> If you implement a custom CredentialsToPrincipalResolver you can return > a Principal with an Id other than a NetId. like the one here I guess: http://www.ja-sig.org/issues/browse/CAS-373 [let's not waste to much effort in re-inventing things all the time :p] -- Velpi