> This is my end result: > > <Host name="sp.example.com" authType="shibboleth" > requireSession="false" requireSession defaults to false, so that's redundant, but fine. > exportAssertion="true" > You do not need that and shouldn't set it. -- Scott