> Can anyone advise me how to relax the IDP session filter security to ignore the scenario where the client may be routing via multiple public IP addresses. https://wiki.shibboleth.net/confluence/display/SHIB2/IdPProxyClustering See under “Inhibit the consistent address check” Others are better placed to comment on the security implications of this.. /Rod