Error unmarshalling message from input stream

[Mohamed Lrhazi]

Hello,

An SP that is working with our version 4 IdP appears to fail with version
5. am getting the following error message:

Error unmarshalling message from input stream: Saw invalid child element
{urn:oasis:names:tc:SAML:2.0:assertion}AuthnContextClassRef on parent
{urn:oasis:names:tc:SAML:2.0:protocol}AuthnRequest

Is there a workaround to accept these requests in version 5 ?

The requests look like this:

<samlp:AuthnRequest ID="_8dabfa33-8361-4634-9377-63bc62a78ea2"
Version="2.0"
IssueInstant="2024-10-27T17:34:21Z"
ProtocolBinding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"
AssertionConsumerServiceURL="https://x34.emaint.com/wc.dll?X3~SAML"
Destination="https://idp.cua.edu/idp/profile/SAML2/POST/SSO"
ProviderName="emaint.com"
xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol"
>
<saml:Issuer xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">
https://x34.emaint.com/SAML</saml:Issuer>
<samlp:NameIDPolicy Format=
"urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified"
AllowCreate="true"
/>
<saml:AuthnContextClassRef xmlns:saml=
"urn:oasis:names:tc:SAML:2.0:assertion"
>urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport</saml:AuthnContextClassRef>
</samlp:AuthnRequest>

Thanks a lot,
Mohamed.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20241027/9543bdef/attachment.htm>