# opensaml を Homebrew, MacPorts, apt, zypper でインストール opensaml のインストール経路、実行ファイル、メタデータ、AI エージェント向けセキュリティノートを確認します。 ## インストール ```sh sudo av install brew:opensaml ``` 追加のインストールコマンド: ### macOS - Homebrew (100%): ```sh brew install opensaml ``` 証拠: local Homebrew formula metadata - MacPorts (94%): ```sh sudo port install opensaml ``` 証拠: MacPorts ports tree: lang/opensaml/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1 ### Linux - Debian apt (92%): ```sh sudo apt install libsaml-dev ``` 証拠: Debian stable package indexes: libsaml-dev from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz - zypper (92%): ```sh sudo zypper install libsaml-devel ``` 証拠: openSUSE Tumbleweed package metadata: libsaml-devel from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst ## パッケージ情報 - **パッケージキー:** brew:opensaml - **パッケージマネージャ:** Homebrew - **バージョン:** 3.3.1 - **ソース概要:** Library for Security Assertion Markup Language - **ホームページ:** - **生成日時:** 2026-08-03T19:37:03+00:00 ## 実行可能ファイル - samlsign (エイリアス) ## インストール挙動 - Bottle: 利用不可 ## バージョンと鮮度 - ページ生成日: 2026-08-03 - マネージャ版: 3.3.1 ## プロジェクトの歴史と使われ方 OpenSAML is a Shibboleth-family implementation library for the OASIS Security Assertion Markup Language. The Homebrew opensaml formula packages the native C++ line, including the samlsign command-line tool, for software that needs SAML message construction, parsing, signing, and validation primitives. ### プロジェクトの歴史 OpenSAML grew around the Shibboleth identity-federation project, where SAML is the core protocol vocabulary for browser single sign-on and attribute exchange. The OpenSAML 2 documentation describes the project as open-source C++ and Java libraries for developers working with SAML 1.0, 1.1, and 2.0. The project deliberately distinguishes the library from a complete identity provider or service provider. The documentation warns that OpenSAML does not provide a full SAML IdP/SP and is meant for developers who already understand the SAML specifications. For the C++ 3.x line, Shibboleth documents OpenSAML-C as a separate project but supported only as a dependency of the Shibboleth Service Provider. The build documentation places it in the native Shibboleth stack with dependencies such as log4shib, OpenSSL, libcurl, Xerces-C, XML-Security-C, and XMLTooling-C. ### 採用の歴史 OpenSAML's adoption is strongest inside identity middleware rather than end-user CLI workflows. The historical OpenSAML page lists Shibboleth, Globus Toolkit components, grid identity projects, Apache WSS4J, Apache Rampart, eduGAIN, OpenLiberty Wakame, SuisseID SDK/Java, and other projects as users or integrators. Distribution packaging follows that dependency role. openSUSE's Apache:Shibboleth package describes opensaml as a C++ implementation supporting SAML 1.0, 1.1, and 2.0, while Homebrew, Debian, Ubuntu, MacPorts, and zypper package it for native Shibboleth and SAML tooling stacks. ### 使われ方 Developers use OpenSAML-C as a library inside SAML-capable services rather than as an application framework. It supplies C++ classes and XML/security integration for SAML assertions, protocol messages, bindings, signatures, and related metadata operations. Operators encounter the package as part of Shibboleth Service Provider builds and security maintenance. The C++ product version policy explains that native Shibboleth and OpenSAML components use MAJOR.MINOR.PATCH versioning and track compatibility across binary linkage, public APIs, configuration, and protocol behavior. ### パッケージ好きにとっての重要性 opensaml is a dependency-heavy security library package where ABI compatibility matters. Package maintainers care about coordinated versions of XMLTooling-C, XML-Security-C, Xerces-C, OpenSSL, log4shib, and Shibboleth SP, because C++ API changes can force recompilation and soname changes. ### タイムライン - 2016-07-31: security maintenance ceased for the OpenSAML V2 Java release branch. - 2018-07-17: security maintenance ceased for the OpenSAML V2 C++ release branch. - 2021-08-17: Shibboleth's C++ product version policy page documented native/OpenSAML versioning and compatibility rules. - 2021-11-24: the OpenSAML-C page for Shibboleth SP 3 was updated and documented C++ 3.x support as part of Shibboleth SP. - 2025-03-13: the Shibboleth download index lists opensaml-3.3.1 source artifacts. ### Related projects - Related Shibboleth native components include XMLTooling-C, XML-Security-C, log4shib, and the Shibboleth Service Provider. Protocol-adjacent projects include Apache WSS4J, Apache Rampart, Globus Toolkit components, eduGAIN, and other SAML federation software. ### ソース - - - - - - ## セキュリティノート library-like package without higher-risk signals. - **Geiger リスク:** グリーン / 低 - library-like package without higher-risk signals ## 他のパッケージマネージャ記録 - Debian apt - libsaml-dev - 3.3.1-2: normalized package name match | Debian stable package indexes: libsaml-dev from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | Security Assertion Markup Language library (development) | https://wiki.shibboleth.net/confluence/display/OpenSAML/Home - Debian apt - libsaml-doc - 3.3.1-2: normalized package name match | Debian stable package indexes: libsaml-doc from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | Security Assertion Markup Language library (API docs) | https://wiki.shibboleth.net/confluence/display/OpenSAML/Home - Debian apt - libsaml13 - 3.3.1-2: normalized package name match | Debian stable package indexes: libsaml13 from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | Security Assertion Markup Language library (runtime) | https://wiki.shibboleth.net/confluence/display/OpenSAML/Home - Debian apt - opensaml-schemas - 3.3.1-2: normalized package name match | Debian stable package indexes: opensaml-schemas from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | Security Assertion Markup Language library (XML schemas) | https://wiki.shibboleth.net/confluence/display/OpenSAML/Home - Debian apt - opensaml-tools - 3.3.1-2: normalized package name match | Debian stable package indexes: opensaml-tools from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | Security Assertion Markup Language command-line tools | https://wiki.shibboleth.net/confluence/display/OpenSAML/Home - Ubuntu apt - libsaml-dev - 3.2.1-4.1build2: normalized package name match | Ubuntu 24.04 LTS package indexes: libsaml-dev from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | Security Assertion Markup Language library (development) | https://wiki.shibboleth.net/confluence/display/OpenSAML/Home - Ubuntu apt - libsaml-doc - 3.2.1-4.1build2: normalized package name match | Ubuntu 24.04 LTS package indexes: libsaml-doc from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | Security Assertion Markup Language library (API docs) | https://wiki.shibboleth.net/confluence/display/OpenSAML/Home - Ubuntu apt - libsaml12t64 - 3.2.1-4.1build2: normalized package name match | Ubuntu 24.04 LTS package indexes: libsaml12t64 from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | Security Assertion Markup Language library (runtime) | https://wiki.shibboleth.net/confluence/display/OpenSAML/Home - Ubuntu apt - opensaml-schemas - 3.2.1-4.1build2: normalized package name match | Ubuntu 24.04 LTS package indexes: opensaml-schemas from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | Security Assertion Markup Language library (XML schemas) | https://wiki.shibboleth.net/confluence/display/OpenSAML/Home - Ubuntu apt - opensaml-tools - 3.2.1-4.1build2: normalized package name match | Ubuntu 24.04 LTS package indexes: opensaml-tools from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | Security Assertion Markup Language command-line tools | https://wiki.shibboleth.net/confluence/display/OpenSAML/Home - zypper - libsaml-devel - 3.3.1-2.5: normalized package name match | openSUSE Tumbleweed package metadata: libsaml-devel from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst | OpenSAML development Headers | https://wiki.shibboleth.net/confluence/display/OpenSAML/ - zypper - libsaml13 - 3.3.1-2.5: normalized package name match | openSUSE Tumbleweed package metadata: libsaml13 from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst | Security Assertion Markup Language library | https://wiki.shibboleth.net/confluence/display/OpenSAML/ - zypper - opensaml-bin - 3.3.1-2.5: normalized package name match | openSUSE Tumbleweed package metadata: opensaml-bin from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst | Utilities for OpenSAML library | https://wiki.shibboleth.net/confluence/display/OpenSAML/ - zypper - opensaml-schemas - 3.3.1-2.5: normalized package name match | openSUSE Tumbleweed package metadata: opensaml-schemas from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst | OpenSAML schemas and catalog | https://wiki.shibboleth.net/confluence/display/OpenSAML/ - MacPorts - opensaml: normalized package name match | MacPorts ports tree: lang/opensaml/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1 ## Combined YAML source View the package source record on GitHub. [combined/opensaml.yml](https://github.com/mxcl/pkgdb/blob/main/combined/opensaml.yml) ## ソース - pkg.so package database - Geiger risk classifier - curated package history - pkgdb category and tag curation - external package-manager database matches - cross-ecosystem install command graph