I've got Subjects stored in a collection in my server that were created through means other than a web authentication (they are created via SOAP or RMI). How can I "set" them in Jetty so the HttpServletRequest's getUserPrincipal() and isUserInRole(String role) methods can be used properly? Just for some background info, I'm attempting this approach to enable single sign-on where the login point is from a standalone application.

Thought putting the Subject in the HttpSession using j_subject as the key (as configured in jboss-service.xml) would do the trick. Not so.

Please, please, please. Anyone give me some insight as to how this might work - I've gone through the "for-pay" docs tens of times and can't find an answer...