AFAICT, metadata filter order is not discussed in the wiki. Does order matter? In particular, when should signature verification occur relative to the other filters? I'm aware of the example in the wiki [1] but I may have edited that lone example at one point, so I don't trust it ;-) Thanks, Tom [1] https://wiki.shibboleth.net/confluence/x/-INe