LocateUserInfo searches for user email and fullname in the ACS response.

NewHandler creates new SAML handler.

NewSessionProvider creates a new SessionProvider.

RegisterHandlers adds login and logout handlers.

RoleInSAMLLabelRules returns the role on the SAMLLabelRules with the highest access level that matches the labels.

Encoder serializes tracked request cookies as base64 encoded YAML.

SessionProvider is an implementation of SessionProvider that stores session tokens in the COSI state.

UserInfo describes user identity and fullname.