JBoss expects to find the user's roles in a group called "Roles" instead of just adding roles to the Subject, add a Group o roles caales "Roles" | java.security.acl.GrouprolesGroup = new SimpleGroup( "Roles" ); | rolesGroup.addMember( | new SimplePrincipal( "ExampleRole" ) ); | subject.getPrincipals().add(group); | View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=3985776#... Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...