This is essentially a SAML question, so I would advise using the OASIS saml-dev list for it. Or the Shibboleth dev list if you're talking about using OpenSAML. -- Scott