Where's the subscription for the event? Shouldn't it be in Application_Start like in example here: http://msdn.microsoft.com/en-us/library/system.identitymodel.services.sessionauthenticationmodule.aspx ?