- #586 IdPMetadataParser::parseRemoteXML - Add argument for setting whether to validate peer SSL certificate
- #585 Declare conditional return types
- #577 Allow empty NameID value when no strict or wantNameId is false
- #570 Support X509 cert comments
- #569 Add parameter to exclude validUntil on SP Metadata XML
- #551 Fix compatibility with proxies that extends HTTP_X_FORWARDED_HOST
- LogoutRequest and the LogoutResponse object to separate functions
- Make Saml2\Auth can accept a param $spValidationOnly
- Fix typos on readme.
- #480 Fix typo on SPNameQualifier mismatch error message
- Remove unbound version constraints on xmlseclibs
- Update dependencies
- Fix test payloads
- Remove references to OneLogin.