Thanks for Jaikiran help. I have read that article to get the idea of the setup for authentication. For the authentication with using password file, ldap and other else, it also include the role (authorization) checking. How can I ignore that role checking and just validate the username/password in my first approach? Thanks for any help. View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4207590#... Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...