Hi, Yes it possible but there are problems with this. I solved this using kerberos tickets from AD negotiated by custom authenticator and handles by custom login modules (with callback mechanism). First U must describe Your environment, my solution was made on JBOSS 4.05 GA, newer servers wasn't tasted but should work. View the original post : http://www.jboss.org/index.html?module=bb&op=viewtopic&p=4223625#... Reply to the post : http://www.jboss.org/index.html?module=bb&op=posting&mode=reply&a...