The JBoss AS 7 JAAS cache does not work correctly. The JAAS cache is using the CallerPrincipal as the cache key. The JBossCachedAuthenticationManager inserts the CallerPrincipal into the cache as the key. This does not work when the principal and CallerPrincipal names are different.