> When I send a request to a shib3 IDP without an > AssertionConsumerServiceURL element from an SP supporting only one ACS > endpoint, I would expect that the IDP would take the ACS URL from > metadata. However, what I see in the log file is: Bug, probably. -- Scott