No JBoss Negotiation was intended to be fully integrated with JBoss AS. One of my objectives was that I wanted full JAAS integration so after the authentication the principal and roles would be available to all containers with JBossAS. At the same time the application being secured should be unaware that it is SPNEGO based. The other application servers you mention may have their own implementations available you can switch on as well. View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4170034#... Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...