Hi All, I'm looking at the following document where it details how to import ukfederation.jks into the metadata. I've been having problems with SPs' attribute requests failing on client cert authentication and I suspect it's because I'm not doing this. http://www.ukfederation.org.uk/content/Documents/SetupIdP As the 2.0 IdP doesn't have a "metadatatool" that I could find, I was wondering if anybody else using a 2.0 IdP successfully has an alternative guide for setting up any UK federation specific things? My IdP's working with TestShib and the test SP at target.iay.org.uk, but pretty much everything else is getting these certificate errors. Thanks for any advice you may have Nick Howes IT Services University of Warwick