> There are subsequent > references in web.xml to idp.home in web.xml, so it seemed logical that it > should precede them. Also FWIW, after re-reading the Tomcat docs, I think context.xml can accept <context-param>s to avoid modifying web.xml. But I'm not sure, and plan on giving that a try when I get back to it.