Shibboleth SP, OpenSAML3, and and empty NameID element

[Michael Grady]

I imagine the answer will be "no". but seemed work asking anyways. 

This is with the latest Shib SP (3.4.1). There is an Okta IdP which is sending (under certain circumstances on the Okta side) is sending a SAML response containing a NameID element, but with no value for the NameID. An empty NameID, which checking the SAML2 standard is a violation of the standard.  That raises an xmltooling validation exception, indicating "NameID must have TextContent".

There is no way to tell the SP (well , OpenSAML) to "ignore that error and treat it as if there was no NameID element included", is there?

p.s. Clearly the right thing is for Okta to fix whatever bug exists on their side which ends up sending such in a SAML response. But don't know when that would be done.

--
Michael A. Grady
IAM Architect, Unicon, Inc.