Ok, took a quick look. Your problem is related to this: The JAAS module and LoginProvider should both pull identical username and password data. Hence, its best to use a JAAS Module that actually uses the same LoginProvider to get username/password information from the datastore.. The standard JAAS module you are using is pulling username nick10 and password nick10. Is the LoginProvider you hooked in providing the same data (username=nick10 and password=nick10). Easiest way to test this is whatever values for username=nick10 is pulled from the LoginProvider, make those same values in user.properties and test it. Thanks Sohil View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=3983219#... Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...