Debug logging was unintentionally left enabled, and an authentication failure could pass the request through instead of returning an error. Debug mode is now off, and authentication failures return an exp… (opens in API7 Gateway docs)
3.9.14 (opens in API7 Gateway docs)	2026-06-15	Fix	Fixed issue: Reworked plugin loading and error handling — removed the load_resty_saml wrapper, disabled debug output by default, and returns a clean HTTP 500 on authentication errors. (opens in API7 Gateway docs)
3.9.10 (opens in API7 Gateway docs)	2026-04-22	Change	SAML Auth: secret_fallbacks (opens in API7 Gateway docs)
3.9.3 (opens in API7 Gateway docs)	2026-01-26	Feature	Added auth_protocol_binding_method parameter to support configuring SAML protocol binding methods, including HTTP-POST and HTTP-Redirect. The default value is HTTP-Redirect (backward compatible with previous versions)… (opens in API7 Gateway docs)
3.9.3 (opens in API7 Gateway docs)	2026-01-26	Fix	Fixed issue: Missing NameID field in the SAML request when processing logout requests. The absence of the NameID field will cause logout failure when Azure AD is the identity provider. (opens in API7 Gateway docs)
3.9.3 (opens in API7 Gateway docs)	2026-01-26	Fix	Fixed issue: SAML sessions could not be shared across multiple gateway instances. Added the mandatory secret field for configuring the key to encrypt session data. (opens in API7 Gateway docs)