(decided to start a new thread rather than hijack the AuthnRequestProtocol one) Tom (S), While you are in your travels, have you found the specs for the Shibboleth Metadata format? This was still around when I started with the project, but it must have been close to end of life then (like OpenSAML 1.1 is now....) /R