Hi, I can now recreate this problem on with my testsp talking to my test idp. I set the encryptAssertions value to "always" for the test sp. Any ideas on what I should try to track this down? Should I try specifying a different encryption value in the test SP's metadata? Joy