We need to add a JBossWeb authenticator that can handle JASPI authentication. The JASPI configuration is already supported in the security domain model, so all we need is an authenticator that delegates the authentication to the modules configured in the security domain. This authenticator is to be configured as a valve in the jboss-web.xml of the Web application.