in the 3.1 release it is a custom authentication (the filter and userbean) in 3.2 it is normal j2ee authentication. View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4004216#4004216 Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4004216