On 08.04.19 15:52 Cantor, Scott wrote: > If the IdP itself doesn't support artifacts it shouldn't choose that binding, so the order isn't important, it would simply skip that endpoint. You're right Scott - it seems that I had the <ArtifactResolutionService> left over in my idp-metadata.xml from IdP 2.x, but it was disabled by default in IdP 3.x. Manuel