<samlp:Response> or <saml2p:Response> in the SAML response

[Peter Schober]

* JohnWang <john.wang at emory.edu> [2017-05-02 18:53]:
> Our Shibboleth IDP uses <saml2p:Response> in the SAML response. But,
> the SAML SP of our partner expects <samlp:Response> in the SAML
> response. Here are my questions.

Then they have a bug, most likely.

The XML namespace prefixes used are arbitrary, they depend on the rest
of the protocol message for assignment. E.g.:
<foo:Response xmlns:foo="whatever-the-right-URI-is">
should be just as well.

> 1. Is it possible to configure Shibboleth IDP to reply to a specific
> EntityID with  <samlp:Response> in the SAML response instead of
> <saml2p:Response>?

I don't think it's possible at all.

> 3. If an answer of the question 1 is no, is it possible to configure SAML SP
> to accept <saml2p:Response> in the SAML response?

A non-broken SP wouldn't need configiuration for that, it would just
need to know what XML namespaces are and now to deal with them. (Not
specific to SAML.)

> 4. If an answer of the question 3 is no, is there other way to go around the
> problem?

I doubt it. Who is the SP?

-peter