On 4/6/15, 2:35 PM, "Koch, Ken" <ken at wustl.edu> wrote: >The SP metadata I'm loading on my IDP does have a cert present. It's not usable, so either that's not the metadata it's looking at or it's got a signing-only use attribute. -- Scott