This parameter indicates the database user. Here is an example. CSRFDetector.dbmsUser=guardian If omitted, "sa" is used.