<div dir="ltr"><div dir="ltr"><div>Thanks a bunch for the insight, Brent.</div><div><br></div><div>At the suggestion of another list member, I replaced the ampersand with &</div><div><br></div><div>The IdP started without errors and now I can move on to testing.</div><div><br></div><div> Janemarie</div></div><br><div class="gmail_quote gmail_quote_container"><div dir="ltr" class="gmail_attr">On Tue, Mar 4, 2025 at 5:08 PM Brent Putman via users <<a href="mailto:users@shibboleth.net">users@shibboleth.net</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
<div>
<p><br>
</p>
<p>On 3/4/25 4:35 PM, Janemarie Duh via users wrote:</p>
<blockquote type="cite">
<div dir="ltr">To refresh memories, the strict default was new
with IdPv5:
<div><br>
</div>
<blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
<p style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:14px;line-height:normal;font-family:Helvetica"><span style="font-kerning:none">The XML
processing code in OpenSAML has been enhanced to support a
more strict form of processing that rejects
unexpected/unknown XML Attributes, Elements, and even
stray characters inside elements. Older versions tended to
ignore them. In the vast majority of cases, rejecting such
content is desirable but it is possible to turn off this
processing mode by setting the property <b>opensaml.config.xml.unmarshall.strictMode</b>
to “false”. Note that this setting appears to reject
otherwise valid metadata produced by Microsoft products
(see Known Bugs).</span></p>
</blockquote>
</div>
</blockquote>
<p><br>
</p>
<p>Your issue doesn't have anything to do with this new setting.
That's about "unknown" XML attributes, elements and element
content which isn't specified in the relevant XML schemas. That's
at a much higher level of XML processing than your error...<br>
</p>
<p><br>
</p>
<blockquote type="cite">
<div dir="ltr">
<div><br>
</div>
<div>Their ACS url looks like this:</div>
<div><br>
</div>
<blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"> <a href="https://uofdepd.evidence.com/?class=UIX&proc=Login" target="_blank">https://uofdepd.evidence.com/?class=UIX&proc=Login</a></blockquote>
<div><br>
</div>
<div>Upon restarting Jetty, errors appear because the xml parser
sees "proc" as unexpected content and thinks a semicolon
delimiter is required after it. </div>
</div>
</blockquote>
<p><br>
</p>
<p>Your error is that literal '&' characters aren't allowed in
XML, period. The '&' is a special reserved character used to
represent an 'entity', which is sort of like a macro that is
replaced at parse time. An entity always terminates with a ';',
and it's not seeing a terminating ';',. So that's literally what
it is complaining about. It's fundamentally invalid XML. This is a
very low-level XML parsing error, nothing to do with Shibboleth
software choices, etc.</p>
<p>For the correct way, see the wiki, which happens to have the
correct example for your exact ACS issue:</p>
<p><a href="https://shibboleth.atlassian.net/wiki/spaces/CONCEPT/pages/928645443/MetadataCorrectness#MetadataCorrectness-EncodingofSpecialCharacters" target="_blank">https://shibboleth.atlassian.net/wiki/spaces/CONCEPT/pages/928645443/MetadataCorrectness#MetadataCorrectness-EncodingofSpecialCharacters</a><br>
</p>
<br>
</div>
-- <br>
For Consortium Member technical support, see <a href="https://shibboleth.atlassian.net/wiki/x/ZYEpPw" rel="noreferrer" target="_blank">https://shibboleth.atlassian.net/wiki/x/ZYEpPw</a><br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net" target="_blank">users-unsubscribe@shibboleth.net</a><br>
</blockquote></div><div><br clear="all"></div><div><br></div><span class="gmail_signature_prefix">-- </span><br><div dir="ltr" class="gmail_signature"><div dir="ltr"><div><b><span style="color:rgb(11,83,148)"><span style="background-color:rgb(255,255,255)"><span style="font-family:monospace"><img src="https://ci3.googleusercontent.com/mail-sig/AIorK4zpRbtQKEfumFa024uUvgVX6y-TmDvn0IU1RsgcUZgQdNxzrpusMRfxo-LMo1knzn-fSC7LFRE"><br></span></span></span></b></div><div><font size="2"><span style="color:rgb(11,83,148)"><b><b><span style="font-size:11.5pt;line-height:105%;font-family:Arial,sans-serif;color:rgb(0,83,159)">Janemarie Duh</span></b></b></span></font></div><div><font color="#888888"><font size="2"><span style="color:rgb(11,83,148)"><span style="font-size:11.5pt;line-height:105%;font-family:Arial,sans-serif;color:rgb(0,83,159)"><span style="font-size:10pt;line-height:105%;color:rgb(10,10,10)">UD Information Technologies</span></span></span></font></font></div><div><span style="color:rgb(11,83,148)"><i><span style="color:rgb(0,0,0)">Identity and Access Management Specialist</span></i><b><br></b></span></div><div><span style="color:rgb(11,83,148)"><a href="mailto:duhj@udel.edu" target="_blank"><span style="color:rgb(0,0,0)">duhj@udel.edu</span></a><b><br></b></span></div></div></div></div>