Specifying prefixed namespace for SLO requests?

[Cantor, Scott]

> Hi, I'm trying to set up a Shibboleth 3.3 IdP, and having trouble processing the
> logout requests from a particular SP.  Once decrypted, the logout requests
> look like this:

That's a decrypted NameID, not the whole request. When you embed namespace usage in encrypted content, it's a basic requirement that you have to ensure the prefix(es) get declared either within the content or in the original message.

> Is there a bean or property that I need to provide which defines this "saml"
> prefix?

No, the message is simply broken, and the SP has a bug. I can't imagine that's Shibboleth but if it is you should certainly file it.

-- Scott