Hi, I have to admit I don't know SSO, I had used only "simple" login modules up to now. Digging around the docs, I found that "org.jboss.security.idm.UsernameAndPasswordLoginModule" uses a "provider" attribute ( http://fisheye.jboss.org/viewrep/JBossSSO/dev/trunk/components/jboss_iden... ). If this is not present, it takes the default provider from a "jboss.sso:service=IdentityManager" MBean. Did you change there anything? Maybe you could enhance the TRACE logging so that the LoginProvider logging is output, too. But I fear I cannot help you much further. Wolfgang View the original post : http://www.jboss.org/index.html?module=bb&op=viewtopic&p=4242546#... Reply to the post : http://www.jboss.org/index.html?module=bb&op=posting&mode=reply&a...