> This is the curious thing. It's only declared in the relying-party.xml once, and > there is only the one equivalent metadata file for it. And there sure is nothing like "validUntil" in the metadata-file holding the EntityDescriptor https://sp.ezproxy.domain.ac.uk ? Kind regards.