the following *kind* of entries in web.xml Security Filter com.k_int.svc.identity.util.TomcatSecurityFilter Security Filter /webservices/search/* Finally, your spring application context will need to make sure it defines the security service: Add the following classes to the hibernate session factory config com/k_int/svc/identity/datamodel/PartyHDO.hbm.xml com/k_int/svc/identity/datamodel/GrantHDO.hbm.xml com/k_int/svc/identity/datamodel/AuthenticationDetailsHDO.hbm.xml com/k_int/svc/identity/datamodel/PermissionHDO.hbm.xml com/k_int/svc/identity/datamodel/RegisteredOrganisationHDO.hbm.xml You'll need the following VIEW create view TC_ROLES as select AUTH.USERNAME as USERNAME, P2.NAME as ROLE from AI_AUTH_DETAILS AUTH, IA_PARTY P2, USER_ROLE UR where AUTH.USER_ID=UR.USERNAME and P2.ID=UR.ROLE; and finally in context.xml