See my response A SAML authn request was expected. Instead samlp:Response was received - #2 by ComponentSpace.