Here are a few things that might be of help. I gave a presentation on building a custom portal at JBossWorld last year. It includes some security information and other things you might find of help if you plan to go the portal route. http://www.jboss.org/community/wiki/CustomPortal Here are some forums posts that discuss portal security gotchas: http://www.jboss.com/index.html?module=bb&op=viewtopic&t=98753 [url]http://www.jboss.com/index.html? module=bb&op=viewtopic&t=115712[/url] Finally, the non-free resource: JBoss in Action contains a lot of security information about JBoss AS, for web apps and various services. It also includes Portal security and building a custom portal. http://www.manning.com/jamae View the original post : http://www.jboss.org/index.html?module=bb&op=viewtopic&p=4235809#... Reply to the post : http://www.jboss.org/index.html?module=bb&op=posting&mode=reply&a...