The configuration uses the default secret salt - make sure you modify the default 'secretsalt' option in the simpleSAML configuration in production environments. [Read more about SimpleSAMLphp configuration ]

You are running an outdated version of SimpleSAMLphp. Please update to the latest version as soon as possible.