Use the potentially manipulated issuer from the state (saml:ScopedIssuer authproc)

Author: tvdijen

src/IdP/ADFS.php

@@ -416,7 +416,7 @@ public static function sendPassiveResponse(array $state): void
     {
         $idp = IdP::getByState($state);
         $idpMetadata = $idp->getConfig();
-        $idpEntityId = $idpMetadata->getString('entityid');
+        $idpEntityId = $state['IdPMetadata']['entityid'];
 
         $spMetadata = $state['SPMetadata'];
         $spEntityId = $spMetadata['entityid'];
@@ -546,7 +546,7 @@ public static function sendResponse(array $state): void
 
         $idp = IdP::getByState($state);
         $idpMetadata = $idp->getConfig();
-        $idpEntityId = $idpMetadata->getString('entityid');
+        $idpEntityId = $state['IdPMetadata']['entityid'];
 
         $idp->addAssociation([
             'id' => 'adfs:' . $spEntityId,