I guess I could do something like this: | Subject subject = (Subject) PolicyContext | .getContext("javax.security.auth.Subject.container"); But, how can I set this? Essentially, I want to set this to the new subject (with the additional principals) so that when the JBoss Portal JACC* APIs do a call like the above, they get the updated/modified subject. View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4071399#... Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...