> I want it to kick back to the login page or to an error page and not > ever establish a session on the SP at all. See the Sessions attribute "sessionHook" and the Attribute Checker handler added in 2.5, they address that use case. Or your application can/should do it. -- Scott