We do something similar to Brad. When the user is doing things we have a function that updates a login_security table to show they are still active. We have a Scheduled task that checks the table and clears it once their last active reaches x amount of mins.
To combat the Lockout we used our security question and username in a form ,like a reset password, to allow the user to clear his entry in the login_security. Not sure how you would handle the Flex app making calls with HTTPService or just create the last_active function in CF and tie it into the CF functions supporting the flex app Eric ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to date Get the Free Trial http://ad.doubleclick.net/clk;203748912;27390454;j Archive: http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:310516 Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
