(Also, unrelated, do NOT use initial-authn. Evil, bad, horrible, dead, mistake, move on. Not supported come 4.0. I just happened to note the flow that was running in the error message.) -- Scott