JBoss development, A new message was posted in the thread "Auth Cache is not flushed after logout": http://community.jboss.org/message/529142#529142 Author : Harry Yan Profile : http://community.jboss.org/people/seekerYan Message: -------------------------------------------------------------- sorry for the late response, just came back from vacation. Yes I did in the same order as you did, but it failed due to the invalid session after the webAuthentication.logout() was called. -------------------------------------------------------------- To reply to this message visit the message page: http://community.jboss.org/message/529142#529142