Update: I have my own login module for doing Single Sign-on. That part works. What doesn't work is the ability to get UserProfile information from the Active Directory server. Using this forum, the closest problem I could find is: http://www.jboss.org/index.html?module=bb&op=viewtopic&t=135866 This article indicates that what I want isn't possible because this isn't supported in Synchronizing* login modules. So the only way the delegating UserProfile works is by using the IdentityLoginModule? I thought the SynchronizingLoginModule was supposed to handle allowing different login modules to be used and then it would handle all the portal voodoo by adding it to the end of the login chain. View the original post : http://www.jboss.org/index.html?module=bb&op=viewtopic&p=4257732#... Reply to the post : http://www.jboss.org/index.html?module=bb&op=posting&mode=reply&a...