> Note the extra ":443" in the Destination attribute. Does that extra ":443" make > any difference to the Shibboleth IdP? Yes, we are not obligated to, and do not do, any URL canonicalizaton to compare values. -- Scott