> Can somebody confirm that sending pape.max_auth_age is wrong and it should > be pape.auth_time instead? Hi Eddy, The PHP library implements Draft 1 of PAPE, not Draft 2. The same is true of the other openidenabled.com implementations. -- Jonathan Daugherty