ragavgomatam, if I do programatic flushing via JMX in my custom login module, wouldn't that be equivalent? do you see any dis advantage of doing this? I am looking at these options because I wanted to remove the subject from the cache only based on some condition and not everytime the user closes the browser. let me know your thoughts http://wiki.jboss.org/wiki/CachingLoginCredentials View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4171649#... Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...