> BUT: server variables are not set! Do you mean server variables (which were never set in Shibboleth2) or header variables (which were). In V3 the IIS plugin sets the former and needs to be explicitly told to use the (less secure) latter. Rod