> Ok, are there any other mechanism for validating SAML messages or does > everyone just build there own validation? Nothing other than schema validation. The unmarshalling process does some things to enforce content models, but profile specific behavior is up to you. -- Scott