Authentication is performed within the context of a JAAS login, so we are restricted by the contract of the LoginModule.login() method, which specifies that only a LoginException be thrown if authentication fails. Unfortunately, LoginException only allows a message to be specified and no actual cause, otherwise it would be possible to extend Identity and override its login() method to unwrap the actual exception and re-throw it. What you could possibly do as an alternative is store the account status in the request context, then create navigation rules in your pages.xml to redirect to certain pages based on that status. View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4086121#... Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...