Hi, vickyk. Thank you for your very quick reply. It was right over money. I've pored over jboss manuals for hours and googled intensively, but still this relatively simple solution hasn't presented itself. To make the solution work I used your suggested configuration. The only change I had to make was add this line: <module-option name="unauthenticatedIdentity">nobody</module-option> Again, thanks! View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4095939#... Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...