hi, yes, that value should be for the correct/legitimate domains you own...and are used in scoped attributes. if you use Federation then those scoped values will be checked in your metadata. in this regard the SP is right :-) alan