I think I put it the wrong way. What I meant to say is i have mapped | <security:identity authenticate-method="#{loginBean.login}"/> | and the loginBean.login method is something like | public boolean login(){ | boolean succeeded = loginAction.login(); | return succeeded; | } | so this method is called twice when succeeded = false and is called just once when suceeded = true so when i debugged i see that Identity class's authenticate method is getting called twice. Why is trying to call loginBean.login again??? View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4109413#... Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...