LoginModules are designed for authentication/authorization. State information is specific to your application, where as JAAS modules are not designed to handle state information. However this said, you can pass in static information to the module by Map options & Map sharedState. These are set up in the login-config.xml...Check out if passing static information through these maps would be helpful for you or not. Also writing your own CustomLogin module may not help as it is not designed to pass state info. View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4147393#... Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...