I'm sorry, but I don't have the time to read through all the stuff you posted and point of specific corrections or changes you have to make to accomplish this. However, if I understand correctly what you are trying to do, there is an example of what you want to do in the book JBoss in Action, chapter 8, section 8.5.2. You can always download the source code for th book and build target 06 in project ch08 (open the index.html in the base directory for detailed instructions), that target builds a MDB that uses a secured destination. (The book uses a database for the authentication, but you can easily change that to use properties files - other sections of the book tell you how)