Martin Kouba Thanks for the extra info Martin.

That's a clever workaround there I'll remove all usages of CDI.current() from Soteria for the next version. Mojarra btw also uses CDI.current(), so you may run into the same issue there.

I'm still wondering if the CDI spec shouldn't clarify or improve CDI.current() in some way. Maybe a parameter to the current method, e.g. CDI.current(JDNI) to indicate the underlying bean manager should be obtained via JNDI?