> Could you tell me where the examples you,ve given are? Literally in the software as delivered as well as in the wiki. Take the attribute lookup portion of the example configuration out and you're left with step up authentication with two factors. -- Scott