On 9/17/19, 8:27 AM, "users on behalf of Malo Toudic" <users-bounces at shibboleth.net on behalf of malo.toudic at kereval.com> wrote: > The signature of the ArtifactResponse indeed has an empty value. And you can prove that with the IdP's log? Because I really don't buy it. -- Scott