Hello anil, thanks for your advise. May be i've implemented the false solution for my requirement. The requirement is to authenticate a user with its name, password and a mandator. This will be handled by my custom callbackhandler and a custom principal which holds the mandator as a member. I had seen the way like SecurityAssociationCallback callback = new SecurityAssociationCallback(); | Callback[] callbacks = { callback }; | String username = null; | try | { | callbackHandler.handle(callbacks); | | Principal principal = callback.getPrincipal(); | in org.jboss.security.srp.jaas.SRPCacheLoginModule and reused it. Later the mandator will be read from my custom principal. What would you suggest to fulfill my requirement ? Should i configure my custom callbackhandler in the JaasSecurityManagerService ? Unfortunately i've found nothing about how to configure it only for my application vs. server-wide View the original post : http://www.jboss.org/index.html?module=bb&op=viewtopic&p=4218297#... Reply to the post : http://www.jboss.org/index.html?module=bb&op=posting&mode=reply&a...