> The NameIDPolicy node is missing the ending /. Yes, but it included the closing element. > So SAML Tracer showed it there, but a separate decoding does not. I think the tracer just collapsed it, it must be parsing it if that's the case, not just displaying the raw XML. That seems odd too. -- Scott