Roshan- You are correct. There needs to be a way to synchronize token generation and cookie creation with concurrent AJAX usecases. Although, synchronizing the token generation method can slow the server down very much and not scale. I will have to look at the code and figure out the best way to synchronize this without paying a high price for performance Look at this JIRA task to track the progress: http://jira.jboss.com/jira/browse/JBSSO-28 Thanks View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4024779#... Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...