[Security & JAAS/JBoss] - Re: Federated SSO for web services