Metadata-Based Naming?

[Rod Widdowson]

> > How the heck did XML validation let this pass? "xmllint" makes no complaint about it.
> 
> I doubt xmllint is even namespace aware, but I don't know offhand. It may require a special flag for that.

The more interesting question is why you didn't get huge warning on reload from the metadata resolver

    <saml2:AttributeValue>sn last_name</saml:AttributeValue>

That should have jumped right out before you had to turn up logging anywhere else...