Hi, to my understanding, the user has to be authenticated even when accessing unsecured methods, because you specifiy a security domain in "jboss.xml". I found a rather old thread, where someone tried to achieve the same as you do: http://www.jboss.org/index.html?module=bb&op=viewtopic&p=3960447, but through annotations. Maybe you find helpful information. And maybe the limits of this threads are no longer present. Best regards Wolfgang View the original post : http://www.jboss.org/index.html?module=bb&op=viewtopic&p=4260331#... Reply to the post : http://www.jboss.org/index.html?module=bb&op=posting&mode=reply&a...