For the signature, does anyone know what the advantage is in doing... BASE64(DSA(SHA1("[timestamp]::assert_identity::[identity_url]::[return_url]::[nonce]"))) over simply... SHA1("[timestamp]::assert_identity::[identity_url]::[return_url]::[nonce]")? Tom