Ok, I found solution. First of all - the jboss.xml must be in META-INF/jboss.xml . I had it in JBOSS_HOME/server/default/conf. in jboss.xml I just tell to JBoss to use seecurity domain : <security-domain>kusssdemo-policy</security-domain> I did not defined <security-role> in <assembly-descriptor>, the are taken from LoginModule View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4036682#... Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...