diff --git a/saml/authn_request.go b/saml/authn_request.go
index acfb4ff..5abe961 100644
--- a/saml/authn_request.go
+++ b/saml/authn_request.go
@@ -1,3 +1,6 @@
+// Copyright (c) HashiCorp, Inc.
+// SPDX-License-Identifier: MPL-2.0
+
 package saml
 
 import (
diff --git a/saml/authn_request_test.go b/saml/authn_request_test.go
index 0d961d2..1a36735 100644
--- a/saml/authn_request_test.go
+++ b/saml/authn_request_test.go
@@ -1,3 +1,6 @@
+// Copyright (c) HashiCorp, Inc.
+// SPDX-License-Identifier: MPL-2.0
+
 package saml_test
 
 import (
diff --git a/saml/config.go b/saml/config.go
index 689e504..4f8afb0 100644
--- a/saml/config.go
+++ b/saml/config.go
@@ -1,3 +1,6 @@
+// Copyright (c) HashiCorp, Inc.
+// SPDX-License-Identifier: MPL-2.0
+
 package saml
 
 import (
diff --git a/saml/config_test.go b/saml/config_test.go
index ca8cb01..ddac804 100644
--- a/saml/config_test.go
+++ b/saml/config_test.go
@@ -1,3 +1,6 @@
+// Copyright (c) HashiCorp, Inc.
+// SPDX-License-Identifier: MPL-2.0
+
 package saml_test
 
 import (
diff --git a/saml/demo/main.go b/saml/demo/main.go
index 99f99fb..839ce85 100644
--- a/saml/demo/main.go
+++ b/saml/demo/main.go
@@ -1,3 +1,6 @@
+// Copyright (c) HashiCorp, Inc.
+// SPDX-License-Identifier: MPL-2.0
+
 package main
 
 import (
diff --git a/saml/error.go b/saml/error.go
index 519533f..43ed33e 100644
--- a/saml/error.go
+++ b/saml/error.go
@@ -1,3 +1,6 @@
+// Copyright (c) HashiCorp, Inc.
+// SPDX-License-Identifier: MPL-2.0
+
 package saml
 
 import "errors"
diff --git a/saml/handler/acs.go b/saml/handler/acs.go
index d0693e2..81db2f6 100644
--- a/saml/handler/acs.go
+++ b/saml/handler/acs.go
@@ -1,3 +1,6 @@
+// Copyright (c) HashiCorp, Inc.
+// SPDX-License-Identifier: MPL-2.0
+
 package handler
 
 import (
diff --git a/saml/handler/metadata.go b/saml/handler/metadata.go
index 324b28b..4f9c0f3 100644
--- a/saml/handler/metadata.go
+++ b/saml/handler/metadata.go
@@ -1,3 +1,6 @@
+// Copyright (c) HashiCorp, Inc.
+// SPDX-License-Identifier: MPL-2.0
+
 package handler
 
 import (
diff --git a/saml/handler/post_binding.go b/saml/handler/post_binding.go
index 2f789d5..189e2ac 100644
--- a/saml/handler/post_binding.go
+++ b/saml/handler/post_binding.go
@@ -1,3 +1,6 @@
+// Copyright (c) HashiCorp, Inc.
+// SPDX-License-Identifier: MPL-2.0
+
 package handler
 
 import (
diff --git a/saml/handler/redirect_binding.go b/saml/handler/redirect_binding.go
index 9b95ed1..86c3b9e 100644
--- a/saml/handler/redirect_binding.go
+++ b/saml/handler/redirect_binding.go
@@ -1,3 +1,6 @@
+// Copyright (c) HashiCorp, Inc.
+// SPDX-License-Identifier: MPL-2.0
+
 package handler
 
 import (
diff --git a/saml/is_nil.go b/saml/is_nil.go
index c54654e..0bc17a2 100644
--- a/saml/is_nil.go
+++ b/saml/is_nil.go
@@ -1,3 +1,6 @@
+// Copyright (c) HashiCorp, Inc.
+// SPDX-License-Identifier: MPL-2.0
+
 package saml
 
 import "reflect"
diff --git a/saml/is_nil_test.go b/saml/is_nil_test.go
index ff9fd40..4bed719 100644
--- a/saml/is_nil_test.go
+++ b/saml/is_nil_test.go
@@ -1,3 +1,6 @@
+// Copyright (c) HashiCorp, Inc.
+// SPDX-License-Identifier: MPL-2.0
+
 package saml
 
 import (
diff --git a/saml/models/core/common.go b/saml/models/core/common.go
index 921d9eb..a2f22c7 100644
--- a/saml/models/core/common.go
+++ b/saml/models/core/common.go
@@ -1,3 +1,6 @@
+// Copyright (c) HashiCorp, Inc.
+// SPDX-License-Identifier: MPL-2.0
+
 package core
 
 import (
diff --git a/saml/models/core/fixtures/response.xml.go b/saml/models/core/fixtures/response.xml.go
index 2731c98..9bc7b01 100644
--- a/saml/models/core/fixtures/response.xml.go
+++ b/saml/models/core/fixtures/response.xml.go
@@ -1,3 +1,6 @@
+// Copyright (c) HashiCorp, Inc.
+// SPDX-License-Identifier: MPL-2.0
+
 package fixtures
 
 var ResponseXML = `<?xml version="1.0" encoding="UTF-8"?>
diff --git a/saml/models/core/request.go b/saml/models/core/request.go
index 732de1f..4216131 100644
--- a/saml/models/core/request.go
+++ b/saml/models/core/request.go
@@ -1,3 +1,6 @@
+// Copyright (c) HashiCorp, Inc.
+// SPDX-License-Identifier: MPL-2.0
+
 package core
 
 import (
diff --git a/saml/models/core/response.go b/saml/models/core/response.go
index 7c5ad9b..40404b3 100644
--- a/saml/models/core/response.go
+++ b/saml/models/core/response.go
@@ -1,3 +1,6 @@
+// Copyright (c) HashiCorp, Inc.
+// SPDX-License-Identifier: MPL-2.0
+
 package core
 
 import (
diff --git a/saml/models/core/response_test.go b/saml/models/core/response_test.go
index 8adf99c..5d0bd9c 100644
--- a/saml/models/core/response_test.go
+++ b/saml/models/core/response_test.go
@@ -1,3 +1,6 @@
+// Copyright (c) HashiCorp, Inc.
+// SPDX-License-Identifier: MPL-2.0
+
 package core_test
 
 import (
diff --git a/saml/models/metadata/common.go b/saml/models/metadata/common.go
index 8c2d236..8544b2c 100644
--- a/saml/models/metadata/common.go
+++ b/saml/models/metadata/common.go
@@ -1,3 +1,6 @@
+// Copyright (c) HashiCorp, Inc.
+// SPDX-License-Identifier: MPL-2.0
+
 package metadata
 
 import "github.com/hashicorp/cap/saml/models/core"
diff --git a/saml/models/metadata/duration.go b/saml/models/metadata/duration.go
index f28aa35..e020cd1 100644
--- a/saml/models/metadata/duration.go
+++ b/saml/models/metadata/duration.go
@@ -1,3 +1,6 @@
+// Copyright (c) HashiCorp, Inc.
+// SPDX-License-Identifier: MPL-2.0
+
 package metadata
 
 import (
diff --git a/saml/models/metadata/duration_test.go b/saml/models/metadata/duration_test.go
index 9ae0853..ff1409f 100644
--- a/saml/models/metadata/duration_test.go
+++ b/saml/models/metadata/duration_test.go
@@ -1,3 +1,6 @@
+// Copyright (c) HashiCorp, Inc.
+// SPDX-License-Identifier: MPL-2.0
+
 package metadata
 
 import (
diff --git a/saml/models/metadata/entity_descriptor.go b/saml/models/metadata/entity_descriptor.go
index 8ac8985..63fc555 100644
--- a/saml/models/metadata/entity_descriptor.go
+++ b/saml/models/metadata/entity_descriptor.go
@@ -1,3 +1,6 @@
+// Copyright (c) HashiCorp, Inc.
+// SPDX-License-Identifier: MPL-2.0
+
 package metadata
 
 import (
diff --git a/saml/models/metadata/idp_sso_descriptor.go b/saml/models/metadata/idp_sso_descriptor.go
index c1f6536..74b4dbb 100644
--- a/saml/models/metadata/idp_sso_descriptor.go
+++ b/saml/models/metadata/idp_sso_descriptor.go
@@ -1,3 +1,6 @@
+// Copyright (c) HashiCorp, Inc.
+// SPDX-License-Identifier: MPL-2.0
+
 package metadata
 
 import (
diff --git a/saml/models/metadata/idp_sso_descriptor_test.go b/saml/models/metadata/idp_sso_descriptor_test.go
index 1dc2018..e3ce3a7 100644
--- a/saml/models/metadata/idp_sso_descriptor_test.go
+++ b/saml/models/metadata/idp_sso_descriptor_test.go
@@ -1,3 +1,6 @@
+// Copyright (c) HashiCorp, Inc.
+// SPDX-License-Identifier: MPL-2.0
+
 package metadata_test
 
 import (
diff --git a/saml/models/metadata/sp_sso_descriptor.go b/saml/models/metadata/sp_sso_descriptor.go
index 69b7b68..6139554 100644
--- a/saml/models/metadata/sp_sso_descriptor.go
+++ b/saml/models/metadata/sp_sso_descriptor.go
@@ -1,3 +1,6 @@
+// Copyright (c) HashiCorp, Inc.
+// SPDX-License-Identifier: MPL-2.0
+
 package metadata
 
 import "encoding/xml"
diff --git a/saml/models/metadata/sp_sso_descriptor_test.go b/saml/models/metadata/sp_sso_descriptor_test.go
index b1dc0b6..0bab852 100644
--- a/saml/models/metadata/sp_sso_descriptor_test.go
+++ b/saml/models/metadata/sp_sso_descriptor_test.go
@@ -1,3 +1,6 @@
+// Copyright (c) HashiCorp, Inc.
+// SPDX-License-Identifier: MPL-2.0
+
 package metadata_test
 
 import (
diff --git a/saml/options.go b/saml/options.go
index 32ad499..6483831 100644
--- a/saml/options.go
+++ b/saml/options.go
@@ -1,3 +1,6 @@
+// Copyright (c) HashiCorp, Inc.
+// SPDX-License-Identifier: MPL-2.0
+
 package saml
 
 // Option defines a common functional options type which can be used in a
diff --git a/saml/response.go b/saml/response.go
index e43c3f8..894d0e8 100644
--- a/saml/response.go
+++ b/saml/response.go
@@ -1,3 +1,6 @@
+// Copyright (c) HashiCorp, Inc.
+// SPDX-License-Identifier: MPL-2.0
+
 package saml
 
 import (
diff --git a/saml/response_test.go b/saml/response_test.go
index 57baccd..38ebc19 100644
--- a/saml/response_test.go
+++ b/saml/response_test.go
@@ -1,3 +1,6 @@
+// Copyright (c) HashiCorp, Inc.
+// SPDX-License-Identifier: MPL-2.0
+
 package saml_test
 
 import (
diff --git a/saml/sp.go b/saml/sp.go
index 957402c..b4c828d 100644
--- a/saml/sp.go
+++ b/saml/sp.go
@@ -1,3 +1,6 @@
+// Copyright (c) HashiCorp, Inc.
+// SPDX-License-Identifier: MPL-2.0
+
 package saml
 
 import (
diff --git a/saml/sp_test.go b/saml/sp_test.go
index 9c74bba..9370fa3 100644
--- a/saml/sp_test.go
+++ b/saml/sp_test.go
@@ -1,3 +1,6 @@
+// Copyright (c) HashiCorp, Inc.
+// SPDX-License-Identifier: MPL-2.0
+
 package saml_test
 
 import (
diff --git a/saml/test/provider.go b/saml/test/provider.go
index 592f5ea..b4b9d7f 100644
--- a/saml/test/provider.go
+++ b/saml/test/provider.go
@@ -1,3 +1,6 @@
+// Copyright (c) HashiCorp, Inc.
+// SPDX-License-Identifier: MPL-2.0
+
 package testprovider
 
 import (