Isn't the IDM API turning more into a Federated JDO project than an actual IDM API? I"ve found at least one JPA/JDO implementation that supports an LDAP store, but haven't found one yet that does federation. -- Bill Burke JBoss, a division of Red Hat http://bill.burkecentral.com