> From an XML perspective this seems allowable -- is it permissible within an IdP to your knowledge?" Absolutely. I confgured an IdP up to do just this yesterday (contact me off list if you want me to do any tests). I am not sure whether any UK sites are currently using this in earnest, but I know of at least one collegeate university that was considering using it to desribe which college a member was at (so someone might be [log in to unmask] and [log in to unmask] and [log in to unmask]) Rod