When Using a SAML V2 Idp Initiated Single Sign On Scenario, the SAML Reponse that gets generated by PicketLink contains an InResponseTo attribute.

SAML Spec says "An unsolicited <Response> MUST NOT contain an InResponseTo attribute, "