Subject and NameId considered mandatory

[AkashB23]

spring-security/saml2/saml2-service-provider/src/main/java/org/springframework/security/saml2/provider/service/authentication/OpenSaml4AuthenticationProvider.java

Line 649 in 515e821

private boolean hasName(Assertion assertion) {

As per the implementation Subject and NameId in subject are considered mandatory and library do not provide any means to override it

But according to SAML2 spec subject and NameId are optional, can we update the validation to have as optional

[jzheaux]

Thanks for bringing this up, @AkashB23. I believe we are already underway in #12136, so I'll mark this as a duplicate. Please feel free to contribute to the conversation over there.