diff --git a/composer.json b/composer.json
index 4c7640e..a51bb29 100644
--- a/composer.json
+++ b/composer.json
@@ -22,7 +22,7 @@
     "require": {
         "php": "^8.1",
 
-        "simplesamlphp/saml2-legacy": "^4.17",
+        "simplesamlphp/saml2": "^5.0",
         "simplesamlphp/simplesamlphp": "^2.4",
         "symfony/http-foundation": "^6.4"
     },
diff --git a/src/Controller/MetaEditor.php b/src/Controller/MetaEditor.php
index 827ad3f..17d675a 100644
--- a/src/Controller/MetaEditor.php
+++ b/src/Controller/MetaEditor.php
@@ -5,7 +5,7 @@
 namespace SimpleSAML\Module\metaedit\Controller;
 
 use Exception;
-use SAML2\Constants;
+use SimpleSAML\SAML2\Constants as C;
 use SimpleSAML\Auth;
 use SimpleSAML\Configuration;
 use SimpleSAML\Error;
@@ -170,13 +170,13 @@ public function edit(Request $request): Template
             $metadata['AssertionConsumerService'] = [
                 Utils\Config\Metadata::getDefaultEndpoint(
                     $metadata['AssertionConsumerService'],
-                    [Constants::BINDING_HTTP_POST],
+                    [C::BINDING_HTTP_POST],
                 ),
             ];
             $metadata['SingleLogoutService'] = [
                 Utils\Config\Metadata::getDefaultEndpoint(
                     $metadata['SingleLogoutService'],
-                    [Constants::BINDING_HTTP_REDIRECT],
+                    [C::BINDING_HTTP_REDIRECT],
                 ),
             ];
         } else {
diff --git a/src/MetaEditor.php b/src/MetaEditor.php
index 229e025..b356d8a 100644
--- a/src/MetaEditor.php
+++ b/src/MetaEditor.php
@@ -5,7 +5,7 @@
 namespace SimpleSAML\Module\metaedit;
 
 use Exception;
-use SAML2\Constants;
+use SimpleSAML\SAML2\Constants as C;
 
 /**
  * Editor for metadata
@@ -71,8 +71,8 @@ public function formToMeta(array $request, array $metadata = [], array $override
         $this->getStandardField($request, $metadata, 'entityid');
         $this->getStandardField($request, $metadata, 'name');
         $this->getStandardField($request, $metadata, 'description');
-        $this->getEndpointField($request, $metadata, 'AssertionConsumerService', Constants::BINDING_HTTP_POST, true);
-        $this->getEndpointField($request, $metadata, 'SingleLogoutService', Constants::BINDING_HTTP_REDIRECT, false);
+        $this->getEndpointField($request, $metadata, 'AssertionConsumerService', C::BINDING_HTTP_POST, true);
+        $this->getEndpointField($request, $metadata, 'SingleLogoutService', C::BINDING_HTTP_REDIRECT, false);
         $metadata['updated'] = time();
 
         foreach ($override as $key => $value) {