Not necessarily. ECP does allow the display of a UI, in fact an ECP client can be just a browser with a plugin. So, what probably needs to happen is that, for non-browser ECP clients, the isPassive flag will need to be set in the authn request. On 11/23/11 5:41 AM, Halm Reusser wrote: > Are the ECP requests comparable to "isPassive" requests?