> It looks as though they're using incorrect metadata for our IdP. > What else might cause this? Nothing likely. Nothing at all really, offhand. -- Scott