I'm working on broker mappers now. IDP chaining isn't very useful, IMO, if role information can't be imported. -- Bill Burke JBoss, a division of Red Hat http://bill.burkecentral.com