> Any additional specific logging I can turn up on the IdP side? I don't know, pretty much every conceivable non-Spring thing. Definitely the opensaml storage stuff on TRACE. -- Scott