GetAccess SSO and WebLogic J2EE Web app

Question

I have a J2EE web app (servlets/JSPs) running in WLS5.1sp8. I want to use standard
J2EE declarative security to protect the application and a WLS custom security
realm to provide authorisation.
However, I need to use the Entrust getAccess single sign-on infrastructure to
do the initial user authentication. I was hoping there might be some way to propogate
the user's getAccess security credentials into the web application so that when
the user hits a protected web page, they are not prompted to login in again.
However, Weblogic should call into my custom realm with the getAccess provided
user name to check that the user has the correct role.
Anyone have any ideas how/if this is possible?
Thanks,
Martin

Answer 1

That was a good article on how to maintain access levels based on different user roles and i will need it down the lane. Probably, i used a wrong word when i meant 'unauthorized user'.
Actually, let me rephrase it,
Here is my issue rephrased,
1.) My problem is during authentication phase, I want a functionality where a person is redirected to login page by default if he tries to paste URL of some intermediate page of application directly without logging in.
2.) This would also pop up another question, which would be what is the best practice to maintain a user's info i.e. his login credentials throughout the application (I am just storing his user id along with a flag which says its true.) .
Right now, the way i do is, in each action after the user logs in, I check for a session attribute which tells if he has logged. Based on this check, I forward to the next page. But, i think its quite redundant and probably not a best practice. Hence, I need some other elegant way of achieving this.