On 11/16/12 3:25 PM, "Yaowen Tu" <yaowen.tu at gmail.com> wrote: > >Then what is <errorURL> in <RoleDescriptor> used for? Whatever you want to use it for. -- Scott