Thanks Robert, that's very helpful, though fleshing out the many excercises left to the deployer would be desirable. (Not a criticism wrt your post, of course). Is there sufficient interest to create and maintain a page about that in the shib wiki? Best regards, -peter