Peter, To go back to the front channel. The IdP doesn't have anything yet. The SP uses pairwise-id and subject-id so you might want to start there I just put in https://issues.shibboleth.net/jira/browse/IDP-1306 to add 'something' to attributre-resolver-full.xml for V3.4 Please feel free to add stuff in there. /Rod