Xerces and 3.3.2

[Cantor, Scott]

> Ok, but lots of other people do and I'm not interested in what you don't do.

If you're not interested in the opinion of the principal author on how to run the software properly, then I guess you can keep banging your head against a wall.

> Has anyone seen this issue and managed to resolve it?

I thought I strongly implied that: get rid of Xerces. Delete the jars. It is possible, though not supported, to use it. That is a terrible idea. Xerces-J should have been moved to the Apache attic years ago, it is unmaintained and contains known, unfixed, vulnerabilities. Running a SAML IdP on top of it amounts to negligence. So we have no intention of documenting how to use it at this point and the fix is to get it out of there.

-- Scott