I don't have time to make a long answer now. but : you need then to read the doc of : - jboss and the security processing and settings - tomcat and the security processing and settings - JAAS ... - SSO (single sign on), etc... on jboss... read things, understand the minimum that will allow you to set your configuration properly... think of one thing : this is security... so it is worthwhile to know quite well what you are doing... even if you can't learn everything in so little time... but at least global things and how to properly configure you login module... hope it helps... View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4138909#... Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...