> If anyone knows of a good way to resolve this using just configuration > changes, please let me know. Either your system sets REMOTE_USER for you to pick up in the IdP or you need custom code. If that wasn't clear, that's your answer. -- Scott