> Is there a way to disable this validation? (I am trying with validate="false", just > in case the wiki is wrong about the default.) No, that's core SAML, invalid, end of story. The code is not littered with null checks, it simply rejects the bad data. Nothing new, has done that since day one. -- Scott