Mircea Toma added a comment - 23/Apr/08 6:02 PM We need to do the followings: create page with links to the three types of authentication setup app. server with users and role or at least reuse the pre-defined users in Tomcat Basic Authentication create "logout.jspx" with a command button that triggers a redirect "logout.jspx" using navigation rules bind command button to the bean that invalidates the session setup servlet container with basic authentication Form Authentication create "form-login.html" – this will avoid session creation before getting authenticated reuse "logout.jspx", the bean, and related navigation rules from "Basic Authentication" Application Authentication create "app-login.jspx" page that uses ICEfaces components for input create bean that handles authentication define navigation rules for successful authentication