> Thanks for the signpost. I have added the following to relying-party.xml: You're probably trying to attach it as a setting about the SP, but that's not it, it's about the proxied IdP. That's the relying party in this scenario. -- Scott