While doing POC against the hosted shibboleth IDP at testshib.org, I came across an issue where the nest role elements were causing an exception due to unexpected role types.

The parsing of the nested elements has been previously added but the handling of those resulting objects never made it into the handling code.