Is there a way in shibboleth idp 3 to set SessionNotOnOrAfter so that a service provider will timeout its session based on the idps response? -- Benjamin Pottier Systems Engineer The Andover Companies (978) 475-3300 x321