> ACS had to be configured in IdP, not in SP. That's what metadata means, yes. > This was established by using FQDN handler URL in SP configuration: You should NOT do that, in virtually any case. That's a sign you have a misconfigured system to begin with. -- Scott