Merge pull request #849 from patriot1burke/master

jetty 8
Merge pull request #850 from patriot1burke/master

update readme
Upgrade to picketlink 2.7.0.CR2 and minor LDAP improvements
KEYCLOAK-827 add entryDN as one of attributes, which can be mapped to username
Fix failing tests
Merge pull request #851 from mposolda/pl-upgrade

PL upgrade to 2.7.0.CR2 and ldap improvements
Add SAML NameID Formats and include certificate in signature

The NameID Format in the AuthnRequest NameIDPolicy is now respected,
and support has been added for the following NameID Formats:

  - urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified
  - urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress
  - urn:oasis:names:tc:SAML:2.0:nameid-format:transient

The persistent NameID format was previously used in all responses
and mapped to the principal's username. Now, unspecified is mapped
to the principal's username and used by default if no NameIDPolicy
is specified by the SP.

The persistent format requires generating a pseudo-random identifier
that must be generated by the IdP on first login and stored in the
user's profile. Persistent NameID Format is not yet implemented.

The certificate is now added to the signature to enable support for
integration with Service Providers where only the IdP's certificate
fingerprint is configured (e.g. Zendesk).
Merge pull request #852 from eivim/master

Add SAML NameID Formats and include certificate in signature
fix incorrect JWS implementation
Merge remote-tracking branch 'upstream/master'
temp fix for contributor SAML PR