Thanks all for the further information and investigations. I was also able to reproduce the issue via JSON metadata. With SAML metadata it seems to be working in the same way for both SAML and OIDC. I've filed it as a bug: https://shibboleth.atlassian.net/browse/JOIDC-294 BR, Henri.