> OK, I restored my old cfg onto the new servers. I still got 1 customer > reporting an error since yesterday: Which Peter already explained, and as I said, you changed the signing key you're using with that IdP. If you do that in an uncontrolled fashion without metadata changes ahead of time, it's going to break. -- Scott