Overridding Principal in: protected void Application_PostAuthenticateRequest(object sender, EventArgs e) Instead of protected void Application_AuthenticateRequest(object sender, EventArgs e) In Global.asax.cs worked for me in an ASP web application

Tim