> Yes, I understand that this is not feasible when sending responses with > attributes etc. But is it illegal from the spec? It's undefined in the *profile*. The IdP preconfigures the allowable bindings it supports in various directions. If you really wanted to get it to respond, yes, you could. -- Scott