XML failed to validate against the SAML XML Schemas error

SAML for ASP.NET Core
,
1

Hi,

We are using componentspace.saml2 licensed version 4.4 for last couple of years. I have a ASP.NET core application that SAML integrated with Salesforce as IDP. It was working as expected until yesterday. From today morning it was giving following error. can you please help me resolve this error.

ComponentSpace.Saml2.Exceptions.SamlSchemaValidationException: The XML failed to validate against the SAML XML Schemas.
at ComponentSpace.Saml2.SamlProvider.ValidateXml(XmlElement xmlElement)
at ComponentSpace.Saml2.SamlServiceProvider.ReceiveSsoAsync()
at PathFinder.Controllers.SamlController.AssertionConsumerService() in C:\develop\websites\PathFinderApp\PathFinder\Controllers\SamlController.cs:line 130

No changes on Salesforce connected app and dot net application. Salesforce authenticates successfully and it posts the following Payload (collected from developer tools). I will reply with the payload.

It is affected in our production system. Your quick response is greatly appreciated.

Thanks,

Mahesh Thoppae

2

Here is the payload

Destination="https://trainingpathfinder.ukg.com/SAML/AssertionConsumerService" ID="_4ed6b8524fca1c63dd9a9ff025b710ab1770137017432" InResponseTo="_1c6cfb64-fb46-493a-8dd5-fa128c7d7946" IssueInstant="2026-02-03T16:43:37.432Z" Version="2.0" xmlns:xsd="http://www.w3.org/2001/XMLSchema"><saml2:Issuer xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:entity">https://ukgsf.my.salesforce.com</saml2:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#"><ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/><ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/><ds:Reference URI="#_4ed6b8524fca1c63dd9a9ff025b710ab1770137017432"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"><ec:InclusiveNamespaces xmlns:ec="http://www.w3.org/2001/10/xml-exc-c14n#" PrefixList="xsd"/></ds:Transform></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>VRaxpmyglZjewXpWZUYOHTUeZSU=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>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</ds:SignatureValue><ds:KeyInfo><ds:X509Data><ds:X509Certificate>MIIGkzCCBHugAwIBAgIOAZsuP7U4AAAAAFhnx68wDQYJKoZIhvcNAQELBQAwgYgxIDAeBgNVBAMM F1NlbGZTaWduZWRDZXJ0XzEyMTcyMDI1MRgwFgYDVQQLDA8wMEQ2MTAwMDAwMEtlcHQxFzAVBgNV BAoMDlNhbGVzZm9yY2UuY29tMRYwFAYDVQQHDA1TYW4gRnJhbmNpc2NvMQswCQYDVQQIDAJDQTEM MAoGA1UEBhMDVVNBMB4XDTI1MTIxNzIxMzgwNVoXDTI3MTIxNzEyMDAwMFowgYgxIDAeBgNVBAMM F1NlbGZTaWduZWRDZXJ0XzEyMTcyMDI1MRgwFgYDVQQLDA8wMEQ2MTAwMDAwMEtlcHQxFzAVBgNV BAoMDlNhbGVzZm9yY2UuY29tMRYwFAYDVQQHDA1TYW4gRnJhbmNpc2NvMQswCQYDVQQIDAJDQTEM MAoGA1UEBhMDVVNBMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAnQEhoitFqZ4Tp6dC N8VFfKjfuf83V54z1BYPVGAmrFVCMbDvOWWc9fhtER2ppWEcbbE1yZcqtCGi3mas6jUY7hKQRHU3 F0hM8gvp/FA8iuFSjZMWBNwk23jzCFTfYAu4Gz59OaydvHBLDEzLbnMhoMCkgneUgOoDdlVNadji GPpD/dwW4qlJeq4yCcECF1AHJcNFJ+Q10IJ/Slw6hgKepggMPaVsZ7cJmceY34p206sgsZdd5+ZZ RnRHMQTqR8rV4cu7zP3ARlqH5wJIOSmd1wqDZUT0XIfWVY4fCvJ9aCl1bCTiyZov0jxxAqgCilwX Wx04daqFNMk7Y9yA/qbNyWlQZjP+0p75AtM7Bl+7vlI/T+T+LxJ+B8SkjzCP1sj5NUkrHnprmB6P by7DEpvgYSC40A5LL7v3kwR5IVWmsXPaFt8ysDsR45My6YZXm/wQ4wew9vdiJgnzwRZoH7Vib4+r aW9QKfjBEI+0UAWRcZcWTJXWpp/wmQhAPzNNL+diS3Vyumx5MmRDH9zS/HuQ7+nJiLXdgAv66gfS +RTy+0H3RxiyVcDq/5Ui840Sl+rMSeQY48RzpWzx6Q/D066rU423V5wpMY2EAjVJ7SLbNUdqORYF JUyEoubQrph4goPJ+ciNmxmvcclWosQcawXxY/E2MaAqjk8b1sFncl5f0mkCAwEAAaOB+DCB9TAd BgNVHQ4EFgQUruTCR6C5V6OuTmmj1GsbxaT25CUwDwYDVR0TAQH/BAUwAwEB/zCBwgYDVR0jBIG6 MIG3gBSu5MJHoLlXo65OaaPUaxvFpPbkJaGBjqSBizCBiDEgMB4GA1UEAwwXU2VsZlNpZ25lZENl cnRfMTIxNzIwMjUxGDAWBgNVBAsMDzAwRDYxMDAwMDAwS2VwdDEXMBUGA1UECgwOU2FsZXNmb3Jj ZS5jb20xFjAUBgNVBAcMDVNhbiBGcmFuY2lzY28xCzAJBgNVBAgMAkNBMQwwCgYDVQQGEwNVU0GC DgGbLj+1OAAAAABYZ8evMA0GCSqGSIb3DQEBCwUAA4ICAQBxgZKN1NKUilwLWpkWMp0TT0viyEY0 nJGg3+q6lMIIMP2UT/jcexRXQfYstIxg8E3KLtjdPMgc6PGvS4lmWRRSzS6FNMIy7XSdzQKbXXSs vJpeYzwWtoIkbGNxY6A0xp7L/Hsba/l170SDKMM/M8xGUOHSWX9+HnQwabpo/cdXTgiwxioVRTIn gQT2vCCbe/eMiRlXtT/AZfLvDS+dNG9m21MqIkjhxOLC74/VVfhserYbom9jxpqxBaTTKI9wTQgK XYVTrFf5qCLQoMlT05OcfPR3HT3lf+HOBO60Pnt5eh+TzjeYI+NWNAoO3dYWUu+euXGDNYjAwwwe l4qt6SdmwMuTsXdQsDO0KOfhsz6werKlxXnzqJAZuGlefQS5VIvKEG3SGT9k3Lzb9OuGuvHpAKck ialR/3FzVjGU+QRmIlvPadiSLjrS9J3QBTO/a2FOvPfOlPq9vbOIIP62nbt86YoDxUlJzwq4BcJR XL6hOUUQAgJzuaSiDnk04zfvZVBVAlyn981IqG3j+USuWmL5bUoZndC78550lc+Ug19uX0oJ5FwH 2+L6tRxVE8zhJZPWNIjr1SjoFLJaJZc0QQMN7ocpPRYeSmddn+K7ZLa8yYjUSQrzgPy8mfP580V8 CdfeC094gg3EnE7nyyVd77uLAjlB672FEyIwgOqVGydmcQ==</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature><saml2p:Status><saml2p:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/></saml2p:Status><saml2:Assertion xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion" ID="_25f1bcb819e906bbf18b7bc8f400a4f71770137017432" IssueInstant="2026-02-03T16:43:37.432Z" Version="2.0" xmlns:xsd="http://www.w3.org/2001/XMLSchema"><saml2:Issuer Format="urn:oasis:names:tc:SAML:2.0:nameid-format:entity">https://ukgsf.my.salesforce.com</saml2:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#"><ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/><ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/><ds:Reference URI="#_25f1bcb819e906bbf18b7bc8f400a4f71770137017432"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"><ec:InclusiveNamespaces xmlns:ec="http://www.w3.org/2001/10/xml-exc-c14n#" PrefixList="xsd"/></ds:Transform></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>Ok9/W0XCgO/hbhQvmbFObyW25+Y=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>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</ds:SignatureValue><ds:KeyInfo><ds:X509Data><ds:X509Certificate>MIIGkzCCBHugAwIBAgIOAZsuP7U4AAAAAFhnx68wDQYJKoZIhvcNAQELBQAwgYgxIDAeBgNVBAMM F1NlbGZTaWduZWRDZXJ0XzEyMTcyMDI1MRgwFgYDVQQLDA8wMEQ2MTAwMDAwMEtlcHQxFzAVBgNV BAoMDlNhbGVzZm9yY2UuY29tMRYwFAYDVQQHDA1TYW4gRnJhbmNpc2NvMQswCQYDVQQIDAJDQTEM MAoGA1UEBhMDVVNBMB4XDTI1MTIxNzIxMzgwNVoXDTI3MTIxNzEyMDAwMFowgYgxIDAeBgNVBAMM F1NlbGZTaWduZWRDZXJ0XzEyMTcyMDI1MRgwFgYDVQQLDA8wMEQ2MTAwMDAwMEtlcHQxFzAVBgNV BAoMDlNhbGVzZm9yY2UuY29tMRYwFAYDVQQHDA1TYW4gRnJhbmNpc2NvMQswCQYDVQQIDAJDQTEM MAoGA1UEBhMDVVNBMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAnQEhoitFqZ4Tp6dC N8VFfKjfuf83V54z1BYPVGAmrFVCMbDvOWWc9fhtER2ppWEcbbE1yZcqtCGi3mas6jUY7hKQRHU3 F0hM8gvp/FA8iuFSjZMWBNwk23jzCFTfYAu4Gz59OaydvHBLDEzLbnMhoMCkgneUgOoDdlVNadji GPpD/dwW4qlJeq4yCcECF1AHJcNFJ+Q10IJ/Slw6hgKepggMPaVsZ7cJmceY34p206sgsZdd5+ZZ RnRHMQTqR8rV4cu7zP3ARlqH5wJIOSmd1wqDZUT0XIfWVY4fCvJ9aCl1bCTiyZov0jxxAqgCilwX Wx04daqFNMk7Y9yA/qbNyWlQZjP+0p75AtM7Bl+7vlI/T+T+LxJ+B8SkjzCP1sj5NUkrHnprmB6P by7DEpvgYSC40A5LL7v3kwR5IVWmsXPaFt8ysDsR45My6YZXm/wQ4wew9vdiJgnzwRZoH7Vib4+r aW9QKfjBEI+0UAWRcZcWTJXWpp/wmQhAPzNNL+diS3Vyumx5MmRDH9zS/HuQ7+nJiLXdgAv66gfS +RTy+0H3RxiyVcDq/5Ui840Sl+rMSeQY48RzpWzx6Q/D066rU423V5wpMY2EAjVJ7SLbNUdqORYF JUyEoubQrph4goPJ+ciNmxmvcclWosQcawXxY/E2MaAqjk8b1sFncl5f0mkCAwEAAaOB+DCB9TAd BgNVHQ4EFgQUruTCR6C5V6OuTmmj1GsbxaT25CUwDwYDVR0TAQH/BAUwAwEB/zCBwgYDVR0jBIG6 MIG3gBSu5MJHoLlXo65OaaPUaxvFpPbkJaGBjqSBizCBiDEgMB4GA1UEAwwXU2VsZlNpZ25lZENl cnRfMTIxNzIwMjUxGDAWBgNVBAsMDzAwRDYxMDAwMDAwS2VwdDEXMBUGA1UECgwOU2FsZXNmb3Jj ZS5jb20xFjAUBgNVBAcMDVNhbiBGcmFuY2lzY28xCzAJBgNVBAgMAkNBMQwwCgYDVQQGEwNVU0GC DgGbLj+1OAAAAABYZ8evMA0GCSqGSIb3DQEBCwUAA4ICAQBxgZKN1NKUilwLWpkWMp0TT0viyEY0 nJGg3+q6lMIIMP2UT/jcexRXQfYstIxg8E3KLtjdPMgc6PGvS4lmWRRSzS6FNMIy7XSdzQKbXXSs vJpeYzwWtoIkbGNxY6A0xp7L/Hsba/l170SDKMM/M8xGUOHSWX9+HnQwabpo/cdXTgiwxioVRTIn gQT2vCCbe/eMiRlXtT/AZfLvDS+dNG9m21MqIkjhxOLC74/VVfhserYbom9jxpqxBaTTKI9wTQgK XYVTrFf5qCLQoMlT05OcfPR3HT3lf+HOBO60Pnt5eh+TzjeYI+NWNAoO3dYWUu+euXGDNYjAwwwe l4qt6SdmwMuTsXdQsDO0KOfhsz6werKlxXnzqJAZuGlefQS5VIvKEG3SGT9k3Lzb9OuGuvHpAKck ialR/3FzVjGU+QRmIlvPadiSLjrS9J3QBTO/a2FOvPfOlPq9vbOIIP62nbt86YoDxUlJzwq4BcJR XL6hOUUQAgJzuaSiDnk04zfvZVBVAlyn981IqG3j+USuWmL5bUoZndC78550lc+Ug19uX0oJ5FwH 2+L6tRxVE8zhJZPWNIjr1SjoFLJaJZc0QQMN7ocpPRYeSmddn+K7ZLa8yYjUSQrzgPy8mfP580V8 CdfeC094gg3EnE7nyyVd77uLAjlB672FEyIwgOqVGydmcQ==</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature><saml2:Subject><saml2:NameID Format="urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified">emailid@comcast.net</saml2:NameID><saml2:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer"><saml2:SubjectConfirmationData InResponseTo="_1c6cfb64-fb46-493a-8dd5-fa128c7d7946" NotOnOrAfter="2026-02-03T16:48:37.433Z" Recipient="https://trainingpathfinder.ukg.com/SAML/AssertionConsumerService"/></saml2:SubjectConfirmation></saml2:Subject><saml2:Conditions NotBefore="2026-02-03T16:43:07.433Z" NotOnOrAfter="2026-02-03T16:48:37.433Z"><saml2:AudienceRestriction><saml2:Audience>https://trainingpathfinder.ukg.com/</saml2:Audience></saml2:AudienceRestriction></saml2:Conditions><saml2:AuthnStatement AuthnInstant="2026-02-03T16:43:37.432Z"/><saml2:AttributeStatement><saml2:Attribute Name="userId" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:unspecified"><saml2:AttributeValue xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xsd:anyType">0058Y00000CBByj</saml2:AttributeValue></saml2:Attribute><saml2:Attribute Name="username" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:unspecified"><saml2:AttributeValue xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xsd:anyType">learningmm@ukg.com</saml2:AttributeValue></saml2:Attribute><saml2:Attribute Name="email" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:unspecified"><saml2:AttributeValue xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xsd:anyType">emailid@comcast.net</saml2:AttributeValue></saml2:Attribute><saml2:Attribute Name="is_portal_user" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:unspecified"><saml2:AttributeValue xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xsd:anyType">true</saml2:AttributeValue></saml2:Attribute><saml2:Attribute Name="solutionid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:unspecified"><saml2:AttributeValue xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xsd:anyType">6171642</saml2:AttributeValue></saml2:Attribute><saml2:Attribute Name="schooxid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:unspecified"><saml2:AttributeValue xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xsd:anyType">1617397745</saml2:AttributeValue></saml2:Attribute><saml2:Attribute Name="firstname" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:unspecified"><saml2:AttributeValue xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xsd:anyType">LearningJourney</saml2:AttributeValue></saml2:Attribute><saml2:Attribute Name="useremail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:unspecified"><saml2:AttributeValue xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xsd:anyType">mapes7858@comcast.net</saml2:AttributeValue></saml2:Attribute><saml2:Attribute Name="sfdcid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:unspecified"><saml2:AttributeValue xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xsd:anyType">0058Y00000CBByjQAH</saml2:AttributeValue></saml2:Attribute><saml2:Attribute Name="lastname" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:unspecified"><saml2:AttributeValue xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xsd:anyType">MM</saml2:AttributeValue></saml2:Attribute><saml2:Attribute Name="orgname" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:unspecified"><saml2:AttributeValue xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xsd:anyType">THE ULTIMATE SOFTWARE GROUP INC</saml2:AttributeValue></saml2:Attribute></saml2:AttributeStatement></saml2:Assertion></saml2p:Response>
3

Please enable SAML trace and send the generated log file as an email attachment to support@componentspace.com.

4

Hi,

I worked with Support and Mitchell Prentice helped me to resolve this issue. He found that one of the xml element is missing from the Salesforce SAML response. The Salesforce schema corrected itself after few hours. No changes needed in the ASP.NET core application.

Thanks,

Mahesh