OpenSAML appears to have built and tested cleanly with no JAXP endorsement or compile time deps, the IdP is running now. Assume that's clean, I will check in, but if Jenkins freaks out, that's why. -- Scott