On 3/8/21, 3:01 PM, "users on behalf of Jehan PROCACCIA" <users-bounces at shibboleth.net on behalf of jehan.procaccia at tem-tsp.eu> wrote: > so should I apply the setting in the DefaultRelyingParty ? Anywhere you want, but if it doesn't apply to the requests that are checking it then it won't do anything. -- Scott