A configuration entry in the wsjaas.conf is overridden by an entry of the same alias name in the WebSphere Application Server configuration API security document. In JBoss I had JAAS configured in login-config.xml as follows: