SunMscapi extends Provider and not implements login and logout like AuthProvider/pkcs11. I could see that this is feature native code embedded. My use case is: login application with SunMscapi applet signed the user enters pin ok, inside I need to sign some document but the user must to enter pin again again (here I need to logout the capi session) since token inserted in usb port. If a remove a token the pin is asked again is ok but without remove the same session is used and de pin is not asked after the autentication. The user wants so I need to change do pkcs11 again I see or create another Provider extending SunMscapi.