Follow link bellow and in Login page enter username: exo and password: exo, or username: root and password: exo. In first case you will be in role 'exo' in second in roles: 'exo' and 'admin'. Try access three services which annotated with JSR-250 annotation. Try Logout and Login again with different name/password. Read about protocol at http://oauth.net.Get protected resource.