diff --git a/packages/sso/src/routes/sso.ts b/packages/sso/src/routes/sso.ts
index bad821fd56..e26d0c3fcb 100644
--- a/packages/sso/src/routes/sso.ts
+++ b/packages/sso/src/routes/sso.ts
@@ -2173,9 +2173,8 @@ export const callbackSSOSAML = (options?: SSOOptions) => {
 				logger: ctx.context.logger,
 			});
 
-			const inResponseTo = (extract as SAMLAssertionExtract).inResponseTo as
-				| string
-				| undefined;
+			const inResponseTo = (extract as SAMLAssertionExtract).response
+				?.inResponseTo;
 			const shouldValidateInResponseTo =
 				options?.saml?.enableInResponseToValidation;
 
@@ -2689,9 +2688,8 @@ export const acsEndpoint = (options?: SSOOptions) => {
 				logger: ctx.context.logger,
 			});
 
-			const inResponseToAcs = (extract as SAMLAssertionExtract).inResponseTo as
-				| string
-				| undefined;
+			const inResponseToAcs = (extract as SAMLAssertionExtract).response
+				?.inResponseTo;
 			const shouldValidateInResponseToAcs =
 				options?.saml?.enableInResponseToValidation;
 
diff --git a/packages/sso/src/types.ts b/packages/sso/src/types.ts
index 1fb20e79d2..7d06c1a0f3 100644
--- a/packages/sso/src/types.ts
+++ b/packages/sso/src/types.ts
@@ -99,11 +99,13 @@ export interface SAMLSessionRecord {
 export interface SAMLAssertionExtract {
 	nameID?: string;
 	sessionIndex?: string;
-	inResponseTo?: string;
 	conditions?: {
 		notBefore?: string;
 		notOnOrAfter?: string;
 	};
+	response?: {
+		inResponseTo?: string;
+	};
 }
 
 type BaseSSOProvider = {