On 7/8/15, 8:21 PM, "users on behalf of Joel Leibovitz" <users-bounces at shibboleth.net on behalf of joelleobovitz at gmail.com> wrote: >Is there to find value sent by the SP - either from logs or headers? It isn't sent. That's why use of PKIX is impossible with that binding, you either know the key or you don't. -- Scott