I'm an idiot... it's not "ou"... It's "organizationalUnit" in attribute-resolver. Thanks for your help!!! Mel -- Sent from: https://shibboleth.1660669.n2.nabble.com/Shibboleth-Users-f1660767.html