On 1/9/19, 10:28 AM, "users on behalf of Paolo Smiraglia" <users-bounces at shibboleth.net on behalf of paolo.smiraglia at gmail.com> wrote: > Do you think this feature could be introduced by relying on Extensions No, because just requiring an InResponseTo would mean nothing without the ability to know what the original request ID was to begin with. -- Scott