My question is once the customer has entered the userid/password and been authenticated, how can I store the customer profile in the customer's http session?
The RDB realm in Tomcat does not have access to the Http session of a given user.