Box.net integration with shib 2.x

[Rich Graves]

Could someone do my homework for me and share a working relying-party.xml snippet for box.net + shib 2.x, as well as any history as to what parameters box might have needed to tweak on their end?

Our Box support tech and I are equally bewildered at the large number of possible permutations of entityID="box.net" (apparently their default) versus entityID="https://services.box.com/sp" (included in InCommon metadata), to encryptAssertions and encryptNameIds or not, etc. We haven't found a combination that works yet. We are still in trial mode so all I'm getting is (apparently) low-priority email support.