> What can I do to debug this issue further? Increase logging to debug for net.shibboleth.idp.consent. Idea is to prompt for consent if the attributes being released have changed, but not otherwise. Tom