IdP unable to parse SP authN request

[Cantor, Scott]

> Caused by: java.util.zip.ZipException: oversubscribed dynamic bit lengths
> tree

Never seen it but I would imagine either they're using the redirect endpoint to send a POST binding request, or they've botched the Redirect binding DEFLATE process, as those are the two most common problems.

> Vendor-provided example of the authN request:

That's not a binding-encoded example that means anything in the context of this error, but more to the point it's got an XML signature inside it, which is invalid for a Redirect binding message.

-- Scott