Factotum is some guy in the room that, even though you have the phone, you keep asking what to say next on the line to get authentication to happen. Is this a bad analogy? Factotum is available on the client side during authentication via a library we can use to talk to it. When we get an "afd" we basically write and read from it asking our local factotum what to say next? Is this where the proxying happens? If so I think I get it... otherwise no :-) Dave