> I tried it both as a direct child of <web-app> (where the other context- > params are) and as a child of the <servlet> element definition for > net.shibboleth.idp.authn.impl.RemoteUserAuthServlet. The former definitely won't work, this isn't a global parameter. > Yet, still... If that's what you're going by, that isn't relevant. -- Scott