OpenSAML user discussion

["Scott Cantor" <>]

> Unfortunately both sides of the picture here are new development and so
> neither is known to be good :)

I didn't assume it was, I said you need to supply the suspect XML into a
known good implementation like xmlsec's online tool or Oxygen's verifier to
isolate the failure, though only SAML 2 documents will usually work with
them. The samlsign utility in opensaml-c is also an option, and works with
either protocol version.

-- Scott