> And why not? I send user agent to url i get from /Login, somehow post the > assertions, get shibcookie, use shibcookie to get user attributes from > /Session. No web server needed... Then please don't expect support, and understand that what you're doing is almost certainly too fragile to keep working and likely insecure. -- Scott