Indeed, I have the 'ph:PrevousSession' LoginHandler commented out in my handler.xml. I uncomment it , and restart idp & SP. Now it uses the existing IDP session when I access the second SP. Thank you very much for your help!! Regards, Lanxin