Hi again, Did you upload Metadata generated by your Service Provider (Keystone) to testshib Identity Providers? How did you generate /etc/shibboleth2/shibboleth2.xml file? Did you read http://testshib.org/register.html ? cheers, Marek