Using OAM session variables to force URL access sequence

Hi,

I hope some one can out there can throw a few ideas.

I am using OAM 11gR2PS3

I am protecting an application with atleast 2 resources - say Resource_A and resource_B

I want to make sure that resource_B can only be accessed after successful operation by Resource_A.

i.e. I am building a custom First Time Login app, users are redirected on first login to resource_A , asked a few questions and then sent to resource_B if they answer correctly.

Resource_A is a app that does a few complex things as a result we cannt move as custom auth plugin.