> I don't see how session tracking would work without server-side storage. I > have to grab the IdPSession on the back channel in order to add the > CASSPSession to it. Do you see how that would work? Why wouldn't you add the session when the ticket is issued? That's how we do it with SAML, regardless of which binding is used. -- Scott