<html><head><meta http-equiv="Content-Type" content="text/html; charset=us-ascii"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class=""><br class=""><div><br class=""><blockquote type="cite" class=""><div class="">On 2020-04-18, at 16:37, Mak, Steve <<a href="mailto:makst@upenn.edu" class="">makst@upenn.edu</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><div class="">When I run:<br class=""><br class="">xmllint --noout --schema saml-schema-metadata-2.0.xsd sp.xml<br class=""><br class="">It validates if I pull down the xsd files it needs. But maybe I'm doing something wrong here.<br class=""></div></div></blockquote><div><br class=""></div><div>You're not doing anything wrong there, it's just not sufficient.</div><div><br class=""></div><div>As I mentioned before, there are SAML-specific rules that are not covered by the schema. In particular, it's a general rule that SAML elements can't be empty (and we apply that same rule to elements in SAML metadata). By definition, if a rule isn't encoded in the schema (and this one isn't) then it's beyond the reach of xmllint or anything else that just does schema validation.</div><div><br class=""></div><div>SAML software can perform that additional checking, but not all SAML software does. I don't know of a publicly available checking tool for this specific issue, although (for example) if you submitted that metadata to (at least) the UK federation for publication, the issue would be flagged.</div><div><br class=""></div><div>Anyway, something like this should resolve your issue:</div><div><br class=""></div><div><ServiceName xml:lang="en">a name for the service goes here</ServiceName></div><div><br class=""></div><div>Let us know if that helps.</div></div><div class=""><span class="Apple-style-span" style="border-collapse: separate; color: rgb(0, 0, 0); font-family: Helvetica; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; border-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-stroke-width: 0px;"><div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""><span class="Apple-style-span" style="border-collapse: separate; color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; border-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-stroke-width: 0px;"><div class=""><span class="Apple-tab-span" style="white-space: pre;"><br class="Apple-interchange-newline"></span> -- Ian<br class=""></div><div class=""><br class=""></div></span></div></span></div></body></html>