> I am just upgrading v2 to v3.3. The relyingparty file has > defaultSigningCredentialRef="Idp cred name". We have 2 idp signing > credentials. The below document suggests to remove <security:credential> > https://wiki.shibboleth.net/confluence/display/IDP30/UpgradingFromV2 No, it doesn't. At least not for the relying party configuration file. -- Scott