📢 This repository is being archived (read-only) on 2 November 2026

[javierquevedo]

node-saml is being archived

We are letting the community know that node-saml will be archived on 2 November 2026 and will become read-only.

This library implements the server (IdP) side of the SAML protocol in Node.js. It has not received active feature development for some time, and we have decided to formally archive it rather than continue presenting it as actively maintained.

What this means

• The repository will be archived (read-only) on 2 November 2026. After that date, Issues and Pull Requests will be disabled.
• We are not looking to transfer ownership of this project to a new maintainer.
• All existing releases remain available, and the saml npm package will remain installable, we are not unpublishing anything.
• The saml npm package will be marked as deprecated on 4 January 2027 (after a grace period to avoid breaking existing tooling). It will remain installable.

What you should do

• We encourage all users and dependents to find a replacement that fits their needs.
• Please note there is no direct, drop-in Auth0-maintained replacement. Evaluate community alternatives carefully against your security and maintenance requirements.

npm package

To avoid breaking existing tooling and CI pipelines, the saml npm package will not be marked as deprecated immediately. We plan to mark it as deprecated on 4 January 2027, after a grace period. The package will remain installable.

Timeline

Date	What happens
12 August 2026	This announcement; README updated.
2 November 2026	Repository archived; Issues and PRs disabled.
4 January 2027	saml npm package marked as deprecated.

Thank you to everyone who has used and contributed to this project over the years.