> What we are trying to understand is as to why the session is not expired at > 11:46 GMT? In part probably clock skew. The actual caclulation of an expiration is done by adding clock skew to SessionNotOnOrAfter. A default would mean at least 11:49 GMT before it would be invalid. -- Scott