Don't know, but I always feel obligated to note that you no longer have to rely on this anyway. The IdP can chain native LDAP validators in V4 (vs. requiring JAAS to do it, which also worked in V3). -- Scott