gossoSAML + OIDC for Go

Stateless authentication adapters. You own the session.

Stateless by design

No session storage, no database, no cookies issued by the library. You decide what to do with the authenticated Subject.

SAML and OIDC produce the same Subject[T] type. Reuse your session-creation code across both IdPs.

Functional options, sensible Azure-AD defaults, PKCE by default, an open-redirect guard. No surprise behaviour.

One docker compose up and you're logging in as alice@example.com through a real Keycloak.