i am having exactly the same problem of associating the authenticated logincontext for the duration of the httpsession. i have successfully initialized a logincontext and login method call. but i am still prompted for my username and password each time i try to access a secure resource/page. i believe my authenticated logincontext is not associated with the httpsession. Any contributions !! View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4079658#... Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...