> Note that it's possible there's no certificate coming in at all also, > unless the connector is configured to require them. *facepalm* That was it. Everything but clientAuth="true" was configured correctly, and it probably would have taken forever to look into connector config had you not mentioned it. Thanks, M