I added the factory, introduced the "setActorId" in the interface and use the interface correctly in the JbpmContext now. The remaining problem is: How to "transport" the jaas information "over" JMS. I don't get the idea, heiko. How should this IdentityResolver work? Doesn't the AuthenticationService already do what you propse? We decided for adding the authenticated actor to the JMS message (via JmsMessageFactory) and log in again in the MDB by reading the credentials from the JMS message... View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4195995#... Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...