1. Tomcat load balance/cluster/fail off 2. SSO based on CAS tomcat JBoss portal SSL 3. Acegi filter / JAAS 4.