Need help in shibboleth configuration

[Peter Schober]

* bhupendra.a.singh at accenture.com <bhupendra.a.singh at accenture.com> [2017-06-07 05:27]:
> Thanks for your reply Scott. Please can you provide the details how
> can I turn off the validation in SP side or IDP side.

Since the error comes from the Shib SP, so that's where you'd have to
add validate="false" to the MetadataProvider where you load the
MS-ADFS' metadata.

Alternatively, if the metadata for that IDP is loaded from the local
file system on the SP (and not dynamically over the network) you could
also simply remove all md:RoleDescriptor elements (and their child
elements) from the SAML Metadata describing the IDP. The SP doesn't do
anything with the info in there anyway.

-peter