> My plan is to send myUID to one entity (it's this way for historical purposes) > and myUserName to a different entity. Release policy expressions are based on the internal ID, so there's no conflict. That works fine, IOW. In V3, you can skip the extra attribute and conditionally encode based on the RP also. -- Scott