Thank you Darran, our use case is a remote client calling the ejb and I see our login module for the remoting connector is only called once per user (as expected) but the module for the ejb security domain is called every time. We are not disconnecting between the calls.The only way I know how to disconnect is closing the client jvm (which is i my eyes another issue). I have tested this with latest build #772.