If I understand correctly, the JAAS is the back-end authentication system you can configure to LDAP, Kerberos, etc. To use JAAS, I would have to uncomment the section in the handler.xml? How does this relate to the resolver:dataconnectors in the attribute-resolver.xml? - Joaquin