I don’t know what any of that is supposed to mean, but there is no way on earth that you are modifying a signed object and getting a Shibboleth SP to accept it unless what you're modifying isn't part of the signature. -- Scott