I think everything that can be is now protocol independent. I wrote a provider for protocol plugins: LoginProtocol LoginProtocolFactory URI schemes were refactored, but the old ones are there and deprecated for backward compatibility. I'll probably have to tweak things more once I put in SAML, but the bulk of it should be done. -- Bill Burke JBoss, a division of Red Hat http://bill.burkecentral.com