Are you sure that the controller that handles the return action specifically allows that action?
function beforeFilter() { parent::beforeFilter(); $this->Auth->allow(array('ipn', 'returning')); } (or whatever the actual names are) -- Our newest site for the community: CakePHP Video Tutorials http://tv.cakephp.org Check out the new CakePHP Questions site http://ask.cakephp.org and help others with their CakePHP related questions. To unsubscribe from this group, send email to cake-php+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/cake-php