A commercial SaaS identity provider parsed SAML responses with two different XML views. The ninth trust-through-defaults ...