Thank you, Scott and Paul! For anybody else who may be curious, adding the following line to the 'shidb.logger' (SP) seems to do the trick: log4j.category.Shibboleth.SSO.SAML2=DEBUG, shibd_log Cheers, Rob Chevalier