[ https://issues.jboss.org/browse/TEIID-4561?page=com.atlassian.jira.plugin... ] Ramesh Reddy commented on TEIID-4561: ------------------------------------- When client call comes into the web layer, it redirects the call to the identity server (keycloak), then client negotiates the AccessToken. OAuthFiler is where Teiid checks the Access Token in HTTP header. it s expected that by the time OAuthFilter is called, the authentication is already done, and AccessToekn is sent with the call. You do not have access to Subject here, at least I think did not find a way access the Subject object, because there is no JAAS based security. In OAuth20LoginModule also I do not we have access to a Subject, but we will have capability to create Subject and associate credential for JEE pattern. -- This message was sent by Atlassian JIRA (v7.2.3#72005)