> But... where do I actually specify the entityID value? You don't. The IdP gets it from the request. What you are telling the IdP is "when someone comes along from a relying party, get the entityID from the request it presents you and use this configuration to get the metadata for it in a just in time manner". /Rod