What is the purpose of this? We have adapters to do this kind of stuff. A LoginModule doesn't remove the need for an adapter as you still need to extract and propagate the token in the protocol layer. I've already been down this road and it is a dead end. -- Bill Burke JBoss, a division of Red Hat http://bill.burkecentral.com