anonymous wrote : So what you are saying is that from an MDB, we cant access a secured EJB Bottom line is that to access your secured ejb, you need to do a jaas login. My hunch is that as a part of your login process, calls a jms client, which sends a message, which a MDS recieves asynchronously, then tries to access the secured ejb...Since it is asynchronous, it has to re-login to access the secured ejb. This seems convoluted. View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4175332#... Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...