I have one WEB App and one EJB App. I'm using JAAS and SSO Valve of Tomcat. How I can send user information in EJB call?
The SecurityAssociation work with ThreadLocal. Where I set Principal and Credential information in SecurityAssociation? if I set in my LoginModule, the informations of last user logged will be returned, it work like Singleton Pattern because LoginModule use a same Thread.