<samlp:Response> or <saml2p:Response> in the SAML response

Tue May 2 16:57:54 EDT 2017

On 5/2/17 4:14 PM, JohnWang wrote:
> Hi John,
> Do you have a solution about the XML issue? Should the IDP be modified or
> SAML SP be modified?  Thanks!
>

The Shibboleth IdP can not be modified wrt this issue.

The SP has a bug, if it is expecting a specific XML namespace prefix. As
Peter said, what's important in namespace-qualified XML is not the
prefix (which could be "foo", etc), it's the namespace URI itself.  So
yes, the SP needs to be modified.  But probably not in a configuration
sense.  Rather their implementation is broken and they need to fix it at
the source code level.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170502/e6670120/attachment.html>