PicketLink is a security framework for securing Java EE applications.