My bad... The SFSB from which I was accessing the Subject had the @SecurityDomain annotation commented out. View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4041046#4041046 Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4041046