Yes you can write your own Login JAAS module and hook it in the same way I detailed in the previous response, if you have different login requirements. Just make sure the JAAS module is managed by tomcat during login to get the proper Principal establishment and SSO token management. btw- are you integrating the LoginProvider you wrote to extract username,password,roles info inside this new JAAS Module? Thanks Sohil View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=3982745#... Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...