> Here's the entire shibboleth.SAML2NameIDGenerators section of saml- > nameid.xml: Whatever you're using, I don't think it's that, the log just doesn't reflect that. > Was there something else I needed to add, or is this from an older version of > the config? Should it be a <bean /> element and not a <ref /> element for > some reason? No. -- Scott