Ok, I ditched the "impersonation" client and now impersonate is done through the admin console. There is a "Impersonate" button in the user-list screen next to each user, then there is an Impersonate button on the user detail page. If the user is in the same realm as the admin, the admin is logged out and the browser is redirected to Account.applications page. If the user is not in the same realm as the admin, a new browser tab is popped open and displays the Account.applications page. I still need to do admin events for this, then I'm done. Bill -- Bill Burke JBoss, a division of Red Hat http://bill.burkecentral.com