Shibboleth SP not downloading SAML assertion with namespace

[Kannan, Satheesh (ELS-CON)]

Dear Shibboleth Community,

We are encountering an issue with one of our Identity Providers (IdP) that is releasing a pseudonymous attribute using a namespace declaration in the SAML response. Specifically, the attribute is structured as follows:


<saml2:AttributeValue xmlns:xsd="XML Schema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xsd:string">


Our Service Provider (SP) is unable to parse or download this attribute correctly. However, when the namespace uses `xs` instead of `xsd`, like below, the attribute is processed without any issues:


<saml2:AttributeValue xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xs:string">


We would appreciate your insights on the following:
- Is the use of `xsd` as a namespace prefix instead of `xs` causing the issue?
- Is this a known compatibility problem with certain SP implementations?
- What would be the recommended approach to resolve this?

Thank you in advance for your guidance and support.

Regards,
Satheesh


________________________________

Elsevier B.V. Registered Office: Radarweg 29, 1043 NX Amsterdam, The Netherlands, Registration No. 33158992, Registered in The Netherlands.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20250818/59c697d3/attachment.htm>