Hello, Your post has been quite valuable to me, but there are a few details missing that would help me and others a lot. - I have a custom login module and a custom principal (that extends SimplePrincipal). - I got all the XML configuration files working. - I added @SecurityDomain("MySecurityDomain") to the EJBs that call: MyPrincipal principal = (MyPrincipal)sessionCtx.getCallerPrincipal(); ...and... sessionCtx.isCallerInRole("MyRole"); "isCallerInRole()" works since I added @SecurityDomain. BUT "sessionCtx.getCallerPrincipal()" only returns SimplePrincipal, not my custom principal!!! @NigelWhite: You mention that you had the same problem, then you say you solved the problem, but you don't mention how! Please let everybody know what we are missing! Thank You very much!!! View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=3999804#... Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...