> So if this AttributeFilterPolicy will be deprecated please give me a hint which > one would be recommended to be used instead? You have to use a script, authentication is too complex to boil down to "check a string". I'll probably look at adding one that can automate testing of custom Principals but that doesn't exist today. -- Scott