This is likely a dumb question. The certificate in the IdP metadata for signing and encryption, do folks use a signed certification (by a CA) or a self-signed certificate? Don -- D o n a l d L o h r I n f o r m a t i o n S y s t e m s J a m e s M a d i s o n U n i v e r s i t y 5 4 0 . 5 6 8 . 3 7 3 0