During decryption of assertion, AssertionUtil is not using the EventReader in AbstractParser, which ignores whitespace and newlines. As a consequence, parsing of SAML assertions fail if the IdP includes newlines between tags in the XML.