Hi, please activate logging of the security layer (see "FAQ" in the sticky posts of this forum). Probably your security domain cannot verify the user, e.g. because of some configuration problem. Next time you post XML, please don't copy it from IE, but open the xml file with some text editor ;-). And post only relevant snippets, not the full files. Best regards Wolfgang View the original post : http://www.jboss.org/index.html?module=bb&op=viewtopic&p=4218676#... Reply to the post : http://www.jboss.org/index.html?module=bb&op=posting&mode=reply&a...