I don't know who put the StandardSessionFacade in the session. The stack trace you show is from the part of the request cycle after the application has done whatever it does; the fact that there is no application code in the stack trace means nothing. Suggest you either 1) look at it in a debugger, or 2) code up an implementation of javax.servlet.http.HttpSessionAttributeListener and monitor what's getting bound to the session. View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=3963655#... Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...