There are two ways:1. Emulate the auth headers. See http://www.jboss.org/index.html?module=bb&op=viewtopic&t=613282. Use HTTP basic auth. See http://www.jboss.org/wiki/Wiki.jsp?page=WSSecureEndpoint-Jason