Hi, I tried it before, but it doesn't work. 1. jboss-wsse-client.xml and jboss-wsse-server.xml must not be an empty files. 2. The client works fine, i.e. UserNameToken can be created in SOAP header successfully. However, server side cannot capture the UserNameToken from the soap header and do authentication against 'JBOSSWS' JAAS profile in login-config.xml. All jboss expert, please help Benson View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4140360#... Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...