authN POST question

[Cantor, Scott]

> This was the first metadata they gave me and when that failed they sent it
> again sans the redirect stanza.  My version of Shib is too old and does not use
> the SSO tag.

They may have sent you that, but you're still using the one with the Redirect endpoint, that's simply the only possible reason it can be doing that.

The setting to override it is in the SessionInitiator, but your problem is simply the metadata.

-- Scott