I meet the same problem when baseCtxDN is set to the root of MSAD the problem can be resolved by adding the following line to the login-module. <module-option name="java.naming.referral">follow</module-option> P.S. please make sure the server where the jboss runs can resolve the DNS name for your domain View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4173435#... Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...