> I'm using the same string to generate that - and it looks the same as on the > old IdP (the eduPersonTargetedID) It's not. The string may be the same, but the value is a triple, and one of the triple components is your entityID. If it worked, the SP that "worked" would have a major bug. -- Scott