JBM 1.x uses JBoss AS security framework to do authentication. You need to read AS documents for details. View the original post : http://www.jboss.org/index.html?module=bb&op=viewtopic&p=4246600#4246600 Reply to the post : http://www.jboss.org/index.html?module=bb&op=posting&mode=reply&p=4246600