> The default would be to have a "hidden, service-space only" > authentication service. If principals make sense as content for a > particular application, then you expose them through a User Folder. Like, if you want to have users controlled by workflow? /Magnus