Nipun- from the sounds of the scenario, looks like for some reason the token issued when logging into application 1 is not being trusted when logging into site 2,3,4. The trust server is a component of the federation server. Couple of things I can suggest is: If all the four sites are running in the same domain, make sure there is only one instance of the Federation Server running on this domain (Federation Server has the trust component). Also, in the jboss-sso.sar/conf/sso.cfg.xml, make sure all four sites are pointing to this Federation Server for the trust component. Also can you provide details on what browser on which OS and what version you are using to test this. Also, did you try running Application 1 in Vista on JBoss-4.0.3 and see? Just some things to isolate the issue Thanks View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4022868#... Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...