Hello, I use JBoss 4.2.2. I need a custom Web Authenticator with a custom Login Module. I think that my configuration is correct. My Authenticator is called, and in this one, when I call the authenticate method of the realm, my login module is called. The call is the following: Principal principal = context.getRealm().authenticate(ntlm.getUsername(),""); The problem is, that my principal is null after this call. My Login Module extends AbstractServerLoginModule. The login() call is successful and the attribute "loginOk" is set to true. The method getIdentity() is never called. Thank you for the help. View the original post : http://www.jboss.org/index.html?module=bb&op=viewtopic&p=4225675#... Reply to the post : http://www.jboss.org/index.html?module=bb&op=posting&mode=reply&a...