Thought I would answer my own question again now that jbossws 1.0.4.GA (http://labs.jboss.com/portal/jbossws) is out. They fixed the issue with the transportGuarantee parameter with the org.jboss.ws.annotation.PortComponent annotation. When I upgraded things started working. | @PortComponent(authMethod="BASIC", urlPattern="/lists.ws",transportGuarantee="CONFIDENTIAL") | @RolesAllowed("BLDADM") | @SecurityDomain("BuildLinksWs") | I no longer had to create my own web.xml (nor jboss-web.xml) files. View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=3990863#... Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...