Here are snippets from my Flex code, and my Acegi configuration. If you notice, what we did, was set up Acegi, so it's successful and unsucessful authentication url's point to XML documents that contains the result of the login.