Bug is fixed. Your handlers.ini has, I suspect, both the new-style /Validate path defined and theose legacy paths for compatibility, and the combination of the two tripped a bug. The SAML Hub plugin build for tomorrow will have the fix. Thanks, -- Scott