Yes I did grab the latest from JBoss and re-built both JBoss and JBossWS. I think I might know what the problem is. Our application specifies the "isolation from other deployments" scope by defining a loader-repository in jboss-app.xml. It looks like whatever classloader JBoss uses to load the handler chain resource can not see resources packaged in our ear. If we change our deployment to use a flat class loading model, then the above works; otherwise, I have to specify an absolute file path instead of resources on the CLASSPATH, e.g. @HandlerChain(file = "file://C:/temp/ServerHandlers.xml", name = "SecureHandlerChain") in order to get WSSE to work with JSR-189 endpoint. Looks like another candidate for a JIRA issue? Thanks, Yi View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=3958625#... Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...