Thanks Richard I posted this about 15 minutes before finding that above article :-( I've now implemented it although the manual OTP generates an error when redirecting to StoreFront, while the Citrix Push notification doesn't. I've added more detail in the comments at the bottom of the article. Regards Ken Z