> How can I use the same method on Shibboleth 3.2.1? I would start here. https://wiki.shibboleth.net/confluence/display/IDP30/JAASAuthnConfiguration Get it working with JAAS and then when that’s happy you can consider other options /Rod