You will know whether a particular was needs form or basic auth. Right? In that particular war, under WEB-INF/context.xml, provide an authenticator that extends FormAuthenticator or BasicAuthenticator. http://lists.jboss.org/pipermail/jboss-cvs-commits/2006-September/006921.... That is all you will need. As u see in the authenticator, the realm.authenticate call will invoke the jboss realm - do the jaas login and do any container related stuff. View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4000174#... Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...