Perhaps this might be a little better: Description 'war-security' Security configuration that is global to the jboss-esb.xml file. These configuration settings are shared for all http-providers and EBWS that are defined in jboss-esb.xml. | <globals> | <war-security method="BASIC" domain="JBossWS" /> | </globals> | View the original post : http://www.jboss.org/index.html?module=bb&op=viewtopic&p=4257668#... Reply to the post : http://www.jboss.org/index.html?module=bb&op=posting&mode=reply&a...