[jboss-user] [JBossWS] - User authorization in Web Service

How to setup user authentication in a web service? I have something like: @Stateless @WebService(endpointInterface="com.m1.sample.core.IRoleMgrWebService") @SecurityDomain("mydomain") public class RoleMgrEjbWeb implements IRoleMgrWebService { ... @AllowedRoles("role") public void doSomething() {...} } The client is like that: URL url = new URL("http://127.0.0.1:8080/RoleMgrEjbWebService/RoleMgrEjbWeb?wsdl"); QName qname = new QName("http://core.sample.m1.com/";, "RoleMgrEjbWebService"); ServiceFactory factory = ServiceFactory.newInstance(); Service service = factory.createService(url, qname); IRoleMgrWebService ws = (IRoleMgrWebService) service.getPort(IRoleMgrWebService.class); ws.doSomething(); What should I write to pass user's credentials? I tried something like: URL url = Thread.currentThread().getContextClassLoader().getResource("auth.conf"); System.setProperty("java.security.auth.login.config", url.toString()); javax.security.auth.login.LoginContext lh = new javax.security.auth.login.LoginContext("aloe", new AloeLoginHandler("ike", "1")); lh.login(); But that works only if I call EJB's not service. Btw, is there any documentation about authentication and authorization in jboss web services? View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4068118#... Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...