> On the IDP, is it possible to configure a second recipient endpoint that has a different domain name, allowing the IDP > to pass the check causing the error above? No, but as with anything in Java you can always write a servlet filter to fake anything. -- Scott