You could provide your own implementation of login() instead of using's Identity. That way you can customize the messages however you want. e.g. | Identity.instance().authenticate() | I'm with you in thinking exposing login() in the design of the API with hard coded inputs as you mentioned was a bad idea, especially when used in examples where people think it is some sort of pattern. View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4009843#... Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...