Aah, I see. Regarding the authenticator.authenticate method, when you add roles to the "Set roles" in the method argument, where in the debug would you look to see that it's actually being added correctly? I checked the identity component but there's no roles property there...where else do I look? (I'm having some troubles that seem to be related to these roles...) View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4011718#... Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...