Issues

• security: pingntlm forces InsecureSkipVerify and re-sends Basic auth on every redirect

  aspratt/saml2aws#32 · Filter by author aspratt opened on Oct 20, 2026

• verify: live ADFS NTLM sign-in after go-ntlmssp v0.1.1 (NTLMv2 domain, Kerberos-only)

  nature:securityprovider:adfsseverity:S3status:blockedtype:uplift
  aspratt/saml2aws#27 · Filter by author aspratt opened on Oct 20, 2026

• uplift: x/net, x/crypto, jose2go with known vulnerabilities (govulncheck)

  nature:securityprovider:coreseverity:S2status:intaketype:uplift
  aspratt/saml2aws#22 · Filter by author aspratt opened on Oct 20, 2026
  2

• gap: Okta to IAM Identity Center app (amazon_aws_sso)

  nature:gapprovider:oktaseverity:S3status:blockedtype:wishlist
  aspratt/saml2aws#19 · Filter by author aspratt opened on Oct 20, 2026
  1

• gap: Duo Universal Prompt support

  nature:gapseverity:S2status:blockedtype:wishlist
  aspratt/saml2aws#18 · Filter by author aspratt opened on Oct 20, 2026

• bug: GoogleApps passkey challenge and stale #1259 cluster

  nature:functionalprovider:googleappsseverity:S3status:blockedtype:bug
  aspratt/saml2aws#17 · Filter by author aspratt opened on Oct 20, 2026
  1

• bug: PingOne (modern) sign-in unsupported by pingone provider

  nature:functionalprovider:pingoneseverity:S2status:blockedtype:bug
  aspratt/saml2aws#16 · Filter by author aspratt opened on Oct 20, 2026
  1

• bug: AAD/Entra MFA sign-in fails (registration prompt, missing ProcessAuth params, CMSI)

  nature:functionalprovider:aadseverity:S2status:blockedtype:bug
  aspratt/saml2aws#15 · Filter by author aspratt opened on Oct 20, 2026

• Merge approvals pending

  status:in-review
  aspratt/saml2aws#12 · Filter by author aspratt opened on Oct 20, 2026