> Externalizing the <ApplicationDefaults> or specific <ApplicationOverride> elements is possible, as is pointing it at maybe a directory to load overrides from. Parity with Apache virtual hosts sounds nice. Maybe scan vhosts.d/*-shibboleth2.xml so the shib configs can live next to Apache's (vhosts.d/*.conf). Tom