the following *kind* of entries in web.xml Security Filter com.k_int.svc.identity.util.TomcatSecurityFilter Security Filter /webservices/search/* Finally, your spring application context will need to make sure it defines the security service: Add the following classes to the hibernate session factory config com/k_int/svc/identity/datamodel/PartyHDO.hbm.xml com/k_int/svc/identity/datamodel/GrantHDO.hbm.xml com/k_int/svc/identity/datamodel/AuthenticationDetailsHDO.hbm.xml com/k_int/svc/identity/datamodel/PermissionHDO.hbm.xml com/k_int/svc/identity/datamodel/RegisteredOrganisationHDO.hbm.xml for later versions of the lib: create view TC_ROLES as select AUTH.USERNAME as USERNAME, P2.NAME as ROLE from IDENT_AUTH_DETAILS AUTH, IDENT_PARTY P2, IDENT_USER_ROLE UR where AUTH.USER_ID=UR.USER_ID and P2.ID=UR.ROLE_ID; and finally in context.xml