It took the hours I figured it would, but I did finally write all this up. https://shibboleth.atlassian.net/wiki/spaces/KB/pages/3043917826/IdP+Key+and+Certificate+Management If anything in there sounds rude to SPs: 1. You should see my earlier drafts. 2. They deserve every bit of it and then some. -- Scott