Obvious question: You *have* enabled the module, right? [1] Rod [1] https://shibboleth.atlassian.net/wiki/spaces/IDP4/pages/1265631619/RemoteUserInternalAuthnConfiguration#Enabling-Module-(V4.1+)