> My reading (for what its worth) would suggest that an additional Audience > element may be added at the IdP's discretion. Is this incorrect? If not, then > why is adding the element that Andrew suggests a bug? IdP's discretion, not SP's. No SP has any business asking for one in the context of SSO alone. -- Scott