John, what would be the various integration points in ESB? From my recollection, the ESB message can contain security context. So an action can be an integration point. Then there are the business containers. There, we probably utilize Application Server security. For JMS, I guess we can utilize standard security. I would like to see where are the integration points in the ESB machinery, where security can be applied, that is not provided by any containers such as WS, EJBs, JMS etc. View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4186539#... Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...