You've obfuscated the log, but: > - Message Handler: No metadata returned for > https://test-sp01.XXXXXXX/shibboleth in role Would indicate that the IdP cannot see the SP's metadata. You need to make it available in a MetadatProvider Statement R