<div dir="ltr">Hello,<div><br></div><div>An SP that is working with our version 4 IdP appears to fail with version 5. am getting the following error message:<br><div><br></div><div><h1 class="gmail-whitespace-pre-line gmail-break-words gmail-[word-break:break-word] gmail-whitespace-pre-wrap gmail-default gmail-font-sans gmail-text-base gmail-font-medium gmail-text-textMain gmail-dark:text-textMainDark gmail-selection:bg-super/50 gmail-selection:text-textMain gmail-dark:selection:bg-superDuper/10 gmail-dark:selection:text-superDark" style="box-sizing:border-box;border:0px solid rgb(229,231,235);font-size:1rem;font-weight:500;margin:0px;line-height:1.5rem;word-break:break-word">Error unmarshalling message from input stream: Saw invalid child element {urn:oasis:names:tc:SAML:2.0:assertion}AuthnContextClassRef on parent {urn:oasis:names:tc:SAML:2.0:protocol}AuthnRequest</h1></div></div><div><br></div><div>Is there a workaround to accept these requests in version 5 ?</div><div><br></div><div>The requests look like this:</div><div><br></div><div><div style="color:rgb(0,0,0);font-family:"Roboto Mono",Menlo,Monaco,"Courier New",monospace,Menlo,Monaco,"Courier New",monospace;font-size:12px;line-height:18px;white-space:pre"><div><samlp:AuthnRequest <span style="color:rgb(0,0,255)">ID</span>=<span style="color:rgb(163,21,21)">"_8dabfa33-8361-4634-9377-63bc62a78ea2"</span></div><div>                    <span style="color:rgb(0,0,255)">Version</span>=<span style="color:rgb(163,21,21)">"2.0"</span></div><div>                    <span style="color:rgb(0,0,255)">IssueInstant</span>=<span style="color:rgb(163,21,21)">"2024-10-27T17:34:21Z"</span></div><div>                    <span style="color:rgb(0,0,255)">ProtocolBinding</span>=<span style="color:rgb(163,21,21)">"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"</span></div><div>                    <span style="color:rgb(0,0,255)">AssertionConsumerServiceURL</span>=<span style="color:rgb(163,21,21)">"<a href="https://x34.emaint.com/wc.dll?X3~SAML">https://x34.emaint.com/wc.dll?X3~SAML</a>"</span></div><div>                    <span style="color:rgb(0,0,255)">Destination</span>=<span style="color:rgb(163,21,21)">"<a href="https://idp.cua.edu/idp/profile/SAML2/POST/SSO">https://idp.cua.edu/idp/profile/SAML2/POST/SSO</a>"</span></div><div>                    <span style="color:rgb(0,0,255)">ProviderName</span>=<span style="color:rgb(163,21,21)">"<a href="http://emaint.com">emaint.com</a>"</span></div><div>                    xmlns:<span style="color:rgb(0,0,255)">samlp</span>=<span style="color:rgb(163,21,21)">"urn:oasis:names:tc:SAML:2.0:protocol"</span></div><div>                    ></div><div>    <saml:Issuer xmlns:<span style="color:rgb(0,0,255)">saml</span>=<span style="color:rgb(163,21,21)">"urn:oasis:names:tc:SAML:2.0:assertion"</span>><a href="https://x34.emaint.com/SAML">https://x34.emaint.com/SAML</a></saml:Issuer></div><div>    <samlp:NameIDPolicy <span style="color:rgb(0,0,255)">Format</span>=<span style="color:rgb(163,21,21)">"urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified"</span></div><div>                        <span style="color:rgb(0,0,255)">AllowCreate</span>=<span style="color:rgb(163,21,21)">"true"</span></div><div>                        /></div><div>    <saml:AuthnContextClassRef xmlns:<span style="color:rgb(0,0,255)">saml</span>=<span style="color:rgb(163,21,21)">"urn:oasis:names:tc:SAML:2.0:assertion"</span>>urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport</saml:AuthnContextClassRef></div><div></samlp:AuthnRequest></div><div><br></div></div></div><div>Thanks a lot,</div><div>Mohamed.</div></div>