We want to SSO-enable jBoss at a host level & have all other underlying web-apps (hosted by jBoss) to automatically fall in line.
If the underlying web-apps are J2EE security compliant, then we can achieve this simply by tweaking their web.xml files.