Try defining a namespace prefix for "urn:jboss:security-config:5.0" and using the prefix with the flag attribute. | <policy xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" | xsi:schemaLocation="urn:jboss:security-config:5.0" | xmlns="urn:jboss:security-config:5.0" | xmlns:ns="urn:jboss:security-config:5.0"> | ... | <login-module code = "org.jboss.test.TestLoginModule" | ns:flag = "required"> | View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4074276#... Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...