Sure!, Here is the jass configuration. <!-- Login to MyApplication web application --> | <application-policy name="MyApplication LoginPolicy"> | <authentication> | <login-module code="org.jboss.security.auth.spi.UsersRolesLoginModule" flag="required"> | <module-option name="usersProperties">MyApplication -users.properties</module-option> | <module-option name="rolesProperties">MyApplication -roles.properties</module-option> | <module-option name="restore-login-identity">true</module-option> | </login-module> | </authentication> | </application-policy> hope this helps -ashwini View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4126859#... Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...