Hi Nate, thank you, maybe all we need is just to configure the sessionHook (and undestand how to read the X509 certificate). Thanks againg! -- Sent from: https://shibboleth.1660669.n2.nabble.com/Shibboleth-Users-f1660767.html