In class UsernamePasswordLoginModule method login:

at the end of the login method, if useFirstPass is set to true username and credential should be added in the sharedState. credential is always null. Password get from the callbackhandler has never been copied from password to credential

To fix that bug
Replace
if( getUseFirstPass() == true )

{ // Add the username and password to the shared state map sharedState.put("javax.security.auth.login.name", username); sharedState.put("javax.security.auth.login.password", credential); }

With
if( getUseFirstPass() == true )

{ // Add the username and password to the shared state map sharedState.put("javax.security.auth.login.name", username); sharedState.put("javax.security.auth.login.password", password); }