Try to simplify so that you can see where your problem is. Remove your custom login modules, and then add them back one at a time (in login-config.xml). When I placed the IdentityLoginModule before my custom LoginModule, that configuration worked for me, and the dashboard link then functioned correctly. I performed additional tests where I restablished my original configuration (to make sure that my change is what fixed the 403), and the 403 error returned. I did not change anything else in my environment, except for what I noted. You have THREE login modules involved. I only have two. You may need to experiment a little bit further to find the arrangement that works for you. Hope this helps. View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4089445#... Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...