Joe- JBoss out-of-the-box uses the Tomcat SSO valves to achieve what you are doing. The only limitation is that they have to be virtually hosted within the same tomcat instance. If you are trying to do sso across multiple applications hosted in different tomcat instances and even completely independent JBoss instances, you need to look at one of our projects called: JBoss Federated SSO - http://labs.jboss.com/portal/index.html?ctrl:cmd=render&ctrl:window=d... It is one of our up and coming projects on JBoss.org and we are looking at a Beta release very soon View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=3974519#... Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...