Hi, please provide more details on your configuration (snippets of web.xml, jboss-web.xml, login-config.xml). The wiki lacks the most important part: JBoss specific configuration of the security domain through "login-config.xml". I don't have a "perfect" link for this, but google might help. For JBoss 5.x, you can also use a file "xxx-jboss-beans.xml": http://server.dzone.com/articles/security-features-jboss-510. Hope this helps Wolfgang View the original post : http://www.jboss.org/index.html?module=bb&op=viewtopic&p=4259331#... Reply to the post : http://www.jboss.org/index.html?module=bb&op=posting&mode=reply&a...