Try this <application-policy name="EncryptDBPassword"> | <authentication> | <login-module code="org.jboss.security.auth.spi.UsersRolesLoginModule" | flag = "required"> | <module-option name="usersProperties">props1/users.properties</module-option> | <module-option name="rolesProperties">props1/roles.properties</module-option> | </login-module> | <login-module code="org.jboss.resource.security.SecureIdentityLoginModule" flag="required"> | <module-option name="username">scott</module-option> | <module-option name="password">-170dd0fbd8c13748</module-option> | <module-option name="managedConnectionFactoryName">jboss.jca:service=LocalTxCM,name=OracleDSJAAS</module-option> | </login-module> | </authentication> | </application-policy> You have to use the multiple login modules for authentication . You would be having the web tier which would be using the DataSource , the subject would be populated using that secured web tier . If you don't have secured web tier then the Login module would not populate the security credentials and thus you would get the exception what you are seeing ..... View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4095881#... Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...