This should fix test 28 failing in spid-test-sp:
getElementsByTagNameNS is getting any nested element starting from fatherElement. If tag Issuer was not present as direct child of Response, authentication was still successful because of the Issuer child on Assertion tag.
This should fix test 28 failing in spid-test-sp: getElementsByTagNameNS is getting any nested element starting from fatherElement. If tag Issuer was not present as direct child of Response, authentication was still successful because of the Issuer child on Assertion tag.