Shane Thanks for the tip, it worked. I added method in Authenticator class as below: public boolean isLocked() { ... return boolean; } and then added following page navigation rule navigation from-action="#{identity.login}" rule if="#{not identity.loggedIn and authenticator.locked}" redirect view-id="/error.xhtml"/ /rule rule if="#{identity.loggedIn}" redirect view-id="/home.xhtml"/ /rule /navigation Although it took me a while to figure out that 'locked' in 'authenticator.locked' is supposed to a method 'isLocked()' in its class. View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4087488#... Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...