FYI I created a "uApprove migration support" issue[1] to accumulate related issues in OpenSAML and the IdP, with the fix version as 3.1.0. [1] https://issues.shibboleth.net/jira/browse/IDP-588