> If it is deprecated, why is it still listed there :)? ePTID is an abstraction. In SAML 2, it's intended expression is in the NameID, from whence the concept was derived. The terminology makes it impossible to tell what people really mean or expect, and that's one of the reasons for getting rid of it at this stage of things. -- Scott