..while it does lead to errors (as it SHOULD) in the other application deployed to the same JBoss container. Essentially, the auth-method I specify is not getting picked up for one of the applications. I can even remove the entire element (auth-method) but still the authentication goes through except that it picks up FORM based by default. Any thoughts? View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4082776#... Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...