> Can I achieve something like this? Can you? Yes. Should you? No. Will it work with any IdP you don't control? No. So what's the point? If you control the IdP anyway and don't want to use it, just get rid of the IdP and connect the application directly to whatever authentication store you already have. -- Scott