> OK, would that be a reasonable feature request to submit? It's a bug. > Is there a reason that shibboleth doesn't just default to a cookie limit of 0 > instead of 25? Why would you not want to remove all instances of the state > and post cookies on a successful login? Because that would be a bug, thanks to tabs. -- Scott