anonymous wrote : | 2.) I tried using a custom principal class (UserInformation implements Principal) by specifying the principalClass option for my login module and it was used throughout the login process. however in my web app I always got a SimplePrincipal object, when doing | You have to override the login() method in you CustomLoginModule in order to use your own principal. ex: public boolean login() throws LoginException { if (super.login()) { caller = new CustomPrincipal(getUsername()); return true; } return false; } View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=3988020#... Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...