1. Tomcat load balance/cluster/fail off   2. SSO based on CAS      tomcat      JBoss portal      SSL   3. Acegi filter / JAAS   4.