Right now, creation of a principal which' type is configured as the "to" side of a required association is not possible. This is only correct for creation of principals on the "from" side of that association. The required association handler is registered with both the "from" and the "to" principal manager. The "to" manager should check whether the association is required or not by checking whether it is the "to" side (not required) or the "from" side (required). See also the definition of "required" in JetspeedPrincipalAssociationType.