You can contact the mailing list, it is easier for you to get a response. https: / / opensso.dev.java.net / servlets / ProjectMailingListList For your question I think the steps that you used to not using WebServices, but for Web applications that will use the browser to do single sign-on. This infinite redirect error can be corrected using Agent 3.0 for JBoss, but as I said these steps are for web applications, but for webservices. I also am looking for a way to make the security of web services with opensso! If you have any tips or know of something would be good. View the original post : http://www.jboss.org/index.html?module=bb&op=viewtopic&p=4213165#... Reply to the post : http://www.jboss.org/index.html?module=bb&op=posting&mode=reply&a...