JMS does not address security other than providing basic username/password parameters on the ConnectionFactory interface. You would need to consult your JMS vendor's specific security capabilities. Most vendors do support secure destinations using user/name password, LDAP integration for credentials and encrypted mesaging using SSL.