Thank you for the reply. >From what I have read I do not think it is possible if the IdP is served directly from Jetty or Tomcat. It seems to require that Shibboleth is fronted by Apache. -- Sent from: http://shibboleth.1660669.n2.nabble.com/Shibboleth-Users-f1660767.html