> Before I confuse everyone, here is the actual AuthnRequest sent by > SugarCRM... Yes, and it's broken. You can't have a literal ampersand in XML. There's nothing the IdP can do about that, so if you can't fix the SP, you're at a loss. -- Scott