> Is the redirect policy configurable or baked in the code? Would you expect different behavior between an upgraded SP > and a fresh install? https://wiki.shibboleth.net/confluence/display/SP3/ReleaseNotes#ReleaseNotes-OtherHardening -- Scott