I know how to invoke a protocol handler at the SP, something like this: https://app.example.org/Shibboleth.sso/DS?entityID=<url_encoded_entityID> but how do I cause an AuthnRequest to be sent to a specific SingleSignOnService endpoint at the IdP? Thanks, Tom