> Thanks again Peter,I went with the second option and > removed "shibboleth.AttributeRegistryResources" entry. I > hope that will not come back to bite me in the future. It won't, but just be aware your resolver config is about 5 times as complex as necessary now, and in turn for whoever inherits it. -- Scott