Normally JAAS requires the username and password to complete the authentication/authorization, what if the additional login information needed, for instance company name, ssn. the search in the forum found that the additional login information could be concatenated with either of the username/password. are there any other ideal approach to satisfy the requirements? thanks in advance for any recommendations View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4096325#... Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...