Thanks for the scoop folks!
So if i had multiple web services deployed to a single JBoss AS then could a user use any of the web methods of any of those web services with a single logon. In other words, does JBoss maintain "security sessions" accross web services. Is this the purpose of Security Domains?
Thanks again