> is there any way to access attributes derived at LDAP login stage in the > attribute resolution stage? I believe they're preserved in the LDAP response data stored in the Java Subject, in which case, yes, they can be accessed via scripts in the resolver later. -- Scott