I believe I had read in a previous post that you use some sort of custom front end for website security. We use the same thing for our Flex sites, but I have not had much success with the JAVA sites yet. We use .asp code to verify username and password information against a SQL Database. With the FLEX we were able to add an include statement into our default.asp (formerly default.html). However, the JAVA sites seem to not react well to this. I converted the index.html to index.asp and tried to add the include statement. With or without the include statement my index.asp page does not want to load...it hangs up on the load bar.
So I was wondering if you had any pointers on getting security setup on the JAVA sites?