diff --git a/external_plugin_deps.bzl b/external_plugin_deps.bzl
index 7909bbe..9236fc4 100644
--- a/external_plugin_deps.bzl
+++ b/external_plugin_deps.bzl
@@ -2,7 +2,7 @@
 
 SHIBBOLETH = "https://build.shibboleth.net/nexus/content/repositories/releases/"
 
-OPENSAML_VERSION = "3.4.0"
+OPENSAML_VERSION = "3.4.2"
 
 PAC4J_VERSION = "3.5.0"
 
@@ -16,98 +16,98 @@
     maven_jar(
         name = "opensaml-core",
         artifact = "org.opensaml:opensaml-core:" + OPENSAML_VERSION,
-        sha1 = "a1a4607c800bebd921615ef6fdb7bcd1340452c3",
+        sha1 = "d7bfd76283b4b12074f9a6b866ce048d793390a6",
         repository = SHIBBOLETH,
     )
 
     maven_jar(
         name = "opensaml-saml-api",
         artifact = "org.opensaml:opensaml-saml-api:" + OPENSAML_VERSION,
-        sha1 = "538e1e54e5e8160f2d284b08f1b8a7b93053e0da",
+        sha1 = "e8e1034cfdee26267d4e5aacc1ab7682cb03ddb8",
         repository = SHIBBOLETH,
     )
 
     maven_jar(
         name = "opensaml-storage-api",
         artifact = "org.opensaml:opensaml-storage-api:" + OPENSAML_VERSION,
-        sha1 = "37beed2a755b031a57322a1c910eca8278371f4f",
+        sha1 = "f562d624a35e5aeb2ba21222f54a5bbcc02a74ce",
         repository = SHIBBOLETH,
     )
 
     maven_jar(
         name = "opensaml-saml-impl",
         artifact = "org.opensaml:opensaml-saml-impl:" + OPENSAML_VERSION,
-        sha1 = "06336645ec0b0fbd98a7a5e719b4c4c284a4d79f",
+        sha1 = "76f1e54ded6ba903a30af54f37494f249cf38f17",
         repository = SHIBBOLETH,
     )
 
     maven_jar(
         name = "opensaml-soap-impl",
         artifact = "org.opensaml:opensaml-soap-impl:" + OPENSAML_VERSION,
-        sha1 = "23f0b2732c87a34c0179584e71a52839eaf9c186",
+        sha1 = "ecfcf4431dcff6dc57744e0bfca151efc87b96fc",
         repository = SHIBBOLETH,
     )
 
     maven_jar(
         name = "opensaml-soap-api",
         artifact = "org.opensaml:opensaml-soap-api:" + OPENSAML_VERSION,
-        sha1 = "830b14c47a7e3e21ed377be4c82e6f19ff5c6749",
+        sha1 = "22566f94af9687b5935cce64dbec1ccc8c80eb6f",
         repository = SHIBBOLETH,
     )
 
     maven_jar(
         name = "opensaml-xmlsec-api",
         artifact = "org.opensaml:opensaml-xmlsec-api:" + OPENSAML_VERSION,
-        sha1 = "6af095f2882bd73067860699c9b2d11f5e5d9fa2",
+        sha1 = "4f96eebc87f81341ea121afaceae83a5e3f13dd4",
         repository = SHIBBOLETH,
     )
 
     maven_jar(
         name = "opensaml-xmlsec-impl",
         artifact = "org.opensaml:opensaml-xmlsec-impl:" + OPENSAML_VERSION,
-        sha1 = "94ea339d9e63436cdf4a2247b5ef85867e66d302",
+        sha1 = "0e4d4df9809423b2ec386411480afa7c48320919",
         repository = SHIBBOLETH,
     )
 
     maven_jar(
         name = "opensaml-security-api",
         artifact = "org.opensaml:opensaml-security-api:" + OPENSAML_VERSION,
-        sha1 = "a39782c2c23abf09f9e0e6c51a33f7e658654342",
+        sha1 = "bd4502769741b7d2c513f0051bb46da8d4e6f5c0",
         repository = SHIBBOLETH,
     )
 
     maven_jar(
         name = "opensaml-security-impl",
         artifact = "org.opensaml:opensaml-security-impl:" + OPENSAML_VERSION,
-        sha1 = "ee6158d53b576d6a63d3c7a0cf063c8518e75126",
+        sha1 = "f4e6bf165291f46c5f7ba267b0c4854bbe058e41",
         repository = SHIBBOLETH,
     )
 
     maven_jar(
         name = "opensaml-profile-api",
         artifact = "org.opensaml:opensaml-profile-api:" + OPENSAML_VERSION,
-        sha1 = "e881c110d608f9e515681315d1509cd4d0737fa7",
+        sha1 = "b6a56330992f7ec400411f2efa19fd5115675b07",
         repository = SHIBBOLETH,
     )
 
     maven_jar(
         name = "opensaml-profile-impl",
         artifact = "org.opensaml:opensaml-profile-impl:" + OPENSAML_VERSION,
-        sha1 = "312eb6bf5dd7fb34c4305299e83b24ba10814f86",
+        sha1 = "61b086e39649664cdd93b5863cafb0e1042a6bea",
         repository = SHIBBOLETH,
     )
 
     maven_jar(
         name = "opensaml-messaging-api",
         artifact = "org.opensaml:opensaml-messaging-api:" + OPENSAML_VERSION,
-        sha1 = "e0377b92343e8aa8a293361537d2d89d88e2b5da",
+        sha1 = "a2b4f5e7862979d1e769ba262ded93b6d87cc029",
         repository = SHIBBOLETH,
     )
 
     maven_jar(
         name = "opensaml-messaging-impl",
         artifact = "org.opensaml:opensaml-messaging-impl:" + OPENSAML_VERSION,
-        sha1 = "4ef49243790872163c13aee1607ccb2681b39c53",
+        sha1 = "cd622191c79020c89dd51066790facae8a57f26d",
         repository = SHIBBOLETH,
     )