It would appear that PAS never calls IRolesPlugins on Anonymous users -- is this on purpose? (I was looking at a plugin that set roles based on the remote IP address, etc. and they never happen for Anonymous users...) Marc