The JMX audit logging is still using the javax.security.auth.Subject to get the user and remote IP address. This needs to use the AccessAuditContext for the remote IP and the SecurityIdentity for the user id.