On 1/18/17, 8:07 PM, "users on behalf of Scott Koranda" <users-bounces at shibboleth.net on behalf of skoranda at gmail.com> wrote: > Can you think of any reason for a deployer with this use case > to not configure that on the DefaultRelyingParty? Probably not since the whole point is that every SP is impacted if the user opts in. -- Scott