hello, yes, you can (and it is a good way to) use the login.jsp. the file is defined in the web.xml. for any reason I don't know, I could not have it work with another name of file, replacing this file name. so better just to keep this file name and modify the file. I don't know the flex things, but what you can do is : a) modify the login.jsp to show a "nice" login window. b) put in the login.jsp a redirection (meta refresh) to send the user to whatever authentification application you want. You just have to go back from this application with provided the right things for tomcat : ie : the principal and the group. both are working. the b) option is more heavy to build and to tune to have work properly. It is only needed if you have to authenticate with special means (card, code number from a list, etc...) that are not provided as standard authentication by tomcat. the other question is : do you really need Flex things "in the middle of authentification process" ? if so, you may look also at SSO, to get the authentification propagated. also : for LDAP, version 2.6 (alpha 2) propose some authentification based on LDAP. You may want to look at it, at how it works. hope it helps... View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4025347#... Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...