Hello bhawthorne, well, we faced the same problem currently and found, that even writing of a own login module setting the custom principal into the subject does not succeed - using sessionContext.getCallerPrincipal returns an instance of SimplePrincipal. This is very annoyning, meaning that there is apparantly some code in JBoss, which takes the name of the custom principal and uses it to construct a simple principal. I would be glad to here that my findings are incorrect or that there is a workaround other than using the custom principal simply as wrapper ... View the original post : http://www.jboss.org/index.html?module=bb&op=viewtopic&p=4215616#... Reply to the post : http://www.jboss.org/index.html?module=bb&op=posting&mode=reply&a...