CreateAuthorizationRequest creates a url suitable for use to satisfy the SAML redirect binding.

DecodeAuthResponse extracts SAML assertions from the IDP response (base64 encoded).

NewSessionStore creates a SessionStore.

NewValidator is used to validate the response to an auth request.

RelayState sets optional relay state.

These are response status codes described in the core SAML spec section 3.2.2.1 See http://docs.oasis-open.org/security/saml/v2.0/saml-core-2.0-os.pdf.

AuthnRequest contains information needed to request authorization from an IDP See http://docs.oasis-open.org/security/saml/v2.0/saml-core-2.0-os.pdf Section 3.4.1.

Response is submitted to the service provider (Fleet) from the IDP via a callback.

Session stores state for the lifetime of a single sign on session.

SessionStore persists state of a sso session across process boundries and method calls by associating the state of the sign on session with a unique token created by the user agent (browser SPA).