The problem wasn't with the $_SESSION, it was the fact that I was trying to set the $_SESSION variables via a silent POST from an .NET page. I finally figured out how to send the data from the .NET form with an active POST, so the SESSION stuff was actually performed.