The current 4.x branch of drupal/simplesamlphp_auth requires SimpleSAMLphp 1.19, which only supports PHP versions less than 8. Our platform and Drupal 11 require PHP 8.3, making it impossible to use this module in modern environments.

  1. Install Drupal 11 with PHP 8.3.
  2. Require drupal/simplesamlphp_auth:^4.1.
  3. Composer fails due to SimpleSAMLphp 1.19's PHP requirement.

Please update the module to support newer versions of SimpleSAMLphp (>=2.x) that are compatible with PHP 8+. This will allow continued use of the module with Drupal 11 and current PHP versions.

Expected result:
Module should support SimpleSAMLphp versions compatible with PHP 8+.
Actual result: Composer dependency conflict prevents installation.

User interface changes

API changes

Data model changes

Issue fork simplesamlphp_auth-3573744

Command icon Show commands

Start within a Git clone of the project using the version control instructions.

Or, if you do not have SSH keys set up on git.drupalcode.org:

About issue forks

Comments

maheshv created an issue. See original summary.

maheshv’s picture

maheshv commented
Issue summary: View changes
velmir_taky’s picture

velmir_taky commented
Status: Active » Postponed

This is not a PHP version issue — SimpleSAMLphp 1.19.9 actually supports php >=7.1|^8. The real blocker is the Symfony version chain:

- SimpleSAMLphp 2.3.5–2.4.4 require symfony/* ^6.4 — works with Drupal 10 only
- SimpleSAMLphp 2.5.0 (currently RC5) requires symfony/* ~7.4 — needs Drupal 11.3+
- Drupal 11.0–11.2 uses Symfony 7.3 which matches neither

The module maintainers are aware — the drupal/core ^10 || ^11.3 constraint reflects this. Once SimpleSAMLphp 2.5.0 goes stable and Drupal 11.3 is out, the module should work on Drupal 11.

cozydrupalnerd made their first commit to this issue’s fork.

cozydrupalnerd’s picture

cozydrupalnerd commented

With Drupal 11.3.5 out, this module is still not compatible. When I am trying to install it via composer, I get the following error from Composer:

Problem 1
    - Root composer.json requires drupal/simplesamlphp_auth ^4.1 -> satisfiable by drupal/simplesamlphp_auth[4.1.0, 4.x-dev].
    - drupal/simplesamlphp_auth[4.1.0, ..., 4.x-dev] require simplesamlphp/simplesamlphp ^1.19 || ^2.3.5 -> satisfiable by simplesamlphp/simplesamlphp[v1.19.0-rc1, ..., 1.19.9, v2.3.5, ..., 2.6.x-dev (alias of dev-simplesamlphp-2.6)].
    - simplesamlphp/simplesamlphp v1.19.0-rc1 requires symfony/console ^4.4 -> found symfony/console[v4.4.0-BETA1, ..., 4.4.x-dev] but these were not loaded, likely because it conflicts with another require.
    - simplesamlphp/simplesamlphp[v1.19.0, ..., v1.19.1] require php >=7.1 <8.0 -> your php version (8.3; overridden via config.platform, actual: 8.3.30) does not satisfy that requirement.
    - simplesamlphp/simplesamlphp[v1.19.2, ..., v1.19.3] require simplesamlphp/saml2 4.2.3 -> found simplesamlphp/saml2[v4.2.3] but these were not loaded, because they are affected by security advisories ("PKSA-rxdv-j1j4-96fj", "PKSA-1983-c8jn-trgm"). Go to https://packagist.org/security-advisories/ to find advisory details. To ignore the advisories, add them to the audit "ignore" config. To turn the feature off entirely, you can set "block-insecure" to false in your "audit" config.
    - simplesamlphp/simplesamlphp[dev-simplesamlphp-1.19, v1.19.4, ..., 1.19.9] require symfony/console ^4.4 || ^5.0 -> found symfony/console[v4.4.0-BETA1, ..., 4.4.x-dev, v5.0.0-BETA1, ..., 5.4.x-dev] but these were not loaded, likely because it conflicts with another require.
    - simplesamlphp/simplesamlphp[v2.3.5, ..., v2.4.5] require symfony/console ^6.4 -> found symfony/console[v6.4.0-BETA1, ..., 6.4.x-dev] but these were not loaded, likely because it conflicts with another require.
    - simplesamlphp/simplesamlphp v2.5.0-rc3 requires symfony/console ~7.3.0 -> found symfony/console[v7.3.0-BETA1, ..., 7.3.x-dev] but these were not loaded, likely because it conflicts with another require.
    - simplesamlphp/simplesamlphp v2.5.0-rc5 requires simplesamlphp/assert ~1.9 -> satisfiable by simplesamlphp/assert[v1.9.0, v1.9.1].
    - simplesamlphp/simplesamlphp v2.5.0-rc5 requires simplesamlphp/xml-security ~2.0 -> satisfiable by simplesamlphp/xml-security[v2.3.1, 2.4.x-dev].
    - simplesamlphp/simplesamlphp[dev-master, dev-simplesamlphp-2.5, dev-simplesamlphp-2.6, v2.5.0-rc6, ..., 2.6.x-dev] require symfony/http-client ~7.4 -> found symfony/http-client[v7.4.0-BETA1, ..., 7.4.x-dev] but it conflicts with your root composer.json require (^6.4).
    - simplesamlphp/xml-security[v2.3.1, ..., 2.4.x-dev] require simplesamlphp/assert ~2.0 -> satisfiable by simplesamlphp/assert[v2.0.0, v2.0.1, v2.0.2, 2.1.x-dev].
    - You can only install one version of a package, so only one of these can be installed: simplesamlphp/assert[v0.0.13, ..., v0.8.0, v1.0.0, ..., v1.9.1, v2.0.0, v2.0.1, v2.0.2, 2.1.x-dev].
    - simplesamlphp/simplesamlphp 2.5.x-dev is an alias of simplesamlphp/simplesamlphp dev-master and thus requires it to be installed too.
    - simplesamlphp/simplesamlphp 2.6.x-dev is an alias of simplesamlphp/simplesamlphp dev-simplesamlphp-2.6 and thus requires it to be installed too.