Yeap.. i have fix this bug... you must download and compile SSO from the trunk.. i can help you to do this... and test it with any DS.. Let me know if you are using the trunk version (you must do an update)... Then you must find a new class named HashAlgorithmRemoverLDAPIdentityProvider.java.. this class is the solution of this problem.. Let me know if something goes wrong... I recommend you to only try local sign on with this class.. Because another fix is needed to cross domain sign on.. (i already wrote this but no do the commit yet...) Thanks! View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4147995#... Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...