For the Shibboleth IdP v2.4.3 is the latest info regarding use of SHA-1 vs. SHA-256 still located here: https://wiki.shibboleth.net/confluence/display/SHIB2/Changing+IdP+Signature+Method+Algorithm I see the date on that page is 9/9/2013 and IdP v2.4.3 was released more than a year later, so I'm just wondering... Thanks, Max