How can Picket link be used for sso from a portal hosted as a JBoss EAP web app connectiing to su domains / portlets hosted in seperate Jboss EAP instances.

We are using EAP6 and want user to logon only once in the portal