Can I change the session_state in the access token (and refresh token) to point to ClientSession id instead? Right now it points to the user session id. -- Bill Burke JBoss, a division of Red Hat http://bill.burkecentral.com