On 12/15/15, 6:29 PM, "users on behalf of Emilio Penna" <users-bounces at shibboleth.net on behalf of emilio.penna at seciu.edu.uy> wrote: > >I see that net.shibboleth.idp.authn.impl.X509AuthServlet sets the >certificate in >subject.getPublicCredentials().add(cert) That's how, you get it from the authenticated Subject's principal collection. -- Scott