Publications  /  Research Paper

Zero-Dependency SAML 2.0 Enterprise Authentication for Post-Quantum Security Platforms: XML-Based Federated Identity Without External Cryptographic Libraries

Gunjan Jain
Published April 26, 2026 DOI: 10.5281/zenodo.19783784 Publisher: Zenodo
SAML 2.0 SSO Zero-Dependency

Abstract

Enterprise adoption of quantum-safe security platforms requires integration with existing identity providers via SAML 2.0, yet standard SAML libraries introduce heavy dependency chains (xml-crypto, xml2js, passport-saml) that conflict with the zero-dependency security model essential for cryptographic tooling. We present a zero-dependency SAML 2.0 implementation for QCrypton that provides AuthnRequest generation, SAML Response parsing with attribute extraction, and XML digital signature validation (RSA-SHA256 and RSA-SHA1) using only Node.js built-in crypto and regex-based XML parsing. The implementation generates SAML AuthnRequests with configurable SP entity ID, assertion consumer service URL, and IdP SSO destination; parses SAML Responses to extract NameID (email), SessionIndex, and standard SAML attributes (givenname, surname); and validates RSA-based XML signatures by extracting SignatureValue and SignedInfo elements. We evaluate the implementation against Okta, Azure AD, OneLogin, and ADFS IdP configurations, demonstrating successful authentication flows with zero external dependencies and under 2ms total processing time per SAML response.

Cite this paper

Jain, G. (2026). Zero-Dependency SAML 2.0 Enterprise Authentication for Post-Quantum Security Platforms: XML-Based Federated Identity Without External Cryptographic Libraries. Zenodo. https://doi.org/10.5281/zenodo.19783784