> Not sure how the SP would know where to send requests, either. I'm assuming IdP-initiated, and that's just fine for people who can't be bothered to run an SP for testing. -- Scott