Anil Saldhana [http://community.jboss.org/people/anil.saldhana] created the document: "Primer on Web Security in JBoss AS" To view the document, visit: http://community.jboss.org/docs/DOC-17287 -------------------------------------------------------------- This article is a one stop resource for web security in JBoss Application Server.  Even though the configuration may change between major versions of JBoss Application Server, the features should be available starting JBoss AS 5 and beyond. h2. h2. What is provided by Java EE in terms of Web Security? The main security constructs in Web Security come from the web.xml security configurations until Java EE5.  These are reasonably documented in a use case manner at http://java.dzone.com/articles/understanding-web-security http://java.dzone.com/articles/understanding-web-security Starting Java EE6, with the introduction of the Servlet 3 specification, you have some security annotations that allow your to configure your servlets with security information. Some examples are: -------------------------------------------------------------- Comment by going to Community [http://community.jboss.org/docs/DOC-17287] Create a new document in PicketBox Development at Community [http://community.jboss.org/choose-container!input.jspa?contentType=102&am...]