[jboss-user] [Security & JAAS/JBoss] - Re: How is JBoss SSO SAML token been validated?