Open Infinity SSO enables Tomcat's valve level security by using SAML 2.0 assertions.