Hi,

What are the factors involved in selecting form-based authentication over, say, custom authentication which can be simple to implement based on a db of registered users who have or don't have an indicator stored in their session(representing a login)?

An example of custom authentication would be the petstore 1.1.2. which incidentally replaces their jps version 1's form-based authentication. The jps docs are not well maintained IMO so they don't give any reasons.

Joe