Securing Java applications can be challenging to architects and developers. Authentication, authorization, and single sign-on (SSO) can pose a lot of difficulties for Java developers. Identity management is a requirement for many apps. Support for Security Assertion Markup Language (SAML), Kerberos, and two-factor authentication is important. In this session, you will: * Look at securing Java apps with PicketLink and Red Hat JBoss Enterprise Application Platform 6. * Learn about best practices for secure development and migration of legacy apps. * Configure a Java EE app to achieve security and SSO while deploying it on JBoss EAP 6.