From your comments to the jBPM3 on Tomcat article, you certainly noticed it was incomplete. When I got to the authentication realm part, I could not keep going as the Tomcat built-in realms do not match the jBPM identity model. I did some prototype work in this area and got the jBPM3 Console to work on Tomcat. Please take another look at the finished article.