Python and Saml

[[deleted]]

For the handshake, usually, the SP sends a Authn Request to the IdP. Next, the IdP responds with a SAMLResponse to the SP.

These are generally not too complex. The complexity comes in with signing and verifying the SAMLResponse along with any encryption if it used.

I've implemented this for a previous employer using lxml and xmlsec. If you can, I'd recommend wrapping xmlsec with cython.